Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: qrREglcTWH3Dqq6BQ29A9ufHmgfHcHStO3gpxwjMRdY=
Subject key identifier: 64:9C:60:23:A1:99:DE:D1:C8:1E:ED:33:55:1C:C0:06:50:BB:CF:75
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019E1D90DD5D67F8815BF6EF13BF83115A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0588
Signing time: Tue 12 May 2026 19:01:33 +0000
Manifest this update: Tue 12 May 2026 19:01:33 +0000
Manifest next update: Wed 13 May 2026 19:01:33 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: raMMG/VnyRyWf0wfl5vKUzPXhQ0fKOZpJmUbBCSBsmc=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:dd:5d:67:f8:81:5b:f6:ef:13:bf:83:11:5a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: May 12 19:01:33 2026 GMT
Not After : May 13 19:01:33 2026 GMT
Subject: CN=649c6023a199ded1c81eed33551cc00650bbcf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:4e:a2:0f:b0:93:b9:11:20:2f:12:86:24:
1e:b9:f7:66:eb:6a:2f:c3:ba:8e:7a:c2:66:e0:8a:
d8:36:e0:39:58:47:c1:7d:2d:af:e4:89:0a:26:88:
bd:cd:74:a4:78:81:6e:18:ba:26:ea:09:29:81:25:
c3:17:0b:3c:82:1a:da:f4:73:a9:59:bc:b8:52:3e:
47:87:7f:18:80:45:7a:0f:a8:29:21:f7:c7:92:88:
3a:bc:41:ba:b9:39:0f:73:36:cc:38:24:8a:8e:75:
84:22:2a:f0:47:29:63:49:46:0c:f7:a6:fe:bd:42:
02:93:f8:c9:c6:ff:0b:cf:53:f0:f1:54:20:86:85:
97:04:a4:60:e2:1f:13:ea:6e:af:55:52:e5:fd:37:
e0:80:8e:82:25:95:47:b2:c2:99:31:28:55:5c:8a:
c8:e0:9f:0b:1f:56:56:b2:ef:f8:df:dd:3c:ea:c4:
a1:07:a0:e4:bf:4c:4a:b9:dd:29:ee:e1:66:d5:91:
0a:17:26:52:82:d9:ef:be:10:ed:8d:b9:33:6d:0d:
80:ff:6b:af:40:10:bc:60:04:a4:88:02:fb:99:14:
bf:58:68:55:bb:66:9a:81:de:3b:19:29:34:dd:d1:
02:95:76:9f:e8:c8:c1:6a:8f:5b:42:fd:3a:86:5e:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:60:23:A1:99:DE:D1:C8:1E:ED:33:55:1C:C0:06:50:BB:CF:75
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4c:95:db:e5:bc:6c:c0:ab:ad:1a:6d:21:6b:cd:98:63:b0:
fc:62:00:34:f6:b2:8e:a0:24:17:58:6d:33:2b:58:1d:fa:e1:
49:e6:3c:b5:09:db:51:3e:62:47:c0:14:4c:21:3a:5c:15:b5:
e5:d1:5d:45:cf:5b:51:a8:28:fc:7c:c7:f1:61:4b:b5:8a:de:
a8:1a:30:c9:1b:75:f5:b7:28:9d:d3:bb:4e:e3:dc:bc:f6:48:
32:83:b4:0c:5a:ef:f8:04:ba:69:f9:20:27:4d:90:42:7b:8a:
2f:30:2f:ba:d5:37:86:23:30:61:ba:09:49:bd:c2:f6:55:76:
a9:f0:93:1a:ad:c1:8b:23:f7:99:e2:aa:09:b9:08:d0:47:5e:
84:ca:ec:cb:34:0a:54:c4:67:c3:7c:2a:71:05:2b:ef:67:a2:
33:ae:0d:d2:9f:2e:4a:d5:a8:9f:9a:f4:38:85:02:9a:ec:25:
ed:62:30:99:df:59:53:e2:3a:b9:e8:5f:1d:be:93:92:3b:19:
fd:17:22:34:11:8f:a5:ae:0d:83:98:28:70:1d:75:fd:b6:47:
53:62:22:07:ca:18:fc:19:8a:e8:a8:17:64:e0:d8:08:d5:88:
84:64:fd:b9:47:49:54:88:e5:33:38:55:bf:e7:13:d0:df:63:
78:a9:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:07 2026 by rpki-client