Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: +T8v3xGpRV3PmaatXbqwHAcBiBGyfUR7ArJ3KepJ758=
Subject key identifier: EA:67:87:F4:AF:B0:33:F8:6B:91:89:CD:20:4A:38:4A:9C:4F:C3:40
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 019E1FEC778E6E1EAEFC334CDD4EDAA4E16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 47
Signing time: Wed 13 May 2026 06:00:51 +0000
Manifest this update: Wed 13 May 2026 06:00:51 +0000
Manifest next update: Thu 14 May 2026 06:00:51 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: 9BWKT4w5XZ1LSB3ZUj31hpXPCn5VleW/4cRPhurXJj0=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:77:8e:6e:1e:ae:fc:33:4c:dd:4e:da:a4:e1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: May 13 06:00:51 2026 GMT
Not After : May 14 06:00:51 2026 GMT
Subject: CN=ea6787f4afb033f86b9189cd204a384a9c4fc340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2c:8f:a3:96:16:8f:19:45:86:e5:70:ac:7b:
38:57:ab:a6:c5:be:52:54:5d:67:82:8d:78:00:02:
75:f3:41:f6:92:ef:0d:4e:9f:c3:f3:7c:62:5d:b0:
55:14:6b:4f:4e:6e:93:65:87:61:93:e2:b0:ce:00:
04:91:4b:f2:86:e7:fb:fc:29:9d:7d:e0:e1:25:c6:
6a:b8:7b:5e:5f:01:65:0d:3c:6f:fa:56:b6:45:40:
d8:08:85:21:a8:96:9c:10:ee:41:5d:3c:a2:2c:f5:
2c:50:91:2d:f7:1b:62:5e:f0:c4:e2:95:03:96:c7:
34:9e:df:48:c7:f5:e0:9d:6d:ff:c1:48:3a:4c:1d:
fb:10:6b:6c:ec:c0:cc:b4:22:06:0f:8f:bd:69:99:
14:55:d6:d7:9a:ad:cf:69:d6:24:f1:e6:d3:00:ab:
84:fd:8f:f8:05:ed:68:43:da:4a:c7:94:30:c1:a1:
56:8f:30:21:92:70:7e:e9:83:f5:80:60:72:e4:ab:
f8:68:98:9b:ce:48:a6:d3:b3:ff:8a:e6:f6:8e:dc:
d8:77:f8:c7:38:9f:d7:aa:2d:fb:e0:56:4f:2f:ac:
db:22:4d:dc:66:a1:0f:14:ca:30:21:24:53:f4:49:
5c:48:f2:ee:e5:cf:7c:5d:93:e5:8e:51:e9:e0:5f:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:87:F4:AF:B0:33:F8:6B:91:89:CD:20:4A:38:4A:9C:4F:C3:40
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b8:00:fd:3d:ef:49:84:0b:fe:dd:6d:3c:d0:53:ea:56:ac:
93:ad:35:b3:2d:9a:b3:f3:4d:de:37:b2:2a:90:95:d3:60:81:
94:f9:a9:5e:46:a0:4b:dd:eb:e2:31:b4:b2:aa:2b:19:58:74:
5d:86:92:db:e6:84:23:ed:3b:32:5f:87:64:d1:29:35:65:c1:
70:05:bb:f4:cb:d8:77:55:2d:68:94:b9:54:fd:e8:26:1e:b7:
f7:db:16:a1:5b:2f:2b:2f:93:b9:6d:13:dd:bc:9e:8c:b3:50:
a3:53:9f:ab:d9:eb:2b:ca:62:1f:2a:51:5a:cb:3a:0e:a7:1c:
8f:a6:0d:0a:c3:0c:e3:0b:57:1b:3f:7b:bd:9d:32:20:6a:63:
c5:68:90:8f:ce:38:aa:66:a4:78:9d:bf:46:e8:e6:f9:18:69:
7d:99:cf:10:8d:8f:1c:1a:f1:0e:c7:b0:dc:06:8a:bf:bf:74:
eb:e5:da:aa:ee:f9:51:c0:a3:dc:15:a6:41:08:cc:86:10:6a:
88:96:96:70:07:a3:ae:ef:c6:2a:26:90:26:83:1f:69:75:da:
6c:c2:92:21:31:b2:f9:af:02:fa:b0:0f:28:02:90:87:5c:1d:
0d:61:82:b4:f5:ce:fe:e6:09:92:63:fc:d6:d4:83:1f:22:a9:
4b:78:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:35 2026 by rpki-client