Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: JZiA5QfGCySgZ71qFAtsFd6+OCD57PNVqrQiw00Vfcg=
Subject key identifier: BA:19:FC:69:DB:47:7C:31:01:AF:57:70:67:16:1D:EB:94:F3:15:66
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019E1DFE2A7A63699B786057E43970374A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0AD9
Signing time: Tue 12 May 2026 21:00:56 +0000
Manifest this update: Tue 12 May 2026 21:00:56 +0000
Manifest next update: Wed 13 May 2026 21:00:56 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: 1tkJD//rOnXVYwzPIAeYPikUCvhgSorf/bvKGXpcbOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2a:7a:63:69:9b:78:60:57:e4:39:70:37:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: May 12 21:00:56 2026 GMT
Not After : May 13 21:00:56 2026 GMT
Subject: CN=ba19fc69db477c3101af577067161deb94f31566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:12:f4:be:8b:22:36:a1:b5:99:b9:bc:11:
89:c0:4e:72:7e:c7:43:f6:2e:94:f8:a1:58:ae:9e:
da:0f:50:f6:01:d9:0d:1e:8e:19:e9:eb:09:21:96:
e6:4b:bf:8b:5d:8d:27:d3:a3:f1:30:88:5f:42:5d:
99:e4:fd:a1:43:2d:85:4b:16:37:63:a6:e2:9f:9d:
af:ef:59:1b:5f:db:6f:a6:ff:8c:3c:63:13:d9:75:
4c:15:bd:e1:fb:a9:06:d1:68:0b:2c:c8:3b:b7:db:
5c:89:36:97:41:a9:0f:34:39:34:12:30:30:66:f6:
1a:66:de:86:87:b4:ab:7e:04:88:68:45:80:e6:29:
6b:ad:0c:84:b5:7d:b1:0c:2e:ab:52:57:d2:c7:7a:
f2:f0:88:b3:ef:7f:0f:34:a5:69:1a:ee:fb:57:99:
49:4d:b6:08:3e:4a:1a:c3:94:d4:16:9f:10:b9:4a:
31:5e:94:10:1a:7c:34:ad:cd:31:ec:4a:57:a6:33:
26:cd:84:f0:95:ca:c3:10:b8:4f:93:b1:8a:6b:49:
26:5e:a7:a9:d4:93:ec:d6:8e:4a:61:f4:f0:bf:b0:
05:ad:3b:ff:d0:3e:d8:3c:8b:d2:64:76:97:fe:ac:
b4:b1:9d:d4:56:84:e5:83:02:f9:56:e3:17:60:42:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:FC:69:DB:47:7C:31:01:AF:57:70:67:16:1D:EB:94:F3:15:66
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:76:8a:af:b5:73:ba:6d:76:55:16:26:2e:b6:a8:06:33:
28:4a:c0:45:ea:79:da:3f:82:7d:94:6f:29:f0:8a:9f:29:6b:
91:ae:07:93:b7:03:17:14:65:f8:17:8d:83:15:b9:80:1e:74:
3a:50:5c:83:46:ad:34:81:81:c7:59:22:eb:55:b8:ec:5d:c2:
25:92:03:a1:a8:8a:7e:2d:4c:82:c8:3c:3d:24:76:38:70:e0:
42:bf:36:8e:d1:02:16:91:d7:13:b5:80:98:6e:2b:34:d6:34:
fd:c7:bb:87:f3:2f:1b:38:d5:24:41:b5:ba:b8:47:5f:97:71:
a3:43:27:a8:6a:a5:18:0a:96:65:00:19:29:d3:a1:dc:f1:38:
15:ac:2b:1c:aa:01:c8:97:8d:c7:3b:1a:a0:5a:55:9e:1e:84:
be:bc:dd:ea:93:b9:10:84:1e:62:b3:c7:ac:5c:60:5a:c9:06:
13:e8:ef:0e:52:fb:c4:8f:20:24:b8:48:7c:98:d8:13:87:1b:
f8:78:c6:9a:1e:8f:52:fb:e6:b4:14:e6:a2:42:59:77:4a:1e:
be:f7:9a:a7:da:f8:d5:28:32:78:bb:a4:db:6a:6f:48:7f:06:
89:c8:63:8b:41:86:24:d7:0a:9a:18:82:fd:66:50:82:ea:86:
cd:69:2f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/ip6Y2mbeGBX5DlwN0pfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4
MjVmMGMwHhcNMjYwNTEyMjEwMDU2WhcNMjYwNTEzMjEwMDU2WjAzMTEwLwYDVQQD
EyhiYTE5ZmM2OWRiNDc3YzMxMDFhZjU3NzA2NzE2MWRlYjk0ZjMxNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEkS9L6LIjahtZm5vBGJwE5yfsdD
9i6U+KFYrp7aD1D2AdkNHo4Z6esJIZbmS7+LXY0n06PxMIhfQl2Z5P2hQy2FSxY3
Y6bin52v71kbX9tvpv+MPGMT2XVMFb3h+6kG0WgLLMg7t9tciTaXQakPNDk0EjAw
ZvYaZt6Gh7SrfgSIaEWA5ilrrQyEtX2xDC6rUlfSx3ry8Iiz738PNKVpGu77V5lJ
TbYIPkoaw5TUFp8QuUoxXpQQGnw0rc0x7EpXpjMmzYTwlcrDELhPk7GKa0kmXqep
1JPs1o5KYfTwv7AFrTv/0D7YPIvSZHaX/qy0sZ3UVoTlgwL5VuMXYEKAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoZ/GnbR3wxAa9XcGcWHeuU8xVmMB8GA1UdIwQY
MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt
OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5
LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgx2iq+1
c7ptdlUWJi62qAYzKErARep52j+CfZRvKfCKnylrka4Hk7cDFxRl+BeNgxW5gB50
OlBcg0atNIGBx1ki61W47F3CJZIDoaiKfi1Mgsg8PSR2OHDgQr82jtECFpHXE7WA
mG4rNNY0/ce7h/MvGzjVJEG1urhHX5dxo0MnqGqlGAqWZQAZKdOh3PE4FawrHKoB
yJeNxzsaoFpVnh6Evrzd6pO5EIQeYrPHrFxgWskGE+jvDlL7xI8gJLhIfJjYE4cb
+HjGmh6PUvvmtBTmokJZd0oevveap9r41SgyeLuk22pvSH8Gichji0GGJNcKmhiC
/WZQguqGzWkviQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:31:27 2026 by rpki-client