Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: KrKf6TnWPRFD0xK4furN+CMS5H7Do92caYrn5+HsZgY=
Subject key identifier: 2A:CC:44:E5:17:EA:A6:8C:98:29:63:65:AC:C1:6C:D0:C2:57:D7:AD
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019E1F11624F09CB656688CB909B9A4DA355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 0476
Signing time: Wed 13 May 2026 02:01:33 +0000
Manifest this update: Wed 13 May 2026 02:01:33 +0000
Manifest next update: Thu 14 May 2026 02:01:33 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: yr688mlRTZ4LrLKG3aHZs4c8z9j58HLezb2HxEW/kHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:62:4f:09:cb:65:66:88:cb:90:9b:9a:4d:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: May 13 02:01:33 2026 GMT
Not After : May 14 02:01:33 2026 GMT
Subject: CN=2acc44e517eaa68c98296365acc16cd0c257d7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:2c:79:5e:f3:3f:80:47:f5:3d:fb:cf:17:
ef:90:ed:b1:e7:9c:1b:c5:c7:4c:2f:f0:32:da:12:
7e:5c:7c:be:8f:82:92:94:5c:38:df:33:54:e3:bc:
65:18:29:48:98:5d:7e:00:03:c8:23:e1:51:90:7a:
2c:f2:43:71:a9:74:64:65:fb:d3:04:89:47:21:85:
16:e6:ca:77:77:de:a9:dd:e9:e2:81:4f:94:0c:8a:
d9:69:0b:47:49:e3:78:07:0b:33:53:eb:5c:fa:76:
85:c6:3e:e3:ca:8f:cd:b1:e0:31:ea:a2:52:b6:1d:
26:f2:81:44:ad:a0:9c:c0:f6:b5:45:94:80:1e:dc:
6b:fb:29:22:81:93:3d:f1:7f:0b:13:d0:27:58:26:
c4:6e:f2:d2:13:50:d7:c2:e4:c8:2a:c7:5a:69:85:
59:1a:54:d2:f2:e6:ba:d6:7c:fa:7f:77:30:0a:1c:
8a:8b:c2:1d:59:64:c7:6e:de:0e:cc:e4:67:62:12:
d6:c4:df:e9:8c:81:9d:e1:23:97:b4:32:cd:b6:96:
5e:80:63:1a:eb:35:49:c6:6a:54:c3:ec:15:b2:59:
fe:2f:20:7b:7c:85:d4:73:18:4f:e5:11:b7:a9:27:
4c:a1:39:1b:d2:6a:ec:03:50:93:0f:cc:6f:81:18:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:44:E5:17:EA:A6:8C:98:29:63:65:AC:C1:6C:D0:C2:57:D7:AD
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:e4:cf:b2:53:12:18:ba:ce:32:80:d2:e6:15:79:c2:02:
33:dd:1b:5c:ed:d9:41:c2:93:a1:fe:bd:b4:65:a8:c5:88:fd:
3f:c2:fd:46:69:41:57:c0:cd:02:9e:b5:a6:f0:e3:0a:ef:15:
55:37:f0:5d:fb:eb:00:89:4d:e2:20:98:a1:5a:16:fd:00:42:
b9:66:c5:8a:53:36:87:28:d8:75:1b:81:74:4b:bd:e8:89:62:
d4:0b:ac:bc:43:c2:1a:d8:7e:65:2d:4e:4a:f8:09:61:fe:77:
d8:82:6b:4f:af:b5:93:24:af:1c:36:30:56:b8:41:2a:94:a9:
60:ec:9b:d0:fc:90:8f:dc:e9:ad:72:07:65:39:6d:22:03:12:
ab:f9:40:2c:45:09:7c:74:c6:51:55:07:89:19:d0:65:79:c5:
bb:a7:70:a9:d2:c4:5e:e3:21:ce:f7:c5:bd:67:e8:00:9b:50:
a5:fe:0c:71:ac:69:e5:03:63:1f:99:53:52:83:e1:6a:71:17:
75:48:21:87:bd:41:c8:f5:91:96:11:70:39:42:a0:f8:a7:84:
6a:b3:b3:c2:66:7a:2b:1e:90:07:e8:bd:81:4f:af:ef:2f:e1:
34:f5:1b:2c:aa:ba:80:db:66:82:0b:fd:c5:92:4f:d8:bc:e5:
70:1e:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:25 2026 by rpki-client