Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: koCLvDVW3QNAGlBLgnvzpaKJs13/lUM36zkHHfO+qxg=
Subject key identifier: 42:BA:99:4C:F3:2B:86:5A:6E:3D:40:E4:47:C6:06:42:D3:82:99:C2
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019E1DFDF2370224EE2CE9273E415BAA503D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1918
Signing time: Tue 12 May 2026 21:00:42 +0000
Manifest this update: Tue 12 May 2026 21:00:42 +0000
Manifest next update: Wed 13 May 2026 21:00:42 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: 7lKnuJRw9owFyqmCDzo3ujSSaQNpLmn+ez2VNf/7heg=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f2:37:02:24:ee:2c:e9:27:3e:41:5b:aa:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: May 12 21:00:42 2026 GMT
Not After : May 13 21:00:42 2026 GMT
Subject: CN=42ba994cf32b865a6e3d40e447c60642d38299c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:20:56:6e:b8:7f:98:e3:5c:d6:7d:91:3c:
e4:36:0f:a1:87:34:06:4a:83:6f:37:66:d9:5b:ae:
3d:49:d8:85:b6:94:b9:f6:b7:85:86:6f:1d:3f:16:
f0:9b:bf:2c:d2:a0:13:0b:a8:90:9b:66:6a:4d:a7:
ce:5b:96:05:b7:f5:b5:8d:a1:21:1c:c3:f6:02:34:
d5:dc:3a:19:6c:94:62:2b:89:91:7f:a9:89:f9:92:
ac:98:ba:49:35:71:b9:3c:ee:a0:3d:39:cb:f6:7d:
2e:0b:c4:96:15:ad:dd:8e:54:87:60:ae:03:fd:71:
6b:43:bd:08:ad:a3:e5:85:31:91:48:97:a6:ca:50:
7a:7d:60:18:15:65:bd:86:e2:b2:7c:3d:87:e5:26:
c3:4e:3f:4e:00:93:0e:92:d3:2e:b2:94:22:52:af:
86:5f:76:9a:31:99:0f:d4:15:77:02:e8:54:58:8c:
6d:63:ea:6a:75:2e:5b:05:85:92:45:2e:5d:a1:64:
e3:70:b5:85:87:cc:73:ce:f0:12:ce:ab:82:0f:c2:
1f:8c:2f:f9:40:f2:83:cb:e5:63:12:b6:5a:56:84:
eb:81:f5:46:cd:e7:12:ef:d7:d1:71:72:86:3c:1e:
d6:45:a7:e5:0e:05:ff:fe:28:93:f4:cb:45:2f:76:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:99:4C:F3:2B:86:5A:6E:3D:40:E4:47:C6:06:42:D3:82:99:C2
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:90:01:35:de:29:e1:04:9f:e4:7a:45:16:82:f6:00:9c:
5b:a2:58:f1:74:f3:97:5e:99:3a:65:cd:14:2e:4a:dc:11:be:
d8:48:57:90:64:61:4d:46:b5:01:72:a4:b7:41:ef:f3:57:cd:
bd:20:5d:b4:22:25:5d:95:8c:ac:e1:5c:82:6d:04:50:d7:eb:
ce:19:e7:34:94:3d:50:f6:10:ad:1b:f7:3b:c4:25:fe:23:35:
f9:df:a6:b8:78:ed:e7:b1:c7:49:ad:05:70:e0:11:91:4e:3b:
2b:ab:c7:23:cb:d5:9e:d3:a5:ba:96:b2:1e:91:90:d4:73:73:
be:3e:9b:c2:88:5d:72:56:f1:01:a6:c2:72:25:39:c5:12:09:
c6:59:36:ca:6b:50:82:fe:b9:af:32:68:eb:91:62:46:1a:e4:
9a:07:2f:23:97:72:d9:26:02:13:ea:fa:ad:50:d8:60:f3:b7:
e5:8b:4e:e9:71:2a:7b:07:b8:48:2c:10:1b:1e:ac:58:8e:c6:
7d:18:08:97:bd:d7:05:61:2b:67:7f:f0:aa:d8:62:9e:4d:88:
21:57:6e:db:24:86:96:02:f4:03:a8:9f:78:82:e1:78:5a:38:
4b:e4:e7:1e:95:de:eb:c9:0f:95:eb:59:bd:ba:37:7b:18:76:
8e:c4:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:43 2026 by rpki-client