
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: 4w0I1h3QQxbjteHT1mZH8EgLpgj05aH3IBdoX3aQkqk=
Subject key identifier: F1:86:C1:F2:F6:A8:01:37:46:38:3A:71:98:80:55:AA:63:61:DD:CD
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019E1EA368E8C06CAE8A2F69A56522F7B54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:01:26 +0000
Manifest this update: Wed 13 May 2026 00:01:26 +0000
Manifest next update: Thu 14 May 2026 00:01:26 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: vXZW4mpcDazaNTltcD6jVlpcKQ6JvESX/eNN6cPUW+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:68:e8:c0:6c:ae:8a:2f:69:a5:65:22:f7:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: May 13 00:01:26 2026 GMT
Not After : May 14 00:01:26 2026 GMT
Subject: CN=f186c1f2f6a8013746383a71988055aa6361ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:9c:fd:b1:79:1e:f0:96:3f:41:44:41:77:
e1:c0:37:0c:86:f1:78:7d:48:fa:b5:3e:f3:e5:d5:
88:58:49:4f:a4:d8:e9:c5:be:fe:6e:bf:26:9f:94:
29:00:d8:00:96:3c:00:92:f2:26:0c:86:25:45:44:
07:23:3a:2f:0d:fa:8c:4f:eb:ab:f9:8d:c8:d1:5b:
a9:8e:10:f2:5e:78:78:aa:63:eb:55:76:e5:ec:76:
8d:05:62:5d:1f:91:7f:cc:f9:1b:22:96:2d:cf:d3:
fe:12:73:a5:50:bc:d7:e8:dc:09:13:ce:5f:df:ae:
22:60:63:b8:41:7b:4d:25:07:2f:d0:cd:91:67:06:
e3:31:11:75:2d:f1:50:59:ea:d5:cd:f8:e2:46:40:
b5:85:9a:de:df:d2:26:75:60:dc:75:46:f2:b6:03:
5c:e5:85:fe:b0:dc:d7:3d:af:7d:16:fd:cf:ec:0a:
29:96:c1:54:57:6f:3e:b9:24:8c:e7:81:36:5f:74:
cd:16:31:18:ef:f0:06:85:5b:56:0a:3f:89:12:af:
b5:9d:13:2c:d2:0e:38:f1:99:37:d1:de:de:c2:ec:
6f:09:00:bc:71:c1:7a:1f:05:ce:3a:e9:39:f7:a9:
1b:dd:6b:23:57:58:0a:67:ce:d4:ee:5d:95:16:3e:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:86:C1:F2:F6:A8:01:37:46:38:3A:71:98:80:55:AA:63:61:DD:CD
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:dd:64:ea:95:60:26:dc:16:38:1b:12:20:e4:28:9f:68:
9b:a4:b0:1d:6e:06:68:ce:46:bf:6a:0e:0c:a2:8e:5a:eb:c5:
fe:5d:ba:6e:9a:82:b6:f7:a0:d2:79:73:97:68:2e:a2:95:ea:
6e:f3:5b:22:b5:74:69:4a:97:56:c4:2a:3e:56:bc:b8:64:4b:
48:4a:0b:a7:5e:30:8d:93:81:ab:d4:f1:05:56:2f:dc:db:f7:
19:0e:c6:82:21:dd:74:fb:cf:1c:18:da:47:34:87:b0:0f:55:
44:15:fe:9e:31:db:8b:d8:24:87:e4:80:c5:39:fc:03:6b:4f:
d0:80:41:d5:af:96:91:4e:d4:f1:d4:48:83:c6:d7:2a:9a:d9:
68:c1:68:85:4a:94:b3:91:a6:71:e3:ae:4c:e3:5b:b1:45:92:
cb:0b:5f:ac:a9:a6:9d:8d:ef:3f:b0:27:50:d0:9a:61:ac:34:
18:ee:c7:2e:23:c2:fe:3e:4e:03:a0:2c:8b:02:bf:60:85:66:
8a:9d:30:4e:36:70:80:7b:8a:c2:c4:f7:f2:fe:d7:ad:24:9a:
bc:c5:12:e7:91:a4:b5:c0:09:b7:7f:34:bb:27:d2:46:df:8b:
7a:30:9c:c9:25:6c:85:da:e0:83:6e:d3:47:da:3d:5d:c9:ce:
fa:ab:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:47 2026 by rpki-client