Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: NJW6o0mGujlm77lu97KNaQyYx4ql7xJO6SHwlySv+hk=
Subject key identifier: 76:F1:1D:6C:43:E4:2E:4B:17:F1:51:32:58:37:1E:50:2D:7F:EF:68
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019E20FF6117778324D98015FACC759EF6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1860
Signing time: Wed 13 May 2026 11:01:07 +0000
Manifest this update: Wed 13 May 2026 11:01:07 +0000
Manifest next update: Thu 14 May 2026 11:01:07 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: dhnu2AfDaqdfxYN0sB37iHwMBZRbFf6DaEuad4HQ9u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:61:17:77:83:24:d9:80:15:fa:cc:75:9e:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: May 13 11:01:07 2026 GMT
Not After : May 14 11:01:07 2026 GMT
Subject: CN=76f11d6c43e42e4b17f1513258371e502d7fef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:c0:2b:07:5d:8a:36:b1:67:e9:8b:69:75:
4e:c6:c3:5a:42:0d:79:cf:6b:b1:47:3b:ac:c4:fa:
f6:e9:de:ab:0d:66:65:3b:6e:48:37:b2:09:bf:90:
2b:a3:01:79:c3:bf:74:95:96:a0:2c:94:6f:68:0a:
ba:af:7b:77:4d:b8:6e:33:9e:18:be:f5:fa:a6:4d:
ee:78:90:b0:21:38:ed:7e:6c:09:25:60:8f:fd:d8:
dd:b9:a2:9b:d1:ec:66:c7:12:15:94:9b:48:2f:1c:
95:53:05:bc:69:67:07:18:3c:af:26:9a:9f:51:7a:
f0:40:63:09:73:c5:79:72:e5:89:8d:0a:dc:46:d2:
8c:33:ed:0c:5d:2d:e4:f8:0d:b5:52:9f:08:28:0f:
b6:84:6d:79:0a:7b:01:7f:7e:dd:18:8d:05:5d:de:
19:12:2a:70:23:27:f3:4d:1d:ae:cf:15:c5:5b:1e:
af:01:de:69:ec:e6:d1:ca:a5:94:29:75:f7:7f:9f:
2f:4a:8a:d8:4c:2c:23:9d:20:be:ea:37:d2:47:89:
8d:e4:d7:e1:a1:9d:5f:34:ae:06:41:ad:5b:77:dc:
0f:d1:8b:d0:a5:b5:98:af:76:2a:b3:a4:f1:54:0a:
e1:68:06:cd:bf:03:5a:c3:90:98:81:8f:c8:87:f1:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:1D:6C:43:E4:2E:4B:17:F1:51:32:58:37:1E:50:2D:7F:EF:68
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2f:5c:10:4c:44:51:ed:cd:dc:4b:32:e1:37:f9:c9:0e:09:
72:a8:31:ff:ea:82:3f:b2:04:e6:52:2b:7c:e7:00:5d:d0:c8:
bc:af:95:6a:07:58:48:a5:55:0a:29:8c:8a:8e:64:1e:51:c7:
da:6b:7b:19:91:bc:d9:a3:ab:ee:2a:f5:6a:67:8a:64:48:2e:
f6:46:5e:27:fb:ee:11:e8:22:93:c2:e6:82:a7:96:f2:72:7c:
92:d2:cb:5a:9c:a6:db:48:ba:0e:a4:75:30:d0:60:17:d5:4f:
b8:06:a1:cd:b6:86:5e:8f:10:fc:b2:6e:5c:d6:25:8b:97:3c:
08:3a:93:d7:d2:b8:9c:d7:9a:dc:b3:8e:1d:d5:81:d2:97:81:
be:69:98:5e:20:a5:6d:1f:a3:df:12:9f:2e:c5:85:ca:6d:67:
c7:fc:9a:ad:0e:ba:80:e2:ed:f2:28:37:b9:bc:cb:a9:d5:de:
21:5a:93:41:28:9e:54:f7:bd:f3:b0:d3:06:46:7f:94:06:b7:
13:4d:d8:fd:1c:4f:1c:33:9f:7d:60:5f:b6:02:3c:d5:54:03:
66:ba:52:4b:56:de:5c:97:8e:c4:8c:57:bb:ac:ba:0b:62:28:
2b:75:65:4e:a6:1f:87:96:6e:78:38:03:95:ea:ff:ae:ca:7c:
76:25:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:46 2026 by rpki-client