Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: tUFXaVe8sJTxcx23xqG0DoPtg7DNQSZlYzsAwh+umNQ=
Subject key identifier: 05:8A:52:FE:54:66:EA:89:9B:3B:D5:E8:40:C3:C0:B9:B7:C4:1E:5D
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019E1D90BF657AB324BB363DBA243C1BA153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0869
Signing time: Tue 12 May 2026 19:01:25 +0000
Manifest this update: Tue 12 May 2026 19:01:25 +0000
Manifest next update: Wed 13 May 2026 19:01:25 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: 0mxNmFNE18NpnQTMqfbCLPjChHQg3wA/Iam3WIZ6ycw=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:bf:65:7a:b3:24:bb:36:3d:ba:24:3c:1b:a1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: May 12 19:01:25 2026 GMT
Not After : May 13 19:01:25 2026 GMT
Subject: CN=058a52fe5466ea899b3bd5e840c3c0b9b7c41e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:0d:7a:bc:af:56:31:91:c3:d4:2c:b5:31:
01:85:91:ab:4a:d5:1d:9b:21:01:c3:4a:a1:21:cc:
11:de:e3:0c:e9:fb:00:fb:45:3c:d8:72:2b:d5:08:
59:17:f8:33:d2:47:b3:f6:c8:c2:52:36:65:77:ac:
5a:6c:c7:2d:a1:4e:f1:15:40:ac:fe:af:f6:91:35:
c9:6f:42:e0:22:52:ad:af:5d:aa:b1:be:ec:37:56:
65:e0:88:2b:61:92:94:50:2a:43:5d:ee:a1:f8:7f:
0a:58:20:97:87:ce:ba:49:de:a4:ee:e5:f6:2f:60:
73:8a:23:51:1e:5b:c5:73:c3:2a:ab:0d:5a:84:b7:
37:5a:cb:02:54:ee:ce:a5:19:29:29:f3:cb:b4:bb:
c9:2a:a1:3c:c0:e0:47:a1:b3:b2:6c:ee:64:0b:8b:
14:dd:63:35:13:6e:5e:c0:9d:37:f6:7b:80:fd:6c:
d6:53:fa:3e:64:51:0d:94:2c:cb:c5:17:ef:24:e7:
90:86:9f:c2:a8:68:13:01:5e:b5:78:90:a9:0f:bb:
bc:58:b0:fc:bd:a1:79:d2:a2:db:aa:93:68:2c:a2:
56:b1:6d:d1:18:fb:3f:f1:59:10:9a:66:de:16:76:
f1:bc:c6:38:9d:96:7f:64:cb:2c:6e:0e:db:21:93:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:52:FE:54:66:EA:89:9B:3B:D5:E8:40:C3:C0:B9:B7:C4:1E:5D
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:10:82:ba:4d:1f:0c:03:7e:90:c8:93:44:3f:1b:14:dd:
c5:fd:ac:8d:81:ef:d0:c8:d1:21:84:da:e0:da:9a:b6:0b:bb:
9c:41:a5:77:cf:ef:b2:b7:70:51:ec:4e:5e:b7:be:e1:06:e6:
62:1b:3c:56:80:10:fa:6e:ad:27:f1:9c:0f:73:15:26:5c:e5:
51:29:44:2d:cf:14:73:05:41:1b:aa:8d:cb:0a:51:40:dd:f3:
2d:d6:23:c7:e9:e4:11:81:93:76:38:9b:ae:6d:81:3d:63:c8:
91:d8:21:10:f0:43:a0:1c:ff:3a:88:f1:08:77:77:78:18:8c:
43:ca:1b:7e:23:6a:c6:05:af:89:29:ad:39:26:1f:ec:c4:45:
02:b1:48:34:2a:08:c8:89:37:f2:09:80:8b:94:8b:3e:e1:e4:
c1:d8:f5:4e:64:64:d5:22:0c:40:2d:e4:f1:67:3b:d3:5e:ab:
64:24:89:2a:be:be:2b:ff:65:1a:6d:52:0c:c7:d2:47:a1:ec:
b1:33:60:ea:d0:29:88:6b:69:cd:42:cd:7c:4b:30:e5:27:df:
9f:69:10:88:72:8c:a1:10:a0:a8:0c:af:cf:a8:4d:4b:39:eb:
23:02:d7:6a:f1:09:20:0b:1a:a4:fd:5e:78:38:9a:47:ca:e8:
74:11:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:47 2026 by rpki-client