Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: zYD/xJ5suNS4Nnov1WJbE9aLthLv9N76T6tR+if+pJU=
Subject key identifier: EC:8A:D7:FF:B3:F2:37:42:E6:B9:56:D0:00:72:AD:7E:B2:13:FD:EA
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019E1D9083CA7392EB8CA21B7E77A0A6B4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 03DF
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: gfBZ87Pew4XcYSnbzVBuaP6Shzgbglj0ihc4XLxszlk=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:83:ca:73:92:eb:8c:a2:1b:7e:77:a0:a6:b4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=ec8ad7ffb3f23742e6b956d00072ad7eb213fdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:ed:9a:e4:53:13:3a:f4:bf:ae:be:f7:7e:
b3:22:92:4d:7a:e6:1a:b4:f8:3f:91:d7:5f:e5:ed:
13:b9:de:42:c4:42:5f:bb:e4:a3:2b:27:40:90:08:
b6:64:37:a0:44:97:07:e1:d8:02:b0:2d:dc:8a:d2:
2f:21:90:3d:6b:3f:b8:b9:42:5d:6c:54:e5:60:e2:
30:4e:b5:23:36:ee:47:63:25:ae:fa:b4:e6:db:ad:
45:d6:96:c8:2f:9c:76:01:24:a7:4b:dc:e8:62:5a:
a0:46:ea:69:36:47:c1:98:66:3e:36:4a:ed:b7:0e:
0f:20:0a:29:93:49:a3:0f:e0:e5:19:6e:b6:fa:f8:
3c:d4:0e:12:75:36:cf:c0:8a:d4:5f:81:07:bd:d4:
8c:fe:8d:30:bd:2f:9e:76:e8:d5:d1:b2:dd:40:04:
4d:be:95:56:3a:8b:06:89:8d:ad:c6:a4:92:65:32:
ce:f0:2b:1a:d5:22:b4:6b:6a:5c:25:0e:cf:23:ca:
19:14:3e:66:8c:de:35:34:ef:e8:bd:e1:1a:fa:40:
f6:71:ca:c6:9f:6f:3c:9a:dc:fb:85:b8:ad:06:84:
d4:4e:c7:3e:a7:a3:4b:2b:0b:50:76:e4:e4:74:38:
f2:65:e5:e9:70:da:9b:c8:1d:3c:c0:30:a3:92:33:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:D7:FF:B3:F2:37:42:E6:B9:56:D0:00:72:AD:7E:B2:13:FD:EA
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:a0:76:43:e8:a0:7f:c7:fd:59:fe:d0:e6:2b:bd:b3:fd:
a5:71:7c:bf:68:45:84:ce:74:c9:aa:cd:4a:ce:66:c1:3b:11:
9c:39:0f:36:38:99:d2:49:c4:e4:de:1c:88:cf:a6:56:4a:38:
c2:25:f6:35:35:d7:00:25:ab:2a:06:e3:e3:c9:f0:58:19:75:
47:3d:3e:37:0f:0b:f6:5c:fa:b4:a7:0e:72:ec:af:3d:11:f1:
da:f3:e6:75:a1:b5:82:df:2f:86:37:c0:82:94:f8:91:9f:c4:
79:9e:f1:0f:ff:97:ed:1c:8d:da:33:3f:79:76:1b:58:84:75:
a0:fe:ee:07:9a:1d:23:e7:ff:05:6d:3d:75:dc:fc:98:0e:9b:
d9:0e:2c:ce:a7:51:50:12:c6:81:99:db:7a:81:89:e6:05:ad:
d3:c7:8e:2a:ff:f1:16:77:df:e5:7f:7b:85:76:37:a8:d2:f4:
cb:cc:f5:9d:de:18:17:06:ed:d7:c3:cd:0c:a3:09:00:e2:1f:
25:56:df:7f:bb:7b:1e:f3:20:45:5b:80:85:8f:e2:4c:ed:79:
5d:c1:33:13:70:89:d6:63:b5:27:ca:00:40:c3:eb:44:a3:1b:
e1:5d:27:b2:13:23:b5:5e:72:4e:e2:5a:32:aa:ca:39:9b:ae:
48:23:be:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIPKc5LrjKIbfnegprT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjYwNTEyMTkwMTEwWhcNMjYwNTEzMTkwMTEwWjAzMTEwLwYDVQQD
EyhlYzhhZDdmZmIzZjIzNzQyZTZiOTU2ZDAwMDcyYWQ3ZWIyMTNmZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C7tmuRTEzr0v66+936zIpJNeuYa
tPg/kddf5e0Tud5CxEJfu+SjKydAkAi2ZDegRJcH4dgCsC3citIvIZA9az+4uUJd
bFTlYOIwTrUjNu5HYyWu+rTm261F1pbIL5x2ASSnS9zoYlqgRuppNkfBmGY+Nkrt
tw4PIAopk0mjD+DlGW62+vg81A4SdTbPwIrUX4EHvdSM/o0wvS+edujV0bLdQARN
vpVWOosGiY2txqSSZTLO8Csa1SK0a2pcJQ7PI8oZFD5mjN41NO/oveEa+kD2ccrG
n288mtz7hbitBoTUTsc+p6NLKwtQduTkdDjyZeXpcNqbyB08wDCjkjNUoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyK1/+z8jdC5rlW0AByrX6yE/3qMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmmgdkPo
oH/H/Vn+0OYrvbP9pXF8v2hFhM50yarNSs5mwTsRnDkPNjiZ0knE5N4ciM+mVko4
wiX2NTXXACWrKgbj48nwWBl1Rz0+Nw8L9lz6tKcOcuyvPRHx2vPmdaG1gt8vhjfA
gpT4kZ/EeZ7xD/+X7RyN2jM/eXYbWIR1oP7uB5odI+f/BW09ddz8mA6b2Q4szqdR
UBLGgZnbeoGJ5gWt08eOKv/xFnff5X97hXY3qNL0y8z1nd4YFwbt18PNDKMJAOIf
JVbff7t7HvMgRVuAhY/iTO15XcEzE3CJ1mO1J8oAQMPrRKMb4V0nshMjtV5yTuJa
MqrKOZuuSCO+oA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:31:28 2026 by rpki-client