Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: NBn8FRnsOmPw2yVceN1UmZ82gkjGIpaQ3ACXfMzBUDo=
Subject key identifier: 6A:3E:F1:2D:F0:57:97:D1:D3:0D:9D:02:ED:AF:A3:FC:87:5E:B5:0D
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019E1ED9AE99C646C6A9A5A365C39F094433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:42 +0000
Manifest this update: Wed 13 May 2026 01:00:42 +0000
Manifest next update: Thu 14 May 2026 01:00:42 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: ZyNhBSEiKhggUVUS86VCSpipqeh7zTahLZu+DXxwSCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ae:99:c6:46:c6:a9:a5:a3:65:c3:9f:09:44:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: May 13 01:00:42 2026 GMT
Not After : May 14 01:00:42 2026 GMT
Subject: CN=6a3ef12df05797d1d30d9d02edafa3fc875eb50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:49:26:e7:87:4d:28:ed:0c:60:95:d0:6b:
c0:97:29:58:42:c1:e9:65:13:63:ef:b1:d6:f7:ab:
3a:80:3a:aa:8d:4c:b7:e6:df:d2:b1:7a:d5:9a:7d:
90:05:ac:06:95:19:50:b3:67:94:8b:8c:64:d9:ab:
39:f7:a5:43:67:bd:15:2c:9a:d1:e6:8f:24:6b:0e:
96:01:06:4e:03:da:e7:38:43:35:f0:71:88:93:00:
16:bf:02:f4:d7:85:ab:b5:74:57:f3:85:21:17:87:
5b:1a:94:02:eb:ff:09:ad:ea:07:a6:85:f4:f0:14:
ad:29:7c:3e:35:e4:c7:ab:69:82:ff:b2:f5:42:55:
ae:12:cd:a5:91:77:38:ff:8b:86:c6:fc:7e:02:cc:
54:56:16:96:37:b7:3c:59:48:04:e7:6d:91:47:4a:
d8:ee:82:10:e4:79:a7:c4:ac:99:ed:50:36:06:1c:
48:d7:ac:03:ee:59:e9:66:96:c0:9a:4a:d7:dc:9e:
b2:b1:c9:40:f3:c6:30:ee:06:d0:cc:4e:bb:44:ba:
25:7c:e7:48:69:4c:6c:a0:96:b2:c8:64:0e:f7:d0:
72:97:9b:c2:31:cd:bd:71:cc:1e:ff:a7:6d:72:a2:
9b:9a:f3:39:7c:31:32:13:bc:50:fb:7e:d9:2f:55:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:F1:2D:F0:57:97:D1:D3:0D:9D:02:ED:AF:A3:FC:87:5E:B5:0D
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:11:52:3d:c3:79:3e:42:00:24:5e:3a:f7:ba:39:08:31:
79:ce:24:36:fa:c1:b4:4a:1e:49:e3:0f:3b:02:3a:0f:ad:66:
ca:b4:c3:ff:5a:02:43:ea:9e:71:5c:bc:a7:14:5b:12:c7:b1:
c3:d2:76:02:5e:b3:7e:e4:a1:c5:d4:d0:0e:a7:da:d6:7c:cd:
32:87:6a:1b:58:e5:20:b8:e6:73:f4:df:64:70:99:7b:92:04:
b7:de:05:9a:2b:e9:5d:ab:a0:af:61:8d:ce:68:6c:40:33:26:
96:c4:97:1a:63:04:23:7b:b4:0b:6d:e1:78:f3:a9:d0:14:89:
4a:8f:17:c7:0f:9d:d2:54:bb:7c:92:73:eb:4f:bd:f6:c6:d4:
22:fc:26:dd:88:88:a2:23:5f:58:c0:c2:a7:b9:94:02:32:d3:
e3:a3:5c:bc:88:d0:ad:70:11:30:8b:f6:70:c9:35:24:c1:39:
ae:c5:0d:74:75:37:db:7d:e3:17:80:27:ad:55:a8:37:6a:54:
2c:9e:55:eb:18:cb:2a:75:77:77:08:eb:32:a5:78:ad:9c:8f:
0a:f1:6e:3b:74:15:fd:27:76:4c:8e:bb:96:43:a0:14:75:a5:
01:bc:bd:87:80:ad:76:22:3e:5d:0d:47:d7:78:13:18:b6:f3:
92:f4:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:06 2026 by rpki-client