Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: T1Nym9T+hwAjCiStvwpI0xLWxXHZ9tBZOtiL6u+0Xqc=
Subject key identifier: 13:F8:DF:0D:58:40:81:05:0C:3D:78:63:C1:75:C7:A9:02:E8:18:AF
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 019E205A83F274ABC4927BBA0F165770EA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 0511
Signing time: Wed 13 May 2026 08:01:03 +0000
Manifest this update: Wed 13 May 2026 08:01:03 +0000
Manifest next update: Thu 14 May 2026 08:01:03 +0000
Files and hashes: 1: aJE-N8XrZPq5jSOvU59Z2wJzXNU.roa (hash: UfTHGBjQ2zBZbaFR7hvw5/SPevdqWF43OgeNjM2xfIM=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: NYZ8EBjuk9yMhX1LnEqWBCovj6CZmQE6DxtPsxMNxrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:83:f2:74:ab:c4:92:7b:ba:0f:16:57:70:ea:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: May 13 08:01:03 2026 GMT
Not After : May 14 08:01:03 2026 GMT
Subject: CN=13f8df0d584081050c3d7863c175c7a902e818af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:fc:ff:ce:3c:5d:59:1b:2d:2b:b3:cc:9a:
cd:8b:e4:fd:5b:9f:d9:7d:c6:f2:9b:3f:d0:1f:36:
fc:12:82:02:4b:07:d3:99:c6:bd:4c:98:4d:f5:92:
97:d2:f0:28:3e:3c:9b:af:3f:3f:e0:41:19:55:51:
79:d5:cf:cf:24:f4:bf:ea:3d:5f:54:60:0a:c5:91:
36:f8:7b:f7:6c:9f:e5:6c:f0:85:70:72:97:e6:99:
77:dd:37:e2:c7:ca:b4:8b:99:49:ba:45:42:be:be:
b9:58:9b:01:cc:be:05:fc:ab:4f:b6:d9:24:70:07:
53:93:36:e7:a4:be:50:6b:58:84:55:9a:64:9d:25:
53:1c:03:d1:94:f3:e6:43:05:11:3a:46:fc:d6:ea:
7b:f0:c0:85:5b:e3:58:cc:e8:9c:ef:1a:cb:0d:65:
b2:ba:38:25:1d:8e:92:d4:92:31:67:b6:8c:36:f2:
fd:05:58:46:81:b9:c2:fd:e2:88:90:26:d6:88:7c:
34:06:37:fe:8d:45:b0:9a:7c:5e:78:01:93:c4:a5:
11:3c:a4:f3:20:d5:5f:39:7f:04:48:8b:b2:f5:93:
c0:68:c2:f9:90:06:12:3a:e1:82:08:5c:1b:9a:34:
55:b4:f7:e8:2d:41:f8:33:e4:ca:08:50:11:10:97:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:DF:0D:58:40:81:05:0C:3D:78:63:C1:75:C7:A9:02:E8:18:AF
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7b:e1:e8:68:06:9c:4d:df:cd:07:16:a1:d5:4d:a4:25:b9:
0e:d9:09:a9:b4:59:b7:52:87:49:cb:51:87:4e:4d:1a:4b:7e:
1c:e6:33:b9:a7:43:f6:2e:2e:16:58:5c:f4:b5:44:25:aa:96:
6b:98:87:e2:e6:aa:c1:9e:c8:d5:57:26:8f:b9:8f:c0:36:9a:
68:26:af:17:e3:53:14:b9:c0:c4:71:c1:ac:7c:a9:d1:84:e8:
c7:ee:10:80:84:67:63:08:cd:78:f9:24:3a:2f:c4:ae:d1:dd:
e5:62:08:01:ac:60:f4:35:cb:c5:eb:18:45:72:65:0c:7e:ee:
d1:40:da:a2:e0:9c:28:a4:d3:c2:55:7f:a0:a6:9e:73:37:58:
97:88:bb:5e:f8:be:2c:c2:32:8a:e6:38:57:88:b6:9d:09:68:
73:6f:c8:69:aa:9f:6b:fb:60:df:41:78:c7:97:2e:a4:35:c8:
81:85:4b:49:f5:0c:13:e0:bb:e1:1b:d2:6d:0d:46:9d:98:24:
84:01:92:87:ed:da:1b:e1:b9:a2:2e:d4:bf:c9:35:a1:62:31:
9e:ec:aa:dd:94:a3:50:80:d3:d9:92:e3:43:ca:c2:42:9d:0e:
0b:e5:40:cd:e0:9c:be:16:3e:2e:85:ca:19:e1:e3:53:7b:bc:
c4:22:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:05 2026 by rpki-client