Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: BNRAP72HUc3B36cpHVUntKwEe6LmCmxy20+u1OJawYA=
Subject key identifier: DF:52:6F:5D:8E:2B:7B:81:1C:8C:1B:DE:C5:52:E1:40:D3:56:4A:87
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019E1F7F804BF076337632AFCC4DD227119B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 190E
Signing time: Wed 13 May 2026 04:01:49 +0000
Manifest this update: Wed 13 May 2026 04:01:49 +0000
Manifest next update: Thu 14 May 2026 04:01:49 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: Jw1xjhRyTGswVGWqNDjiz3l0UgkE8drdgQO2adC2hAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:80:4b:f0:76:33:76:32:af:cc:4d:d2:27:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: May 13 04:01:49 2026 GMT
Not After : May 14 04:01:49 2026 GMT
Subject: CN=df526f5d8e2b7b811c8c1bdec552e140d3564a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:aa:69:b6:ca:9e:d0:0c:5c:a9:1e:f0:46:
bd:80:c0:e2:1e:47:75:a9:bb:9f:a0:97:0e:79:b5:
c9:10:d2:c0:39:c3:b1:c2:37:c6:d5:54:85:43:1c:
a0:47:59:2e:8c:6e:07:f2:d0:7a:67:82:54:09:9d:
d0:a5:71:4c:df:a6:ec:d5:5c:27:89:23:20:b8:8f:
e6:b0:da:26:ad:2f:e3:1c:95:9f:8b:d7:bd:f7:cf:
46:19:26:03:05:62:74:52:4e:a1:8d:63:90:a6:49:
e2:9b:11:53:8a:3f:f7:21:ed:2a:7f:b5:5b:83:d5:
97:bd:5c:b8:51:bc:0d:a6:6f:3e:98:89:b1:45:eb:
48:d3:09:31:44:ba:28:d1:a9:8a:e6:41:cb:c9:9d:
f9:61:11:dd:aa:90:da:7e:3b:8a:09:3b:d7:16:79:
ed:4d:21:3d:ec:4d:8e:3d:b7:4f:fb:63:27:46:a8:
c5:c7:e7:33:10:11:e7:77:a6:d6:60:e8:eb:0b:46:
8f:d9:03:68:2e:cb:66:41:4c:bf:c8:d8:ed:67:da:
60:4f:33:dd:fc:2b:8b:e8:11:e4:ab:c2:85:99:a4:
92:e2:c7:d4:6c:a1:9e:52:d2:af:8c:e5:73:9e:2f:
bb:77:5b:d7:2b:90:ee:da:ed:1d:1a:5f:fe:64:9c:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:6F:5D:8E:2B:7B:81:1C:8C:1B:DE:C5:52:E1:40:D3:56:4A:87
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:8b:4a:04:64:53:df:c2:2e:a5:4f:8b:22:b8:a6:02:15:
df:86:ea:24:d9:06:cd:f4:ae:5c:88:3c:15:92:41:03:d6:4b:
5e:c3:ac:03:7d:c7:1c:de:3f:bd:84:73:ba:89:34:19:bb:e8:
3e:8e:47:d8:17:79:55:d7:aa:7d:7b:76:95:77:8a:64:b7:79:
42:ae:fb:fc:e0:9e:b3:a3:99:e1:09:93:dc:83:54:d3:10:a5:
2c:a7:61:06:a0:a9:15:b9:d1:f7:f8:9c:26:c2:5e:1a:b0:65:
af:f7:38:6a:01:0a:3f:56:e2:ff:cf:c2:97:91:49:65:2f:02:
f4:11:ae:aa:35:b4:41:b1:dd:bd:77:45:87:de:79:10:08:a1:
44:61:a2:b7:0d:70:5d:92:59:49:c7:45:cd:bc:eb:97:17:f1:
95:e7:02:3d:82:52:73:c5:e5:f2:f4:ae:d4:02:d5:87:ea:2d:
a5:29:da:83:79:df:c1:d3:c0:de:68:eb:7a:b9:ac:0a:d6:ec:
09:78:33:0f:f5:59:eb:b2:80:fa:b3:bb:73:d5:17:77:fd:a3:
58:02:13:07:7b:3a:4d:ac:f0:5b:d6:88:61:a3:06:77:56:09:
df:c3:fb:02:c6:09:e0:9d:02:b3:69:67:7e:ea:4d:cc:e7:bc:
64:57:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:18 2026 by rpki-client