Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: Sqhpq92h7m3CH6wUVoUFYAwjS/MmFfU2tqafAtm1wfQ=
Subject key identifier: 8D:FA:D8:4B:21:3E:82:90:DD:EC:C8:10:50:5A:99:5A:A7:80:CE:79
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019E20232E2C0D703F961517B3A365861269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 07:00:36 +0000
Manifest this update: Wed 13 May 2026 07:00:36 +0000
Manifest next update: Thu 14 May 2026 07:00:36 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: +mrMDVE6eEzbgggv11NPUDbMECRscgyV/7opDJf6MsA=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:2e:2c:0d:70:3f:96:15:17:b3:a3:65:86:12:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: May 13 07:00:36 2026 GMT
Not After : May 14 07:00:36 2026 GMT
Subject: CN=8dfad84b213e8290ddecc810505a995aa780ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:ae:d2:56:ed:4f:36:9f:96:5d:72:ef:fb:
2b:6a:75:9a:cb:18:13:12:3a:0e:27:80:cd:4b:4a:
70:88:61:5c:1f:12:5f:ac:f5:a7:e7:3c:e8:39:39:
aa:95:5f:35:52:23:ec:ab:e6:f8:01:2e:22:2f:b5:
24:78:bf:a8:32:be:27:38:98:e9:80:d6:20:40:ed:
a0:af:e1:e6:20:2d:8d:f0:a2:33:ca:03:dd:70:c1:
5a:5f:f3:b4:a8:3d:e9:68:a5:22:bc:13:08:39:cc:
f9:c0:b5:9f:00:16:85:7e:df:7a:08:62:b8:5d:31:
2b:e2:95:1c:93:a9:86:4d:c9:c4:b9:69:63:c6:f7:
e1:21:86:b5:4c:ad:d8:76:c8:84:8b:18:bd:ba:00:
04:14:de:3f:ac:b5:a4:fb:9f:1c:9c:b7:45:44:e4:
8a:49:da:5b:c7:0e:54:a3:d5:43:83:45:35:56:09:
a9:ff:65:a1:b7:b3:7c:3b:fc:96:4d:f5:cf:e0:a9:
88:83:6e:c8:59:c6:63:14:d3:43:e9:2f:f4:21:67:
cc:48:83:37:d1:f3:58:0a:9e:f0:68:e8:fa:43:d3:
d3:2b:2f:53:18:d3:23:94:40:94:45:f9:31:d2:60:
17:7e:fc:72:25:38:c3:3c:4a:d5:1a:38:84:46:ec:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:D8:4B:21:3E:82:90:DD:EC:C8:10:50:5A:99:5A:A7:80:CE:79
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:25:6a:5b:3a:39:bb:56:88:42:89:0f:8e:a9:eb:8f:a8:ff:
5b:4a:bd:35:dd:45:9a:d7:5e:f8:c8:0a:4d:3c:aa:3c:b8:32:
62:83:65:cd:b6:92:7c:62:f2:bd:cc:92:c7:7e:36:11:71:ba:
8f:ae:ec:3a:bc:bc:30:09:4d:b6:a6:20:66:8b:22:3d:7f:bc:
40:70:d7:eb:6c:88:c1:f0:e6:a4:06:8c:dc:07:0f:28:6d:88:
f8:7c:4b:23:24:6b:f7:2a:a7:24:84:e3:2b:6c:fa:7a:db:e6:
6f:fc:07:51:5e:e3:a5:76:7e:04:8a:c8:e7:d4:ba:a5:b8:23:
65:87:b5:f5:c5:33:fa:b1:55:f6:29:a3:52:53:43:2d:96:f9:
6e:1c:8c:f2:93:d9:c5:a4:24:31:f3:17:2f:c0:f6:92:f2:08:
da:b7:fb:aa:ef:da:d3:64:16:f3:c5:e4:bc:41:bb:83:68:f6:
56:68:e5:5d:0d:10:19:a6:4c:01:3d:8f:61:54:06:13:23:03:
c4:3e:fb:95:2c:4a:b5:11:2a:a2:aa:81:40:c8:dc:08:46:ee:
e1:ec:43:f8:60:b5:5f:93:f2:17:04:5f:55:dc:e4:10:cd:40:
b2:66:21:d0:dc:33:fc:34:2b:af:91:e7:bb:b3:a2:3e:84:f5:
0b:60:93:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gIy4sDXA/lhUXs6NlhhJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy
OWJkNDQwHhcNMjYwNTEzMDcwMDM2WhcNMjYwNTE0MDcwMDM2WjAzMTEwLwYDVQQD
Eyg4ZGZhZDg0YjIxM2U4MjkwZGRlY2M4MTA1MDVhOTk1YWE3ODBjZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGWu0lbtTzafll1y7/sranWayxgT
EjoOJ4DNS0pwiGFcHxJfrPWn5zzoOTmqlV81UiPsq+b4AS4iL7UkeL+oMr4nOJjp
gNYgQO2gr+HmIC2N8KIzygPdcMFaX/O0qD3paKUivBMIOcz5wLWfABaFft96CGK4
XTEr4pUck6mGTcnEuWljxvfhIYa1TK3YdsiEixi9ugAEFN4/rLWk+58cnLdFROSK
Sdpbxw5Uo9VDg0U1Vgmp/2Wht7N8O/yWTfXP4KmIg27IWcZjFNND6S/0IWfMSIM3
0fNYCp7waOj6Q9PTKy9TGNMjlECURfkx0mAXfvxyJTjDPErVGjiERuyLAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI362EshPoKQ3ezIEFBamVqngM55MB8GA1UdIwQY
MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt
MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5
LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiVqWzo5
u1aIQokPjqnrj6j/W0q9Nd1Fmtde+MgKTTyqPLgyYoNlzbaSfGLyvcySx342EXG6
j67sOry8MAlNtqYgZosiPX+8QHDX62yIwfDmpAaM3AcPKG2I+HxLIyRr9yqnJITj
K2z6etvmb/wHUV7jpXZ+BIrI59S6pbgjZYe19cUz+rFV9imjUlNDLZb5bhyM8pPZ
xaQkMfMXL8D2kvII2rf7qu/a02QW88XkvEG7g2j2VmjlXQ0QGaZMAT2PYVQGEyMD
xD77lSxKtREqoqqBQMjcCEbu4exD+GC1X5PyFwRfVdzkEM1AsmYh0Nwz/DQrr5Hn
u7OiPoT1C2CTpQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:32 2026 by rpki-client