Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: ZuHVTNdR0yRhFBPLs9LVMruMgm+wWEzVVfpt5thzySE=
Subject key identifier: 2F:FE:9B:D1:CC:48:CA:34:35:B3:10:35:44:44:F3:70:28:C8:F6:40
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019E2A3900CF2E0B94B62ED690E7C2C97455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 0170
Signing time: Fri 15 May 2026 06:00:39 +0000
Manifest this update: Fri 15 May 2026 06:00:39 +0000
Manifest next update: Sat 16 May 2026 06:00:39 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: bUQmu+D6kHiLazTU7VNme1kETQgw+TCdYsqoREt210A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:00:cf:2e:0b:94:b6:2e:d6:90:e7:c2:c9:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: May 15 06:00:39 2026 GMT
Not After : May 16 06:00:39 2026 GMT
Subject: CN=2ffe9bd1cc48ca3435b310354444f37028c8f640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3d:4f:d2:79:aa:cc:29:7b:e3:cf:62:17:61:
b4:3a:38:ab:ad:45:7d:20:da:01:28:f8:54:02:dc:
51:9b:fb:62:28:57:7c:02:13:55:8e:0e:95:8b:ac:
e2:6f:50:02:40:2b:f6:86:2b:4c:4a:68:11:54:60:
61:ad:44:80:71:26:eb:45:ab:10:6e:0d:1a:e3:78:
a2:1e:8d:3a:00:7a:0e:3c:45:09:b4:a4:17:74:92:
2b:e5:94:e5:81:03:b7:70:61:23:32:ed:e9:1e:b3:
e2:3f:23:6d:ae:9b:1d:97:a0:15:31:d9:df:ec:2f:
8e:98:fa:a0:dd:7c:44:ff:50:22:f5:3f:3d:c5:27:
08:b8:f7:2c:76:db:06:e2:5f:8b:4c:30:4a:0f:1e:
55:ec:ee:44:fb:4c:2e:64:90:a8:fd:6c:fa:01:87:
88:b1:e6:38:3c:83:5c:ac:57:f5:d0:5a:28:1e:76:
29:1a:bf:01:4f:aa:88:2e:19:05:a1:a0:a5:f5:5f:
32:f3:7c:26:98:2e:6e:a7:b9:7e:8f:c3:e1:e9:16:
53:a0:da:07:81:b3:de:db:d6:35:72:80:8c:14:76:
6a:48:fc:b3:64:1d:9d:40:c2:03:85:f9:b3:94:9b:
33:7b:67:2d:b0:bb:d1:e7:68:93:43:d2:bb:fc:88:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:9B:D1:CC:48:CA:34:35:B3:10:35:44:44:F3:70:28:C8:F6:40
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:89:0e:23:01:9c:31:fd:4b:a5:14:6a:58:af:c3:69:c1:3b:
8a:d2:81:b9:c8:41:dc:e6:1f:8b:55:58:03:94:85:1b:98:99:
db:f5:63:a8:c0:21:3c:c6:db:d6:ee:d5:02:a4:4d:7c:7d:aa:
93:13:f0:2d:9b:a5:32:49:67:e2:06:95:c6:46:08:73:8c:8e:
91:8d:d2:f4:06:01:55:23:1d:17:f0:dc:e0:ea:6f:c7:26:44:
52:9f:13:95:69:33:19:fc:91:89:4a:39:02:b6:a5:04:95:cd:
01:54:9c:5c:46:ca:03:22:7d:4c:02:17:48:b8:d0:69:10:34:
17:32:14:ab:a7:71:c1:5e:4d:5d:a0:64:40:fd:47:5f:b2:7f:
1c:6b:f3:35:01:74:71:06:2c:9c:eb:03:1e:16:b0:1e:02:58:
83:14:17:ce:d5:67:e7:d0:1e:6d:b0:c1:ed:14:f1:6a:0e:0c:
63:31:5f:36:69:29:54:4d:56:9b:a5:f3:13:5b:bf:e1:56:68:
32:c1:d6:db:5b:18:be:6c:7a:0c:a4:64:a1:1f:8d:50:53:0e:
57:ae:79:4b:50:5f:c5:6d:f3:f1:39:62:d1:f4:33:54:12:6e:
57:a4:be:55:fe:0d:1f:e6:15:c3:81:ce:2f:b7:a0:9e:97:47:
b7:33:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:35 2026 by rpki-client