
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: 6F7VGT+mVByp80ojDcn9BFEAcnFBBgWldsURKVO/RmY=
Subject key identifier: 13:0F:B8:F2:C2:0D:56:C3:81:0C:0C:3F:FD:9B:6B:ED:DD:FE:57:69
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019E1EA2C1D04A77F6736F516E13FCC14583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: 012E
Signing time: Wed 13 May 2026 00:00:43 +0000
Manifest this update: Wed 13 May 2026 00:00:43 +0000
Manifest next update: Thu 14 May 2026 00:00:43 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: QU2Zuuc0NC41LxlMfOwAkHwJWB7yENWVM0CCzAzlqzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c1:d0:4a:77:f6:73:6f:51:6e:13:fc:c1:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: May 13 00:00:43 2026 GMT
Not After : May 14 00:00:43 2026 GMT
Subject: CN=130fb8f2c20d56c3810c0c3ffd9b6bedddfe5769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:48:b8:54:6c:0a:86:b5:3e:67:9c:95:54:
2c:bd:7d:0f:2d:fd:8f:54:27:b6:e0:12:24:0f:8b:
75:c3:ec:40:2f:3e:e6:9c:a9:a5:2d:9e:59:ea:cf:
bb:96:30:31:e2:c7:4f:38:e8:a5:a2:3a:da:4a:b0:
51:bd:2d:67:d6:50:20:8e:5a:c7:c7:d2:7c:a4:f5:
db:4c:32:4c:e1:47:6c:98:72:53:82:ed:99:46:c4:
b0:e2:b8:8a:00:df:3c:06:c4:fa:61:63:91:ea:77:
88:33:9e:08:25:04:bc:dc:ff:8a:16:fb:42:11:5a:
30:86:ce:ee:4e:15:fd:43:5f:2f:78:5d:bc:f7:cb:
eb:ed:a4:00:4e:6d:28:ef:13:71:5a:3f:94:bf:b0:
43:6b:1d:c4:ac:46:85:72:b0:37:15:0d:19:bd:94:
19:f1:61:b6:0c:2e:69:28:34:30:25:a4:04:8e:e0:
3a:fc:a3:89:e0:05:ca:f9:ec:86:eb:48:20:ad:0e:
33:b3:d8:b7:53:83:cb:aa:cb:96:43:92:a0:99:58:
6a:0e:66:21:69:ec:c4:67:5e:1a:61:67:27:15:15:
ed:c6:11:9c:a7:63:49:fb:d3:38:5a:c1:ae:45:68:
e1:28:f8:74:1f:06:74:c4:bd:af:5b:59:25:73:df:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0F:B8:F2:C2:0D:56:C3:81:0C:0C:3F:FD:9B:6B:ED:DD:FE:57:69
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ee:f7:d8:23:61:b4:e7:38:9f:40:cf:df:c0:7d:8d:63:51:
b5:26:b5:5a:c3:34:71:17:bd:66:05:7d:a5:05:ca:fc:31:3f:
93:76:41:1e:a5:36:b0:76:d8:00:d7:4a:35:92:6a:c7:c5:bf:
87:5e:d4:34:71:8a:b2:01:ba:be:7f:ab:d2:1c:ac:91:e4:9f:
72:d3:37:bb:ec:4e:c7:74:f2:19:ab:91:e5:e2:7f:36:63:23:
f4:57:09:d8:65:4a:bc:ae:0c:ee:14:59:79:df:66:9e:0c:8c:
35:fd:ed:de:86:fa:c1:7a:e6:9c:b1:7a:1d:2f:72:35:9b:44:
ce:c8:f3:cd:e3:0c:9f:b6:91:08:96:bd:80:a8:79:32:e3:40:
a9:eb:ed:06:1d:d9:f2:fa:44:19:5a:c0:6c:dc:73:7c:4a:92:
24:54:f7:33:3d:2a:92:98:cd:f1:ac:c8:52:ed:b4:cf:1a:65:
34:6f:e0:cb:41:7e:a3:94:0e:d9:59:a8:0e:ea:8c:a2:96:49:
c1:29:ff:fb:27:46:ba:45:1b:38:8a:4f:92:ae:e7:2a:44:b0:
c1:ee:d4:d6:5d:85:2a:cb:9b:26:82:70:98:fa:f7:83:94:64:
0b:f3:cc:85:12:37:16:f3:92:5e:19:d2:42:f3:70:2c:cd:9f:
10:e5:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:48 2026 by rpki-client