Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: 03fPQkJuFKqUIa66R+jowpnabmC3b2qGZBa6p1nSEJ8=
Subject key identifier: C4:8E:14:04:F2:FB:89:EB:53:36:42:C3:29:3B:6E:98:F2:8B:8C:A1
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019E202367C443BDC243D61D4A4EDFA097E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1650
Signing time: Wed 13 May 2026 07:00:51 +0000
Manifest this update: Wed 13 May 2026 07:00:51 +0000
Manifest next update: Thu 14 May 2026 07:00:51 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: F5M2IbaE71Uf/ZN6GLKFcrFKwQjmlEoCbkvNjLpLl04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:67:c4:43:bd:c2:43:d6:1d:4a:4e:df:a0:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: May 13 07:00:51 2026 GMT
Not After : May 14 07:00:51 2026 GMT
Subject: CN=c48e1404f2fb89eb533642c3293b6e98f28b8ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:db:a9:23:0a:a5:08:bb:18:e0:8e:3f:f0:
7c:2b:2d:b4:46:d3:60:39:17:48:a2:de:f0:1c:d7:
70:66:40:01:a3:61:09:9f:07:14:e9:a2:5e:7e:bd:
f9:f3:d6:d8:0f:fd:02:f3:09:16:18:ab:8d:46:33:
c3:a1:01:b7:54:08:cf:ae:d2:73:c6:f4:8e:bc:2b:
73:1c:ee:9f:f0:f3:55:1c:76:fb:36:ef:b5:ee:8a:
aa:ae:ae:28:0a:7c:50:cf:bf:2e:fe:7f:30:44:62:
a5:49:94:80:8f:1f:82:12:3c:24:5b:61:e9:2e:bd:
1f:11:6a:99:13:6c:cb:e4:24:8e:ef:8c:1c:fa:fd:
6d:d2:bc:d5:9a:27:25:c5:01:56:e0:d1:88:f8:05:
49:59:8a:ed:93:1e:e9:73:0f:c3:4e:54:5e:fb:43:
92:0c:84:75:b4:ec:5f:50:a4:70:79:bf:4e:29:08:
e5:8f:03:91:61:f4:8b:3a:11:86:6d:c5:98:14:45:
f1:ee:61:37:ee:87:f7:76:f1:4b:62:4d:f5:d2:23:
16:db:1e:68:aa:ea:00:11:cb:31:e1:46:62:1b:6d:
73:15:86:a7:e5:ae:a4:de:54:62:cb:ef:ad:e0:26:
77:51:d8:03:57:56:a6:96:5f:2d:2d:45:89:0e:cd:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:14:04:F2:FB:89:EB:53:36:42:C3:29:3B:6E:98:F2:8B:8C:A1
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:af:2b:2f:f1:6f:d8:01:ed:97:51:43:72:09:24:71:4e:01:
6e:29:27:21:6d:d8:a4:3b:20:2c:54:ac:0d:58:b0:79:34:c8:
b0:94:0b:ee:91:a9:10:2e:44:02:67:cb:03:c0:ed:f0:22:28:
c5:4f:ff:98:21:8b:27:d9:99:2c:d1:67:42:ec:ae:f5:4b:c7:
98:62:93:ae:0a:26:5b:5e:4f:f1:cf:1f:42:52:d2:d0:a7:1c:
d9:8b:9f:7e:26:c5:8b:aa:95:0d:ce:0b:e8:40:10:10:cd:49:
5f:58:6a:0c:cf:65:fa:32:0e:c4:13:d2:73:db:f9:eb:6c:c2:
8f:28:bb:d4:b5:15:bb:2b:6f:58:60:cb:61:03:b9:0f:df:b3:
db:a1:9f:be:d6:69:84:dc:96:bf:ca:31:f5:cb:d0:23:5e:d4:
ed:50:25:ba:a7:39:79:b6:35:e7:e0:89:f8:2a:3b:f2:90:d3:
13:87:29:50:0e:f1:68:33:3b:2f:7d:a7:df:f0:82:4f:81:b4:
7b:26:f5:b3:a0:b9:e2:e0:b2:e4:23:56:14:48:94:10:70:26:
eb:f1:be:53:95:e8:53:e5:92:f5:cf:7d:70:82:32:c3:07:4b:
59:29:af:8e:0f:42:57:63:08:cf:33:bd:08:c0:ce:6f:ce:c3:
1c:3a:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:39 2026 by rpki-client