Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: 5YQwA5+O+c2GLUKeN0TsapTul7hS63i4zx6D+1KY2uA=
Subject key identifier: 3A:60:BF:A3:17:79:43:E9:1D:BD:24:30:69:E4:E9:CE:57:CF:BA:6A
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019E1EA2A8931A3139186E41892640EF9003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 01AE
Signing time: Wed 13 May 2026 00:00:36 +0000
Manifest this update: Wed 13 May 2026 00:00:36 +0000
Manifest next update: Thu 14 May 2026 00:00:36 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: g/L4/z36qy8iLABNsQiXS9jcJE91dCzXLJKgJr/xs2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:a8:93:1a:31:39:18:6e:41:89:26:40:ef:90:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: May 13 00:00:36 2026 GMT
Not After : May 14 00:00:36 2026 GMT
Subject: CN=3a60bfa3177943e91dbd243069e4e9ce57cfba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8f:cb:1c:1f:fd:50:1a:8a:24:01:05:e1:af:
d5:14:f0:34:fe:9a:3a:00:9f:3b:e5:50:69:3a:ee:
f7:67:30:61:a7:94:11:88:ef:fa:04:5c:33:6c:ce:
e9:a0:e9:72:93:53:fd:40:f5:03:2d:d7:0a:ff:a6:
3d:08:60:ce:5d:66:d7:d3:2e:38:a3:a3:48:af:6d:
0b:26:c9:45:be:29:80:9c:c9:24:37:99:be:7c:12:
67:b7:ac:2b:e0:54:54:61:bb:59:b1:4a:d9:3a:fd:
10:12:35:3e:5c:3e:4f:66:f7:d8:b8:08:83:8b:c5:
be:c2:95:06:b0:87:b3:61:d7:5e:ed:62:53:6d:eb:
79:97:7c:eb:aa:0b:8a:92:6d:eb:bf:2f:0f:85:bd:
6c:a8:ac:fe:fb:6c:a7:2b:bb:0a:e5:01:70:76:94:
87:ae:8d:d9:1d:db:f3:37:58:92:1d:8b:d0:ff:b3:
50:59:5f:49:11:3d:7e:82:2c:bd:46:3e:5a:eb:f3:
98:dd:ce:51:7f:e5:e4:67:28:6d:61:5f:c6:ca:8e:
d6:37:7a:9b:1b:41:5a:00:25:20:87:cd:00:f8:6f:
7a:bc:37:e9:8d:2e:96:0e:26:fe:00:2f:2c:b1:cf:
58:c2:00:72:09:89:82:62:6f:f7:a4:99:c2:2d:53:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:BF:A3:17:79:43:E9:1D:BD:24:30:69:E4:E9:CE:57:CF:BA:6A
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:bf:d5:0c:17:8e:79:b4:30:c9:9d:06:2f:a6:6d:4d:36:
ef:29:38:99:55:e3:72:ad:ab:c8:51:f1:04:7d:c3:07:e5:13:
75:c4:bd:16:35:5b:f4:52:26:81:ea:da:fd:f6:05:c4:6d:2f:
27:54:90:cf:f8:5e:74:84:89:0b:a9:b8:08:3c:3a:50:bd:1d:
ca:5b:bb:49:fe:87:79:be:9a:16:3e:0e:74:92:af:71:fa:7a:
a7:5c:2b:e9:bc:1e:a3:1f:9e:33:61:c4:d9:59:59:fb:5a:68:
3d:e5:b8:65:f8:ab:88:57:1b:89:bd:a4:c6:30:b5:80:7e:03:
55:fd:73:5b:35:06:25:6d:e9:af:5d:28:0f:a2:60:dc:e6:9b:
04:c6:f0:9b:b0:0e:d6:10:da:fa:20:e4:f0:26:49:b1:b2:b5:
df:ae:eb:9c:16:bf:86:68:a0:ec:8a:54:ff:c7:18:dd:bc:55:
ac:c2:3d:72:86:d2:af:e7:c4:df:76:0e:c9:8e:99:2f:86:f5:
70:8d:b6:ad:46:12:02:42:d1:cb:c5:a1:2b:6d:28:fb:5b:de:
5d:8f:78:e5:59:29:28:c0:fb:1e:db:43:98:17:11:a7:7f:ce:
fe:a3:90:3b:62:10:dd:67:1f:4d:de:d5:8a:ed:a8:fd:02:a9:
2c:39:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:11 2026 by rpki-client