Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: 8qPcYh172FC1ZZEMHeoL0YHLLb+3iYHkqbx4zQ3cm+s=
Subject key identifier: 51:39:61:C8:2D:65:3E:25:94:43:86:B9:A9:37:C9:64:47:47:AA:26
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019E28F0004817211FB3DFA18BA09B1BF16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 1021
Signing time: Fri 15 May 2026 00:01:17 +0000
Manifest this update: Fri 15 May 2026 00:01:17 +0000
Manifest next update: Sat 16 May 2026 00:01:17 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: IegatRcU5pwbM6vBfvDkS96nAXNeIwVnq1Lhe9n6oVM=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (hash: 2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:f0:00:48:17:21:1f:b3:df:a1:8b:a0:9b:1b:f1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: May 15 00:01:17 2026 GMT
Not After : May 16 00:01:17 2026 GMT
Subject: CN=513961c82d653e25944386b9a937c9644747aa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:bd:06:87:ed:d6:34:1f:90:e9:71:55:47:
e4:13:8d:18:09:48:ec:63:74:38:bc:a3:81:46:5c:
4a:c3:c3:12:12:e0:66:7b:b8:d9:36:16:3f:37:f6:
a0:78:44:51:cf:74:4a:f0:c6:e0:b8:dc:63:48:2a:
2e:59:74:c6:12:18:0b:a5:d2:9e:f9:76:8c:15:de:
cd:33:f8:99:29:7d:c3:97:63:b9:84:99:31:25:df:
b0:dc:f2:d0:72:76:e9:95:63:8d:62:18:37:39:0a:
0e:05:b8:af:77:b4:8a:8a:5b:b1:fe:c6:af:27:68:
47:5b:38:a0:08:de:bc:f4:e6:61:0e:c9:ab:98:88:
df:0e:4d:65:60:e3:9e:f2:69:25:0a:92:c7:b2:16:
a8:87:0b:af:24:b6:fd:90:7a:91:2e:6c:a2:59:2d:
6f:e5:5a:09:4c:71:51:f9:79:2f:8d:ba:3b:6b:94:
45:fb:02:db:00:eb:9d:0d:35:60:6d:29:79:f8:e6:
7f:ec:5a:2e:8e:a8:b7:3c:83:50:e8:0e:ff:96:d4:
da:9f:9b:7d:9b:89:ba:72:ce:f5:9b:c0:48:2b:c0:
33:df:08:3a:fe:a7:e4:12:90:00:54:9e:12:ff:4a:
15:d2:2f:bf:00:87:74:89:21:58:f3:44:af:73:b0:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:61:C8:2D:65:3E:25:94:43:86:B9:A9:37:C9:64:47:47:AA:26
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9d:c0:fa:70:77:5e:f2:fa:5d:97:48:a2:10:3a:93:b5:1d:
25:29:1e:21:dd:80:d4:a6:14:76:e6:26:c4:af:d9:cf:df:00:
04:22:d4:41:81:c4:51:e7:f4:31:65:4b:09:71:47:9c:0f:21:
77:9a:77:09:56:1e:31:cb:22:31:f3:e9:ef:a0:aa:84:ef:04:
d4:93:f5:3c:91:7e:ac:fe:e6:da:8f:d8:0b:62:0e:83:4f:2a:
8c:7f:8d:b1:c6:54:44:88:35:9c:4f:ea:82:1b:dd:ac:8d:e1:
88:5e:97:cf:41:ea:39:c3:06:0c:4c:b4:a3:ed:e4:f6:19:55:
e3:4b:e3:c3:cc:b4:1a:5d:c6:b2:f7:d4:52:a5:64:8e:3e:dc:
4a:37:10:af:9d:96:ad:c1:18:90:f5:a8:c9:80:7e:12:fc:cf:
93:70:2a:38:12:3d:c7:b8:d2:e7:0b:b0:59:30:95:0d:42:5b:
93:1f:f8:56:cb:b4:6c:bd:3e:be:29:15:ce:06:87:9c:eb:60:
09:f4:18:7e:28:68:89:d2:28:3f:1d:7a:35:8f:60:b4:50:40:
b8:1c:4a:63:fb:fa:f6:49:e2:4c:c0:03:97:c1:1c:b4:20:c7:
dc:b9:a4:4f:f8:4f:1b:77:d5:ce:8f:57:d1:68:e9:12:73:94:
79:2c:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:10 2026 by rpki-client