Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: O1S4Ih85pwdqlCblA7vdDkpkAakXHjePYKp+vNbULI0=
Subject key identifier: 5D:22:75:A3:5B:60:25:7B:23:93:6C:E3:A9:BE:DE:48:E2:94:F8:57
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019E1EA375AB11A02EFD80749BDCE0030C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 14C8
Signing time: Wed 13 May 2026 00:01:29 +0000
Manifest this update: Wed 13 May 2026 00:01:29 +0000
Manifest next update: Thu 14 May 2026 00:01:29 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: dUEgCTsPuYQZcq7mzkH9LYwt8eCjASaaIz6Hw4PWS+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:75:ab:11:a0:2e:fd:80:74:9b:dc:e0:03:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: May 13 00:01:29 2026 GMT
Not After : May 14 00:01:29 2026 GMT
Subject: CN=5d2275a35b60257b23936ce3a9bede48e294f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:de:b9:92:7a:19:61:8f:53:7a:5e:38:d8:
b5:9a:e0:78:a0:d1:6e:28:f9:6d:9d:ad:54:47:a2:
16:6b:2e:db:26:92:c4:f3:8a:6e:98:63:d9:62:38:
55:d7:7d:3f:1b:f5:99:b5:3f:ac:fa:8f:64:64:0a:
84:3b:0d:7c:9f:a8:86:94:0a:da:1c:b0:30:99:be:
21:ec:1d:37:7f:cd:15:b2:be:c0:e8:29:47:97:e1:
43:0c:a6:bf:bf:98:71:c9:8c:92:ee:24:41:e6:38:
46:8b:2a:22:0c:30:26:fe:5e:3a:a4:8b:fa:fc:06:
ff:33:f6:6b:f5:95:73:5b:51:85:52:25:10:4e:5f:
fe:e2:42:81:e2:ce:49:9d:30:90:55:74:a9:4c:64:
8f:d0:d3:d7:6c:eb:cc:c3:e2:7a:9f:64:1b:a4:e5:
4f:16:df:22:c1:38:bf:80:09:73:d6:69:00:7b:0d:
ed:74:11:8f:e9:4a:a0:7b:c8:30:09:38:d8:95:c5:
c6:ba:7d:82:72:e3:77:27:e7:aa:58:a5:8e:34:18:
c0:50:7d:6f:3f:9a:d4:04:9a:ee:9b:46:86:4e:1e:
ee:4f:57:2c:00:4b:b2:d8:52:e4:73:a2:1b:79:12:
2a:2c:b0:56:3d:b0:a8:40:83:2c:03:d0:a6:10:48:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:75:A3:5B:60:25:7B:23:93:6C:E3:A9:BE:DE:48:E2:94:F8:57
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:77:d1:d8:1f:1e:03:5c:1c:bb:3f:4c:18:89:91:40:8f:57:
a0:0d:a5:07:1d:c5:81:d6:22:18:14:94:bf:2e:9d:39:2a:96:
db:ca:06:51:76:c8:09:4e:ac:89:7f:1b:d5:76:aa:5d:71:e8:
03:40:cc:e8:fb:23:52:f4:5b:38:05:a4:6c:e7:94:b4:fe:15:
ff:f3:74:df:5d:51:c1:18:40:2a:04:3e:03:ef:38:29:1e:d2:
2a:6f:5d:b5:6b:e5:b6:fa:6e:99:ad:aa:ad:fb:93:8e:38:cd:
e5:e7:64:21:61:63:b4:5a:14:9d:27:0a:6e:bb:c7:06:e8:70:
d5:cf:37:47:9b:7d:49:c5:74:2d:a2:5d:1a:d7:46:09:2c:0d:
cf:e7:50:fa:6e:e8:65:9d:c2:3a:be:44:55:57:6d:37:8b:17:
5f:7d:56:90:44:65:b2:82:81:59:df:76:cb:c6:ea:e4:cc:66:
d9:43:25:36:db:98:fc:4b:0b:6c:4a:cc:3a:00:3a:e5:0f:ba:
4a:50:e0:df:b1:ee:c8:03:3a:c9:bc:1a:e5:4d:d4:69:33:02:
fa:26:90:5b:a8:86:7c:f2:9c:f8:69:cf:07:1c:04:ec:16:b8:
0f:b2:08:19:14:95:20:0d:1a:86:c9:7f:88:e5:d1:20:80:7b:
60:b2:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:02 2026 by rpki-client