Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: fp5f855FWRn5s9ONnofSzdKEfCxgLmbEKLJBF1XVYCY=
Subject key identifier: F4:3B:CF:B0:F0:56:8A:B1:74:DB:D6:58:40:C4:F7:2B:C4:E3:04:8D
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019E1E6C29599C27BEE87086CA040F2B8427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 11C8
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
2: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
3: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: GgsunkyZZwOHCT1XH06phzckkoZh5ofezc4fiC2wUOg=)
4: ovUvt1pWliISM3HaoCAcadW0xKw.roa (hash: H639MxSrvwDoO2fDDqrmu0kQ4erJQr6FKFxoVbpwHPU=)
5: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:29:59:9c:27:be:e8:70:86:ca:04:0f:2b:84:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=f43bcfb0f0568ab174dbd65840c4f72bc4e3048d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:00:f6:39:b5:ae:01:5f:96:82:8c:6b:4d:
db:4e:8d:40:16:bd:ff:1b:f3:32:bb:4e:9b:55:e5:
07:ed:5e:12:09:3d:5b:3e:f9:aa:ac:7e:fb:7a:b8:
b9:ac:35:1c:b7:19:01:fa:b3:4c:e3:3e:1a:39:28:
e3:da:30:a5:40:24:ba:31:2e:3c:99:0e:9e:b7:a4:
9e:c7:7d:d0:fd:38:b4:42:2c:7e:ad:21:b7:2f:f4:
ca:74:b4:87:7a:13:f9:7e:b3:92:7c:1b:66:96:cd:
96:a9:62:12:a1:f4:92:4b:92:ae:ea:d6:f5:9c:a4:
40:b2:e3:e0:bb:2c:11:52:a9:71:87:ea:9e:28:f5:
37:ab:d2:b8:b0:63:17:35:a0:c6:20:b7:69:d8:9b:
fe:66:b7:20:04:9f:6c:07:ff:27:d7:28:ad:26:b5:
56:00:bf:f0:c9:e5:cf:00:a9:35:dd:2d:8e:cf:d1:
ca:e9:ac:2a:66:81:55:7a:18:22:15:08:b1:54:9f:
68:4e:05:9a:d8:5c:57:43:98:86:7a:5c:c8:7e:0b:
ca:9f:df:a2:ee:5c:e0:53:a9:9b:c7:95:16:51:0a:
b0:7f:07:00:61:f1:9e:91:13:72:fe:61:d8:f8:cd:
e6:5b:21:66:44:6c:d6:2c:ef:04:cd:d2:ab:4b:11:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3B:CF:B0:F0:56:8A:B1:74:DB:D6:58:40:C4:F7:2B:C4:E3:04:8D
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ca:26:68:1d:08:d3:e6:d2:8a:90:4a:44:26:1e:99:bc:25:
62:82:de:47:12:cd:11:d6:e1:b3:b1:5c:a6:c5:aa:da:0e:c2:
3f:ef:5e:2b:2c:4f:cc:b9:21:4b:55:a2:ea:d7:64:09:63:81:
e0:41:ec:2f:a6:ec:08:c6:9d:8c:2a:95:c5:a6:36:c5:62:47:
43:c9:cc:c4:8b:0d:42:45:25:c3:48:94:a2:5b:d8:bf:56:e7:
b7:e5:c2:3b:bb:53:62:7a:f7:29:2f:7a:2b:42:ee:17:95:10:
ff:87:2d:cd:96:83:ce:29:60:bb:b9:44:28:04:2c:f0:5d:eb:
d3:22:09:d9:0e:60:1f:74:3a:ea:82:21:c7:06:a6:5b:c1:83:
a0:10:0e:24:02:4c:f4:9b:6a:23:1a:5f:88:af:88:20:5e:62:
e6:f7:62:e6:2e:b2:e4:00:56:4e:ca:f1:79:3a:01:96:00:2c:
7a:40:8e:3e:ac:34:27:25:e8:35:63:b2:b7:6f:e0:24:7b:16:
3a:f8:9d:c6:e9:47:d9:c9:7e:46:68:17:03:2e:15:41:71:0d:
0b:98:c6:7b:2b:2f:35:b4:f1:20:65:00:ea:a7:95:83:99:68:
f0:1e:7b:6d:e5:eb:8d:8a:72:24:f8:2a:bc:c8:75:73:da:d4:
04:0d:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:37:03 2026 by rpki-client