Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: G1omDM4MHj2rJsM2NW8+s1it6bC0iJhbjz2/lZCb3jk=
Subject key identifier: BB:FB:6A:EC:69:E6:F8:39:51:B2:26:29:59:C5:16:2D:E7:1B:B4:C1
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019E1CEBE9E17BC7D7E5C5D86FE5154D7F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 05B7
Signing time: Tue 12 May 2026 16:01:23 +0000
Manifest this update: Tue 12 May 2026 16:01:23 +0000
Manifest next update: Wed 13 May 2026 16:01:23 +0000
Files and hashes: 1: 38pGZs7H26DrGSXKpy7NGMGvyNg.asa (hash: ZxC1UU+w8hDxkvYvkuN6y+g+zQIOTKFm51EQ8DphQn4=)
2: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=)
3: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: ELvT74ZIQRsHN/lZ93t49LfjM80zqv23n1/w1mHI6Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e9:e1:7b:c7:d7:e5:c5:d8:6f:e5:15:4d:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: May 12 16:01:23 2026 GMT
Not After : May 13 16:01:23 2026 GMT
Subject: CN=bbfb6aec69e6f83951b2262959c5162de71bb4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:c2:2e:80:4c:1f:d9:e7:6c:02:f9:b4:20:
bd:f0:54:55:99:da:b6:16:c1:21:94:ba:24:1a:cb:
f8:91:93:cb:52:c4:a6:3e:b7:f3:e6:dd:be:2b:f1:
a4:28:d9:0f:41:d2:9e:96:34:50:fb:4d:74:e0:69:
00:04:65:9c:07:d3:36:65:2c:cf:6c:49:7d:db:49:
e7:34:6a:51:1e:30:c4:9c:3a:45:27:a3:db:a0:65:
22:c1:56:7f:97:66:77:14:c5:b7:a2:b5:54:d6:f0:
11:a5:81:38:25:95:eb:48:cc:d6:73:37:5f:84:2e:
4f:b8:3c:1d:57:33:4d:40:fb:16:7d:07:37:97:3e:
71:9e:0a:f3:a3:f2:2e:33:1e:70:61:f6:8e:e5:24:
3b:d5:01:57:04:76:39:4d:42:d8:c7:e1:99:83:be:
57:ed:29:21:72:dd:aa:a0:c2:b3:cc:1b:9b:95:d0:
10:f1:ed:cc:5a:18:21:04:28:6c:e6:49:79:3e:7d:
11:e0:0c:00:ae:88:71:7e:85:f0:e9:20:3c:bd:30:
f0:4c:23:c3:89:8e:74:d3:e4:e8:e1:3a:20:09:da:
82:d3:83:e0:c8:45:58:b6:a9:7e:6d:27:3d:c9:91:
49:9a:e0:4f:31:59:c1:4a:90:9f:5e:ed:15:2e:6e:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:6A:EC:69:E6:F8:39:51:B2:26:29:59:C5:16:2D:E7:1B:B4:C1
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:2f:46:15:03:c5:e3:e8:89:bc:c0:fe:e5:8b:4a:ad:d7:
1e:cc:19:39:04:02:9b:e6:f7:6a:46:25:e4:c6:1e:b2:b1:a6:
37:6b:4d:81:57:22:12:53:cc:0c:2c:25:7f:06:b4:19:a2:8f:
03:49:f9:80:e5:8c:c1:15:cd:71:e3:e4:d2:6e:88:62:25:7c:
93:f1:9d:38:0d:f4:44:fd:32:58:36:f5:29:af:22:8e:7a:6d:
ec:bc:f0:00:6b:cf:9d:1f:bb:cc:d0:8e:43:27:60:6c:86:42:
b8:cf:f9:d8:93:57:f2:83:5f:a3:26:19:6c:dd:a1:75:92:a2:
57:b2:82:96:67:25:e8:f5:d5:f2:0b:f5:4f:29:27:44:36:75:
6e:97:b6:55:ab:ac:a2:6d:97:c0:48:a7:ba:e4:6a:c3:7d:e6:
54:3a:0c:e5:a9:92:f6:e3:da:2c:2d:01:c5:ca:8d:fa:19:7e:
f2:e0:bd:f8:83:e3:0d:e1:d6:57:1b:ad:8b:39:29:18:7f:25:
53:60:cb:79:f9:6f:4c:47:33:98:50:d1:2e:21:a0:a0:04:de:
0a:39:ee:57:cd:49:07:bc:30:3b:60:5c:64:82:38:6d:33:c5:
59:eb:df:27:8c:3d:2b:80:5e:2b:f5:98:7b:e2:b3:1f:c6:4b:
05:27:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:36 2026 by rpki-client