
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: QMhlyUqH0rzLZ6g+0nTp18SyNo3NQhyv9pscS6nd3Xk=
Subject key identifier: 86:63:82:53:8F:32:60:77:12:09:38:B4:C7:C0:0F:55:F1:DA:7E:6E
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 019E1FB5AF1C72F34F6F81457C07172B28BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 1407
Signing time: Wed 13 May 2026 05:01:00 +0000
Manifest this update: Wed 13 May 2026 05:01:00 +0000
Manifest next update: Thu 14 May 2026 05:01:00 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: Hny1VD+lXxTy1Mbhr1xICHyaW19Zek8hxrn11FDwJzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:af:1c:72:f3:4f:6f:81:45:7c:07:17:2b:28:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: May 13 05:01:00 2026 GMT
Not After : May 14 05:01:00 2026 GMT
Subject: CN=866382538f326077120938b4c7c00f55f1da7e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:28:29:98:3a:b0:48:9a:1f:70:e1:ac:31:
2c:1e:f9:2f:a4:dc:cc:e9:db:e2:c7:40:22:47:33:
10:0e:8e:b0:f0:88:b2:f0:5c:22:66:a8:b6:a4:31:
ac:4b:b9:34:ac:08:b2:09:87:16:cc:ba:09:ef:17:
0f:1d:6b:30:b3:0d:5a:81:d1:50:46:de:cb:fc:83:
fd:d1:9e:9a:e5:bf:11:d4:52:d1:ae:83:8b:b3:22:
c6:be:d4:a3:d9:30:0b:84:fd:6a:76:9c:b9:0c:fa:
0b:e5:06:db:a7:92:5a:eb:cd:54:5e:4b:40:c2:f1:
b4:ed:87:97:3e:c7:27:7c:4e:95:9d:05:22:e3:a5:
d1:6f:69:54:90:b0:d9:bc:b1:b5:fd:bf:a8:1a:d5:
0b:eb:57:29:b0:06:4b:ba:9e:08:63:32:f1:c6:0e:
90:c1:ba:79:05:d2:bb:ed:54:05:ba:f8:86:c1:cc:
e9:cf:a2:9c:00:c1:2f:d4:72:ea:72:d3:2c:8a:11:
af:2e:36:f4:44:95:b2:26:3a:10:23:1c:12:1a:cd:
74:d8:c5:22:5b:6a:9b:46:01:29:a6:5c:bd:24:b1:
6f:57:8a:dd:6f:6b:b1:1f:1d:ce:52:88:5d:15:f0:
93:be:09:4a:d2:37:e4:ec:a5:e7:5a:e0:c5:c3:20:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:82:53:8F:32:60:77:12:09:38:B4:C7:C0:0F:55:F1:DA:7E:6E
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:9b:83:d3:7e:c2:8d:0d:04:2b:44:18:a5:ed:9f:1e:e0:
6b:a9:cb:aa:fc:76:31:b5:cc:89:96:60:bb:0f:d3:a0:a0:8f:
19:9f:75:3b:fb:5d:2e:18:94:00:3c:91:22:d4:94:6c:14:89:
ec:82:19:49:0c:d2:96:cd:85:dd:9e:c5:20:c0:e8:0a:d7:b9:
96:a0:f3:26:f6:9e:e1:19:bf:55:9a:a4:5e:fd:43:05:7c:70:
89:3c:e2:49:40:9d:7a:8f:87:13:76:03:9d:be:d7:c1:87:7c:
ba:43:15:5f:af:3d:ac:47:33:ac:9c:19:ea:43:64:b2:84:26:
00:4f:17:70:62:f5:37:a4:a8:64:35:32:92:ce:5b:3b:d5:9b:
55:6d:07:fc:60:08:99:38:a8:14:36:5b:4c:18:ab:78:69:8f:
c5:25:10:40:68:3e:41:71:29:62:0f:06:54:48:9a:68:7e:fb:
3a:bc:9a:0e:53:2b:4f:2f:71:57:27:6e:f7:fa:62:ca:23:b3:
74:a2:d5:87:b1:f8:fb:97:e2:e6:85:0c:62:d6:12:b4:a2:88:
06:74:e4:0b:4a:48:5b:09:3c:b0:e3:ce:7b:ff:a5:6d:36:17:
83:10:38:a5:38:ac:ed:4f:cb:56:46:25:30:f3:32:ec:f2:9f:
ac:46:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:34 2026 by rpki-client