Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: nanGA7YEt4SV/aPfbU4ijVBW3ahcaZxt7IPNbetQtMk=
Subject key identifier: 74:77:AC:3C:3E:32:C8:B1:0E:19:1C:74:B5:9A:0D:BE:91:D6:C4:CB
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 019E2C27AC232BC8933C66169E52BD9FFCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 14F0
Signing time: Fri 15 May 2026 15:00:57 +0000
Manifest this update: Fri 15 May 2026 15:00:57 +0000
Manifest next update: Sat 16 May 2026 15:00:57 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: sBC2iSL7eerwdIVslEPQki6vry5dXEtS65UiB1WOzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:27:ac:23:2b:c8:93:3c:66:16:9e:52:bd:9f:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: May 15 15:00:57 2026 GMT
Not After : May 16 15:00:57 2026 GMT
Subject: CN=7477ac3c3e32c8b10e191c74b59a0dbe91d6c4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:5a:5d:e5:3f:1b:cd:5b:61:2d:e6:b9:f1:
46:a0:7f:5a:e1:11:d1:19:9f:2f:d7:14:3f:07:02:
79:b8:22:10:28:8d:a1:9f:5d:33:f3:c8:b5:ee:9f:
3f:ef:ff:b9:02:85:6c:09:bd:7c:d7:b7:e1:36:b4:
af:d4:75:ec:7b:e4:74:5c:83:59:bb:03:15:52:a0:
08:7b:fe:bc:54:d8:af:df:3c:3b:31:b7:5b:cd:bf:
47:62:f3:21:09:29:d7:54:ab:51:e6:93:89:5a:9b:
9e:ab:8f:d0:db:5c:2c:1f:53:cf:65:8e:7a:29:75:
d6:d7:4d:67:92:8e:ef:38:e7:d4:95:f7:6d:49:27:
07:2b:01:8b:f5:11:48:1c:46:26:3f:d0:64:ad:bf:
65:ea:9d:05:c1:65:0a:62:d1:a0:ed:4f:c0:7d:42:
00:64:1e:56:99:a9:91:54:1b:26:32:e0:41:a3:25:
e7:92:56:db:e6:41:ba:e8:bc:7a:ef:c4:f0:25:67:
7a:8a:b3:54:7b:b3:4c:c9:f7:02:8b:78:ab:f4:ed:
ed:06:67:fc:4c:23:2c:cd:c3:89:17:3f:e4:a8:ab:
f7:cc:b0:18:a3:40:a8:03:08:8a:12:92:b4:2a:f5:
5a:60:51:39:e9:69:4f:a1:71:99:5b:45:77:ff:ce:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:AC:3C:3E:32:C8:B1:0E:19:1C:74:B5:9A:0D:BE:91:D6:C4:CB
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ad:77:86:b7:f1:c4:6e:d5:f1:8a:13:59:bc:f6:35:ad:a9:
4a:2b:23:0b:31:5c:e4:b5:6f:a3:5b:17:b4:82:9a:86:76:c4:
8b:1a:25:1c:a4:5d:88:ba:6d:89:bc:01:a5:f0:14:34:5b:02:
77:7a:37:b2:92:1a:bd:ef:07:e6:6f:be:fd:70:cc:29:09:a1:
ee:35:ec:b6:a6:6b:50:4b:de:05:f8:f2:20:1c:fe:00:c1:b5:
01:e1:29:28:c7:4e:09:11:f7:18:9c:57:5c:8d:12:9f:ed:ff:
db:56:05:7c:24:22:3d:a0:f4:02:5d:d9:f8:39:10:02:98:27:
57:c6:47:51:84:c7:56:8d:99:32:08:10:0a:70:ad:b3:fc:a8:
49:4a:99:0b:81:f7:53:9c:f0:94:6a:2e:60:eb:b3:36:d5:d0:
4f:03:f8:52:24:e2:52:9d:26:14:b1:20:15:55:0d:15:a0:d5:
30:a3:08:a5:91:6d:03:27:0b:2a:1a:57:bc:3a:71:ee:68:e4:
c7:0d:cb:1c:33:f2:1d:14:fa:d0:54:bb:3e:1b:20:e5:b9:0c:
32:72:dd:93:ed:13:ad:b9:f7:90:e8:7e:c0:d6:fd:0d:c6:c5:
29:f2:18:99:26:ec:0b:e3:14:f8:81:c6:de:6c:fb:36:f3:7f:
ca:fb:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:55:45 2026 by rpki-client