Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: sXlgz+hhcFHVFAQ8B5IPzb0AcysACRSHdF6OE+3plkI=
Subject key identifier: 84:DA:E8:F7:60:12:AC:58:A5:92:6B:AD:DB:ED:53:DA:BA:7F:B3:74
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019E1DC71FFADA2BE2D219139B57322DC497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:00:49 +0000
Manifest this update: Tue 12 May 2026 20:00:49 +0000
Manifest next update: Wed 13 May 2026 20:00:49 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: TuJ4znVe4muAfvSq0jsTJwQTO7g3/KOG2Qmx6Xb6H+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1f:fa:da:2b:e2:d2:19:13:9b:57:32:2d:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: May 12 20:00:49 2026 GMT
Not After : May 13 20:00:49 2026 GMT
Subject: CN=84dae8f76012ac58a5926baddbed53daba7fb374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:09:7a:fd:6f:4e:04:ef:2a:e7:3c:d0:48:
91:48:3b:65:f5:a9:b1:61:6d:b2:3f:c9:b0:67:0b:
f7:34:a0:88:63:1f:6d:d8:8b:b2:d1:3d:8a:27:74:
8a:21:da:ee:20:ed:05:41:ec:ed:3a:39:2f:a5:48:
6a:2d:18:21:a7:85:09:48:1f:2c:26:6e:cd:1f:2b:
d7:11:52:ad:4b:f6:93:e2:dc:52:7e:52:ba:2b:15:
61:1f:7b:a1:32:d4:ab:ee:be:29:d2:30:df:ab:38:
08:34:da:9b:c1:19:a8:63:46:a1:97:51:72:85:e4:
a3:4f:68:62:23:6c:9f:92:a2:84:bb:4c:84:88:9e:
52:e5:8d:6f:39:40:7e:78:64:99:df:83:3a:e9:a2:
1c:92:17:96:9a:2d:17:ab:24:24:a5:75:55:0d:fe:
5d:a4:a4:c0:80:b7:7a:f9:b8:42:5f:5d:2f:95:c7:
9f:c2:e7:9f:39:30:ad:a9:b7:4d:58:e4:84:6f:5f:
7a:0e:64:be:d0:fc:6b:b5:82:eb:fc:c5:99:9b:1e:
58:36:81:1f:44:1d:b3:4d:1f:41:db:fa:3a:65:74:
1a:bb:55:10:fd:47:ab:c0:ea:7b:02:aa:68:e3:29:
33:db:6d:ef:dd:af:f7:ca:97:1e:0f:f5:f9:d3:3e:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DA:E8:F7:60:12:AC:58:A5:92:6B:AD:DB:ED:53:DA:BA:7F:B3:74
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:59:39:dc:92:09:8a:e5:c7:19:cd:38:78:cb:c9:ed:60:87:
c1:5a:37:a2:36:29:11:6f:94:3e:2f:cf:15:c1:35:53:bb:6b:
0e:2c:db:78:8a:1b:f4:fb:c1:e5:97:92:cb:b0:58:58:51:c3:
00:98:12:de:94:15:39:83:90:73:bd:66:b2:f3:35:0a:20:37:
d7:50:1f:90:c2:9a:0a:dc:27:c1:17:2f:b5:17:07:14:f9:55:
c0:11:4b:27:d9:83:0a:07:f7:6e:81:0a:b8:44:8f:7e:cd:08:
d5:79:69:6c:3d:1c:b3:fd:ae:9d:d1:c1:e3:77:65:da:87:20:
a5:24:36:bf:e9:68:bc:0f:82:2d:41:6a:6c:b5:c5:96:68:35:
6d:a2:3d:5e:36:f0:71:5e:c0:ae:49:7d:d9:02:73:5e:cb:e3:
49:1c:72:dd:4e:1c:9b:61:96:ed:2b:b4:40:72:26:84:05:73:
12:f0:10:4a:b9:5f:cd:a8:34:ed:69:8e:7c:84:63:61:7a:82:
27:f6:27:66:d7:bd:e5:77:b7:31:d9:90:2e:20:da:49:8e:59:
5b:d4:32:6f:7d:dc:93:38:e6:36:61:4c:64:c4:61:14:8f:15:
40:ff:76:84:aa:a8:92:f5:b1:41:8b:65:02:18:10:14:81:6b:
42:14:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:48 2026 by rpki-client