Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: ICuz5lZH+oOh1i6YT0cl+s6b/WLUUmDeX88+cBvZv4A=
Subject key identifier: F6:F8:E2:DB:E9:AA:D5:64:B5:85:DA:31:9E:28:B9:60:FB:68:06:E4
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019E6F51722CD81908AF7879FD3B6011DF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0F51
Signing time: Thu 28 May 2026 16:01:09 +0000
Manifest this update: Thu 28 May 2026 16:01:09 +0000
Manifest next update: Fri 29 May 2026 16:01:09 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: 1H7z0A7RC5fhf1CR1SB8d2zgrjha4em3WLK/69XqW+0=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:51:72:2c:d8:19:08:af:78:79:fd:3b:60:11:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: May 28 16:01:09 2026 GMT
Not After : May 29 16:01:09 2026 GMT
Subject: CN=f6f8e2dbe9aad564b585da319e28b960fb6806e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:fd:ce:d7:e3:86:93:18:28:7c:a6:76:49:
60:3f:d2:07:ab:11:57:34:f3:cb:2d:61:06:6a:aa:
50:6c:99:f8:84:9e:2d:33:84:7c:87:c6:61:79:76:
33:8d:0b:18:74:64:64:8d:56:b3:a0:7d:f7:40:19:
5d:74:66:a2:04:85:23:86:be:0f:63:87:19:e6:a5:
1a:c4:53:6e:67:0e:c3:f6:08:e0:06:48:87:ef:b5:
d1:84:e4:fc:57:73:6d:ea:85:8e:b0:8a:ba:5a:ae:
99:48:af:0a:22:5e:a4:41:0a:74:c6:a1:3b:f5:79:
67:42:8d:17:b7:1a:98:1e:76:e7:d9:3f:3e:03:18:
ce:7f:73:34:7b:cc:dc:83:96:60:35:ad:a2:02:a9:
8b:d1:32:fb:9d:32:d0:b1:05:47:32:14:66:75:19:
51:ce:a5:6a:33:59:a6:12:a2:ea:68:4a:45:25:3d:
2b:26:c9:ed:db:6f:1e:25:64:16:5d:0b:8a:f4:2a:
01:7b:4a:ab:13:1e:96:41:94:e9:6e:63:08:ad:72:
62:1f:2a:25:1a:49:2d:44:f1:31:eb:69:df:38:f8:
74:5b:63:12:94:11:3b:97:2e:7e:69:29:27:6d:a1:
bc:6b:70:63:4a:b4:fd:13:12:0c:d3:9e:66:bb:a8:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F8:E2:DB:E9:AA:D5:64:B5:85:DA:31:9E:28:B9:60:FB:68:06:E4
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a4:81:56:b9:7f:96:1b:31:c7:b0:57:c3:0b:f1:85:bb:ab:
22:bd:c8:31:70:7c:71:20:15:e4:61:22:58:c8:14:a2:92:de:
f6:f4:9a:00:b2:fb:bc:57:8e:bd:d6:70:da:1a:50:79:0d:ad:
7f:6a:b3:d8:21:32:c9:b0:c0:86:6a:24:8a:16:26:c3:e2:e6:
95:15:8b:09:91:9c:08:45:89:52:f8:4d:db:da:4c:f6:d2:79:
a8:8a:32:ff:ba:94:42:70:3a:a5:fa:42:98:fe:30:48:4f:d9:
4c:5e:28:1b:30:4e:01:91:16:12:31:40:61:db:e9:ff:35:3a:
95:1e:ea:64:48:72:39:d4:f4:ca:49:69:cc:58:bb:f8:e6:d0:
2c:ca:59:db:a8:d4:50:c7:e1:f1:5e:60:7c:2b:64:3a:f6:b2:
ec:65:3f:e7:c1:5e:f8:86:aa:36:c2:fb:18:5f:d5:36:ae:76:
02:85:d3:cc:e8:e0:79:cf:2a:e9:09:19:5d:09:4e:7b:a3:d1:
3b:2e:ac:6b:66:f5:27:ca:b5:53:b5:90:5b:4b:86:a3:8a:57:
b2:b0:59:23:70:10:ac:76:64:66:90:d8:44:27:38:1d:7f:a1:
1a:b4:2c:95:86:80:af:7a:f6:ad:21:e3:c6:3d:f0:34:17:0f:
a3:2b:01:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5vUXIs2BkIr3h5/TtgEd85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk
NzUyMjQwHhcNMjYwNTI4MTYwMTA5WhcNMjYwNTI5MTYwMTA5WjAzMTEwLwYDVQQD
EyhmNmY4ZTJkYmU5YWFkNTY0YjU4NWRhMzE5ZTI4Yjk2MGZiNjgwNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozf9ztfjhpMYKHymdklgP9IHqxFX
NPPLLWEGaqpQbJn4hJ4tM4R8h8ZheXYzjQsYdGRkjVazoH33QBlddGaiBIUjhr4P
Y4cZ5qUaxFNuZw7D9gjgBkiH77XRhOT8V3Nt6oWOsIq6Wq6ZSK8KIl6kQQp0xqE7
9XlnQo0XtxqYHnbn2T8+AxjOf3M0e8zcg5ZgNa2iAqmL0TL7nTLQsQVHMhRmdRlR
zqVqM1mmEqLqaEpFJT0rJsnt228eJWQWXQuK9CoBe0qrEx6WQZTpbmMIrXJiHyol
GkktRPEx62nfOPh0W2MSlBE7ly5+aSknbaG8a3BjSrT9ExIM055mu6hEFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb44tvpqtVktYXaMZ4ouWD7aAbkMB8GA1UdIwQY
MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt
ZWZlNzljMjU0ZTI1LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1
LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaSBVrl/
lhsxx7BXwwvxhburIr3IMXB8cSAV5GEiWMgUopLe9vSaALL7vFeOvdZw2hpQeQ2t
f2qz2CEyybDAhmokihYmw+LmlRWLCZGcCEWJUvhN29pM9tJ5qIoy/7qUQnA6pfpC
mP4wSE/ZTF4oGzBOAZEWEjFAYdvp/zU6lR7qZEhyOdT0yklpzFi7+ObQLMpZ26jU
UMfh8V5gfCtkOvay7GU/58Fe+IaqNsL7GF/VNq52AoXTzOjgec8q6QkZXQlOe6PR
Oy6sa2b1J8q1U7WQW0uGo4pXsrBZI3AQrHZkZpDYRCc4HX+hGrQslYaAr3r2rSHj
xj3wNBcPoysBTg==
-----END CERTIFICATE-----
Generated at Thu May 28 19:21:18 2026 by rpki-client