Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: +M0zp0pAEjZ7oEbpikpXBglckI2bjLf83P9NbHvqKHY=
Subject key identifier: 9D:C5:D2:E3:7B:CE:8A:69:14:19:92:0B:38:57:7F:B2:7B:6D:22:70
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019E205A9093C4B632FE49D8DDDB36383956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 08:01:06 +0000
Manifest this update: Wed 13 May 2026 08:01:06 +0000
Manifest next update: Thu 14 May 2026 08:01:06 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: IcLK3ImxO8K1BlH6p0DkaOnVhK8mRtsEmz3XC1IEzZU=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:90:93:c4:b6:32:fe:49:d8:dd:db:36:38:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: May 13 08:01:06 2026 GMT
Not After : May 14 08:01:06 2026 GMT
Subject: CN=9dc5d2e37bce8a691419920b38577fb27b6d2270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:2a:bd:be:b6:a8:66:83:e5:be:85:22:50:
cf:1c:d1:76:e7:2c:2e:9d:95:79:2e:0a:86:93:bc:
6e:ca:40:99:cd:62:f2:d3:39:e4:56:5d:60:a4:c1:
bf:89:1a:48:90:a2:df:55:5c:1d:6c:60:b7:dc:da:
a8:f9:35:52:23:fd:3f:ea:87:f4:69:39:93:cb:d7:
dd:3b:fe:e0:85:35:db:d6:a1:48:61:d9:a8:f7:04:
e5:a1:37:cd:41:0e:f0:7b:e7:12:40:be:cc:00:9e:
d2:d9:12:64:5d:19:b8:7b:ba:73:bc:59:d7:0b:36:
ed:e6:9e:9a:07:2a:bd:84:26:63:47:cf:71:9b:3b:
8e:53:90:58:be:c4:37:b6:7e:2c:ed:3f:01:6b:f7:
32:3e:8d:87:82:af:33:22:8b:35:58:10:72:66:cb:
e0:9d:e3:1b:f0:c3:1d:e9:9b:3f:63:3b:45:52:ca:
6a:be:eb:76:8a:fe:ac:25:06:0a:60:75:5d:b6:c1:
e6:f8:6e:dc:c4:e5:57:79:19:b2:81:e0:b6:0d:bd:
17:8e:a6:c8:5a:fe:ae:f5:43:dc:c3:62:d1:e5:e5:
6d:1a:96:2c:f0:d6:46:63:ea:9b:57:66:3d:9f:03:
a2:c5:52:b8:fb:b0:0c:2f:05:77:8b:e0:44:45:1b:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:D2:E3:7B:CE:8A:69:14:19:92:0B:38:57:7F:B2:7B:6D:22:70
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:f9:d7:4c:42:53:ac:cd:b9:5b:6a:90:b7:28:6f:84:bb:
0b:b1:c6:86:03:37:c0:bd:f5:40:fd:1f:75:c0:44:db:0e:48:
47:b7:e8:d1:d4:76:13:7a:b5:a4:7e:57:fc:c5:04:87:b5:69:
ff:47:3f:e8:c9:bf:c6:aa:d4:5f:61:16:9f:60:2e:c2:5b:51:
83:0f:84:f2:ee:ab:8f:97:eb:51:c3:bd:77:ac:35:39:1b:df:
9b:94:a6:83:7f:b7:f2:f1:80:6f:f1:de:f4:d0:43:14:c4:5c:
1b:b6:8a:a4:f4:2e:81:e8:db:74:85:55:4d:46:db:7b:a3:66:
ca:5a:2a:1f:18:bd:e9:5c:68:9e:42:84:d2:a1:13:f4:f8:93:
72:d6:43:5d:0f:5e:10:23:8d:96:57:ec:3e:48:a1:82:13:16:
a9:fa:10:d3:b0:65:fb:db:de:77:89:4f:54:3a:3f:f2:f8:7f:
58:2f:f2:07:c2:eb:a9:a7:2d:66:e4:b7:e7:d8:55:9b:ef:06:
5a:45:c3:64:e3:eb:f9:e8:bd:3f:c2:67:9b:d3:15:c0:16:b7:
a7:61:c2:e3:8d:7c:3a:fe:e3:46:fc:3c:42:68:d0:45:30:a3:
e5:b8:d4:f0:20:04:c1:e2:c1:5a:49:94:b8:64:ad:00:96:97:
c3:ed:94:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWpCTxLYy/knY3ds2ODlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0
YjZhMmUwHhcNMjYwNTEzMDgwMTA2WhcNMjYwNTE0MDgwMTA2WjAzMTEwLwYDVQQD
Eyg5ZGM1ZDJlMzdiY2U4YTY5MTQxOTkyMGIzODU3N2ZiMjdiNmQyMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfUqvb62qGaD5b6FIlDPHNF25ywu
nZV5LgqGk7xuykCZzWLy0znkVl1gpMG/iRpIkKLfVVwdbGC33Nqo+TVSI/0/6of0
aTmTy9fdO/7ghTXb1qFIYdmo9wTloTfNQQ7we+cSQL7MAJ7S2RJkXRm4e7pzvFnX
Czbt5p6aByq9hCZjR89xmzuOU5BYvsQ3tn4s7T8Ba/cyPo2Hgq8zIos1WBByZsvg
neMb8MMd6Zs/YztFUspqvut2iv6sJQYKYHVdtsHm+G7cxOVXeRmygeC2Db0XjqbI
Wv6u9UPcw2LR5eVtGpYs8NZGY+qbV2Y9nwOixVK4+7AMLwV3i+BERRsWIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3F0uN7zoppFBmSCzhXf7J7bSJwMB8GA1UdIwQY
MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt
NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh
LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKH510xC
U6zNuVtqkLcob4S7C7HGhgM3wL31QP0fdcBE2w5IR7fo0dR2E3q1pH5X/MUEh7Vp
/0c/6Mm/xqrUX2EWn2AuwltRgw+E8u6rj5frUcO9d6w1ORvfm5Smg3+38vGAb/He
9NBDFMRcG7aKpPQugejbdIVVTUbbe6NmyloqHxi96VxonkKE0qET9PiTctZDXQ9e
ECONllfsPkihghMWqfoQ07Bl+9ved4lPVDo/8vh/WC/yB8LrqactZuS359hVm+8G
WkXDZOPr+ei9P8Jnm9MVwBa3p2HC4418Ov7jRvw8QmjQRTCj5bjU8CAEweLBWkmU
uGStAJaXw+2UEA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:22 2026 by rpki-client