Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: +sIskDbWS20KtN02pWqKcpawPU06w76i6qKBNMbrKb4=
Subject key identifier: 96:86:7A:27:97:70:2E:2E:A5:E4:AB:22:E1:7A:94:FD:61:E1:C5:1C
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019E205A4F4DA95F7B1BA74356B1CFF83A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: D6
Signing time: Wed 13 May 2026 08:00:49 +0000
Manifest this update: Wed 13 May 2026 08:00:49 +0000
Manifest next update: Thu 14 May 2026 08:00:49 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: n2v9qX5PV/VfJfs+LggS3srxIPDjC4IimeTFKJtnUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:4f:4d:a9:5f:7b:1b:a7:43:56:b1:cf:f8:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: May 13 08:00:49 2026 GMT
Not After : May 14 08:00:49 2026 GMT
Subject: CN=96867a2797702e2ea5e4ab22e17a94fd61e1c51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:ca:dc:24:e0:80:3f:c0:c8:d0:03:6a:f7:
2f:e7:8c:de:f3:83:d5:a0:e5:f0:1c:c7:6a:13:eb:
87:d7:c2:ef:a9:f2:0f:12:a6:10:5e:2f:61:f2:15:
7d:0b:61:0d:2d:38:93:a4:60:a2:7f:64:b3:3a:6e:
ae:e4:55:08:57:20:db:48:0a:f3:4a:df:18:50:2d:
42:8b:7e:78:23:01:39:29:2a:33:23:40:66:03:3f:
50:d2:ca:8f:e5:8e:e5:aa:54:5e:ea:33:9c:0b:1f:
eb:7d:09:0e:f2:0f:eb:17:55:7c:81:ab:d1:3a:08:
3d:2f:35:f1:26:58:72:a6:55:c2:7a:50:a2:63:4d:
b2:dc:70:05:85:5e:c3:31:63:aa:71:45:1e:a6:05:
3d:b4:35:49:68:39:02:89:6c:2b:73:8d:6a:bc:b4:
e5:c4:48:37:43:2f:ea:4a:89:95:af:42:c9:b0:ae:
2a:85:16:78:e9:94:1f:f4:b8:49:aa:46:4c:3a:a7:
dc:3e:99:2f:8b:a1:1d:bb:56:2c:99:4e:17:a5:36:
bc:08:46:2f:1b:24:fb:20:da:c8:e9:0a:45:72:43:
24:5c:ad:4a:03:be:2e:35:4f:a8:5d:58:02:e3:08:
e5:44:f8:1c:f7:e5:bb:63:45:6d:c8:f3:7d:3b:78:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:86:7A:27:97:70:2E:2E:A5:E4:AB:22:E1:7A:94:FD:61:E1:C5:1C
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:24:60:91:25:92:06:cd:26:05:21:0c:7d:33:44:da:b5:19:
eb:73:a3:9b:00:67:c9:86:9e:b0:c1:6f:7c:d0:c5:a4:a1:a7:
53:e3:81:e8:5f:17:2a:fc:04:54:39:76:2b:2d:56:ed:f5:45:
bc:0c:0f:c3:11:e3:0c:eb:e0:1b:05:1c:e6:84:8d:7c:4f:63:
bb:27:16:06:c0:56:25:9a:19:ec:4c:cd:a6:7d:d3:24:9a:ac:
d8:1b:b3:21:d8:8d:22:c9:77:9d:28:46:08:e0:32:ac:3f:17:
21:ef:4c:01:76:00:03:ec:40:0d:41:5c:0b:d0:b4:51:2d:8e:
f2:4d:7c:a1:cd:7b:3d:a8:94:e4:b3:03:0d:70:81:98:8a:bb:
a0:e1:80:2a:17:2c:f1:65:a7:2d:17:fd:a4:75:c9:50:d1:9e:
b9:fd:7e:aa:12:3e:3e:5e:80:b5:96:52:c8:ec:c4:b5:43:dd:
bd:d2:b5:94:6f:0e:02:54:7e:db:b1:39:a5:45:d0:eb:36:6a:
53:57:b2:f1:f4:2d:20:01:d6:21:01:03:e4:90:54:4a:08:ed:
c6:08:04:bb:64:df:a9:5c:61:26:13:f0:62:56:d4:c4:99:02:
94:05:78:5f:42:7c:0f:38:06:58:04:00:c6:dd:70:0e:bc:70:
60:bc:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:46:04 2026 by rpki-client