Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: 0YvtFSBNaP2+UL+UNtz1nki55aoZTDDsdqRCTL6XorQ=
Subject key identifier: 72:C0:2C:43:3B:55:DA:CC:07:1C:19:36:4C:01:DE:66:0C:BE:16:38
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019E1F115A6DEF922E7407B28ED72722A41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 07A9
Signing time: Wed 13 May 2026 02:01:31 +0000
Manifest this update: Wed 13 May 2026 02:01:31 +0000
Manifest next update: Thu 14 May 2026 02:01:31 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: Vb0Mb3VEM3veCPCrKvrEOo3esUE.roa (hash: wsQvVbcVPuKEsiVmA3jQc45iZrjeqJsQtYSOLDFq6yA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: zKrrvC1mdTvbjoTfzMSuJPDkZBQYjTLm2cT7qprBgkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:5a:6d:ef:92:2e:74:07:b2:8e:d7:27:22:a4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: May 13 02:01:31 2026 GMT
Not After : May 14 02:01:31 2026 GMT
Subject: CN=72c02c433b55dacc071c19364c01de660cbe1638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:b3:d6:b3:75:44:75:a4:a6:7f:c4:7a:06:
61:60:41:bd:f9:2b:8c:ca:92:54:7a:26:77:0e:9c:
cc:82:7a:c7:a8:67:d0:d3:08:df:cb:52:96:de:62:
69:32:8a:70:e9:d8:ce:b1:d3:95:82:f5:be:01:d3:
1e:ad:20:00:94:67:3b:d0:ef:6c:83:e0:0d:ec:f6:
f7:9c:97:cc:62:b2:e8:2a:d4:50:04:23:12:fc:b2:
8b:69:03:c2:ea:35:21:dc:ca:39:76:58:bf:a1:e7:
e1:2a:7d:95:63:2b:c3:d7:e2:3d:91:1c:e4:9d:58:
bd:28:fd:cf:ba:01:fa:d1:80:03:d8:6f:0f:47:3f:
8c:f4:ad:dd:49:ff:c3:a2:a3:4b:c2:fc:4c:7b:39:
97:b2:17:15:70:1c:c2:18:60:34:e0:6a:ba:61:c3:
90:a2:2b:7b:f2:30:db:20:b0:f0:6f:bd:ba:35:ce:
55:28:f5:54:f1:b5:74:53:f5:4e:39:c6:87:73:ee:
86:c5:72:bb:e8:bf:bc:4e:80:46:fa:3a:5f:af:f2:
d6:fb:33:44:ad:b1:12:de:ac:5c:19:bc:ce:de:d6:
25:3b:ed:e3:2a:99:ca:fd:e4:93:cb:24:64:c7:a5:
d3:32:4b:d4:c3:c5:fb:fe:4d:1d:60:b0:67:70:fc:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C0:2C:43:3B:55:DA:CC:07:1C:19:36:4C:01:DE:66:0C:BE:16:38
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:46:02:d6:7b:c2:2f:db:1f:28:47:46:99:90:7d:3a:b8:
16:fa:0d:b0:16:8c:51:37:b3:be:75:a4:15:28:54:10:12:cb:
94:e2:d8:5f:cc:8f:09:97:4d:62:0e:49:4a:2e:71:6a:1d:2a:
25:1b:b9:8d:25:e6:eb:66:53:0d:91:c8:44:11:7e:54:ce:f1:
7b:13:ae:ab:5f:9f:6d:5c:0a:70:ce:30:5b:5a:95:5b:93:93:
95:8c:13:fe:b8:e8:4e:87:bf:e1:46:fd:96:e4:27:4e:d2:fb:
27:f9:4b:89:29:54:9c:11:9a:59:55:34:f9:8a:21:bc:4b:0b:
0c:dd:59:74:1a:0c:95:31:31:43:f3:46:5b:7f:f0:88:16:65:
fb:d2:b1:19:4f:82:73:33:d5:fa:6e:8e:23:9d:b4:14:65:d9:
e0:fe:fe:54:2a:0b:b5:8b:e4:c9:d1:6d:e9:0e:a8:4a:5b:df:
74:41:06:a3:2c:fa:1c:fc:44:8b:6c:98:90:77:cd:19:05:01:
af:7a:82:cc:0b:c3:87:43:34:18:cf:48:83:d0:62:60:04:17:
03:9c:d6:8c:22:33:44:60:ef:fd:22:d6:66:84:f5:84:52:78:
43:c6:64:62:da:6e:3d:d1:c8:04:35:f2:df:15:0c:17:00:78:
59:6a:e0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:24 2026 by rpki-client