Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier: nAqvRqifzwyMbf126ApJ4B2Z7FS09Sr25qau2qjLESo=
Subject key identifier: BD:23:9C:D9:EE:C0:5C:2B:45:66:0B:DF:EE:B1:CE:31:24:F1:91:5E
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial: 019E495655EB5047F39FC73299795DC8215F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number: 191A
Signing time: Thu 21 May 2026 07:00:55 +0000
Manifest this update: Thu 21 May 2026 07:00:55 +0000
Manifest next update: Fri 22 May 2026 07:00:55 +0000
Files and hashes: 1: UDOQeKm21_HbogaX80qPDYGLszg.roa (hash: oQCYUWGJBiukXuu22aVYGVLYnrdXQVCn7RQqhgm8PBQ=)
2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: jGxJgQC55ZIUutfn/jMvckhM+DLvvK22ljcWil0W6Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:56:55:eb:50:47:f3:9f:c7:32:99:79:5d:c8:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Validity
Not Before: May 21 07:00:55 2026 GMT
Not After : May 22 07:00:55 2026 GMT
Subject: CN=bd239cd9eec05c2b45660bdfeeb1ce3124f1915e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:9d:d1:ab:08:e5:22:9f:33:9e:cd:4a:44:
48:eb:ba:83:fd:bd:fa:c4:b1:a8:0b:df:07:52:ac:
8d:56:ac:36:ef:c9:82:85:6a:ba:d8:9f:e5:52:1d:
2f:68:a0:e4:76:57:ee:7f:d1:60:c4:64:a4:df:00:
3a:9a:14:78:a7:93:86:b3:8a:9d:ac:c9:1d:8c:9e:
09:dd:f2:54:ba:4c:63:c6:99:c7:41:fb:95:29:5a:
9b:b0:65:ac:b2:10:a0:0a:7e:14:ff:cb:99:3b:c3:
ff:9c:1c:d0:f8:37:df:b8:37:31:96:f8:fe:9b:8e:
06:9a:99:70:ee:bc:fa:e8:d4:83:90:f4:0e:7d:de:
f9:f6:09:c7:c6:f2:76:d9:37:ed:9f:7b:48:14:2c:
74:30:04:51:48:e1:98:d1:b5:eb:f2:17:78:a5:ad:
6c:1d:e9:bb:36:b4:a4:05:b2:4c:67:db:a8:ea:87:
15:9a:28:0e:37:69:de:8c:0c:59:8c:44:fa:b8:41:
42:f0:dc:ff:b0:4a:55:a0:e7:ed:9c:c2:b8:e4:e9:
c5:49:4a:fb:76:d9:43:fa:14:58:92:e9:48:d4:1f:
86:08:45:3a:ed:52:73:7c:ec:a9:c6:11:fb:0b:98:
bb:49:12:4b:96:d0:ee:1f:99:ab:41:a6:27:50:b6:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:23:9C:D9:EE:C0:5C:2B:45:66:0B:DF:EE:B1:CE:31:24:F1:91:5E
X509v3 Authority Key Identifier:
keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:48:22:b8:6b:22:ed:e3:07:eb:dc:17:63:ec:67:be:68:08:
0e:aa:b7:3d:b6:f3:f1:de:9f:fa:00:95:ea:73:f9:e3:61:ef:
ba:f4:a7:82:92:65:94:74:89:e1:a3:c8:69:eb:d7:2f:5c:75:
8d:82:af:75:c4:98:2a:2d:93:34:e4:ac:65:a2:d8:c2:ba:e7:
92:93:c8:fc:41:61:74:36:8a:a8:b4:28:f2:84:1c:7d:87:a8:
07:bf:38:14:fe:c9:0d:3f:24:05:84:15:78:7f:9d:26:c9:9e:
81:b4:34:51:b3:df:71:7f:f5:94:c1:88:0f:ee:ba:fc:d7:ae:
b4:9a:2c:36:07:1f:73:be:41:87:08:4c:27:70:54:6f:3c:1b:
b1:a3:3c:a8:24:f6:e9:4d:f3:be:aa:9c:5a:2c:31:db:b6:c3:
9d:3b:d2:44:17:d5:9d:64:25:05:28:57:93:e3:b4:68:c5:3a:
18:cb:e0:7c:0e:17:55:0e:ff:58:0b:a5:5d:17:c2:aa:f9:d8:
f8:b3:ff:12:5f:36:60:c3:78:01:64:ef:c7:69:94:df:e5:c1:
71:a5:1c:28:2c:ff:4c:05:da:6a:1c:44:10:f0:ce:40:37:e9:
af:d3:35:39:6b:8e:b3:e7:03:0f:31:ca:86:4e:74:b6:78:6a:
ec:f8:bd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:20:16 2026 by rpki-client