Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: ZUd7F/kvgkJPDbd3XpN/PjJxfAowENnHvM8QJxyAyC4=
Subject key identifier: 1E:8B:FC:98:BA:11:09:E8:7A:D3:C9:76:E4:25:44:02:2C:B9:0F:21
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019E20236DA4176BC0B51EF9A9BEF49758AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 07:00:53 +0000
Manifest this update: Wed 13 May 2026 07:00:53 +0000
Manifest next update: Thu 14 May 2026 07:00:53 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: QLE0DSa3jpJ967z2afHhfm/DzHGjcDjq7uCv3cGkZsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:6d:a4:17:6b:c0:b5:1e:f9:a9:be:f4:97:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: May 13 07:00:53 2026 GMT
Not After : May 14 07:00:53 2026 GMT
Subject: CN=1e8bfc98ba1109e87ad3c976e42544022cb90f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:6e:53:5c:4a:86:ca:25:90:f4:ad:f1:40:
60:c8:1e:85:b7:f7:6a:47:28:d6:5b:c5:4f:14:ea:
c3:66:b6:e6:89:f5:df:ce:17:56:66:7d:82:89:0b:
d3:6f:bc:fc:73:ea:12:1b:59:db:92:40:ad:8c:91:
f2:a7:d4:59:7b:8f:99:c3:14:27:7d:16:b5:28:7a:
3c:53:c2:52:dc:41:a0:fa:20:b8:a7:8d:2f:7b:26:
3d:f3:33:09:a2:d2:62:c5:42:f8:66:da:3b:06:85:
a0:15:d5:fd:80:43:d5:bf:94:dc:2d:77:97:7a:e9:
16:e7:60:de:4c:ef:3e:99:4c:ff:0a:ca:91:d1:f5:
62:b3:d6:64:af:a4:a6:08:2e:38:b4:4a:4b:3f:69:
64:61:95:66:2a:0b:16:8f:64:b7:54:98:d0:28:bb:
15:6d:78:d0:5f:b9:f9:15:40:c3:02:39:ef:ee:e7:
75:11:8f:5f:d1:54:24:23:06:ae:a7:23:68:19:b9:
37:79:4e:b3:87:ab:85:32:21:68:f0:9d:1b:22:b2:
d4:72:0a:c9:f6:06:ab:5a:12:68:61:18:35:bf:26:
cc:86:be:f8:7d:35:17:b2:65:1b:e4:45:ca:32:84:
97:04:e7:c5:1e:a1:73:51:eb:db:64:ea:c4:13:a2:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:FC:98:BA:11:09:E8:7A:D3:C9:76:E4:25:44:02:2C:B9:0F:21
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1a:84:2b:c7:59:be:80:3c:66:9c:84:e9:7c:4f:d5:cb:93:
65:6d:6a:a5:00:6d:9d:6c:85:10:1d:eb:c7:71:36:fb:4c:8c:
05:83:3e:c6:43:d3:94:d0:22:9c:3f:11:b3:7c:f2:e4:6f:4e:
af:98:dd:a6:21:c8:58:3c:04:36:7d:f3:6a:66:2a:d8:ad:72:
cd:7d:1a:1c:10:2d:8c:42:ce:52:2f:7f:f8:72:35:ff:61:f5:
20:a3:8d:c6:6b:3b:26:29:d4:81:c0:2d:62:6e:44:cb:4f:74:
75:2e:5c:a2:2f:72:af:45:81:6c:8e:6b:df:8c:2e:89:20:a0:
06:64:4f:41:47:60:30:df:4e:5b:14:de:f4:b0:60:9c:36:cb:
7d:74:d4:30:b4:7d:8d:36:d7:ee:67:4b:24:d3:93:8a:15:a2:
08:ae:64:63:00:10:7f:23:4f:a1:dc:21:d0:2f:7d:0f:0b:d9:
14:9e:7d:6e:d2:6b:7c:b1:75:c0:b0:9c:b6:18:5e:08:c6:df:
a3:6d:37:42:2e:ec:c8:39:0a:77:ab:f1:ce:f0:c8:2a:a8:a3:
6a:e7:c8:5c:c9:c4:ca:ce:a5:8a:11:86:75:f8:03:88:5f:d2:
5f:a3:e4:96:0f:9a:07:bd:82:13:f9:6f:31:ed:af:48:87:a6:
dc:fc:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:28 2026 by rpki-client