Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: Ghry9EtBJKSheNUiQ9kC6JUl1kJdOXtysuyfDSdC43o=
Subject key identifier: E0:9F:1F:C1:61:3E:8A:C1:52:2F:B0:30:CB:C4:38:97:85:09:DA:82
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019DCE991BB94021AA0463B9C2F741209A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0F8E
Signing time: Mon 27 Apr 2026 11:00:33 +0000
Manifest this update: Mon 27 Apr 2026 11:00:33 +0000
Manifest next update: Tue 28 Apr 2026 11:00:33 +0000
Files and hashes: 1: GeFTU20e0_cCp_QY1xvZa0HLe_o.roa (hash: /NINQkmS7FTdz7cltmoURNxtY32MfCkE77Bo3JP604M=)
2: Gj3q6BUrOlXkSFTxYL-qpFmf_vk.roa (hash: whp8DDz0dPW4+zkA02OHiJY2B4aYPpsEKoqbxk/AXoU=)
3: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: H7HbtGwVBPx1rt+z64JoSxthB0QAZq1JmG34Fa61knw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:1b:b9:40:21:aa:04:63:b9:c2:f7:41:20:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Apr 27 11:00:33 2026 GMT
Not After : Apr 28 11:00:33 2026 GMT
Subject: CN=e09f1fc1613e8ac1522fb030cbc438978509da82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:30:f4:49:59:dc:ca:3f:4b:51:b6:c1:41:
01:98:ac:5e:3f:97:c5:ae:25:7b:5a:ad:2b:01:e5:
c6:02:5a:a5:da:9c:8e:dd:ac:e3:ea:a0:05:bc:87:
c1:d0:f6:0c:31:8a:ea:77:99:8c:5f:f1:d9:69:cb:
d1:ec:5c:4b:8d:f3:55:67:08:15:66:80:40:75:75:
ed:a8:d8:8c:08:32:35:0e:fc:bf:4a:85:05:31:90:
21:8e:87:30:be:f0:b4:ec:04:0a:89:ea:32:36:c0:
51:7a:85:82:37:1b:52:2b:d2:0f:7a:b9:cb:bf:03:
07:e7:85:43:b1:99:f2:cf:09:d9:c1:65:4f:76:25:
32:2c:3b:c6:80:2b:69:dd:37:ba:95:ce:8e:e0:aa:
75:23:df:f5:de:e5:26:91:5c:b7:8c:9e:cc:98:ea:
99:a6:99:1f:2b:3f:be:99:d4:50:63:6b:e0:a5:c7:
e5:86:53:4e:f9:5c:e6:94:98:72:ea:62:d3:2e:b1:
af:f0:fe:57:ef:b1:86:f7:1e:bb:a5:e0:d6:c5:7b:
b2:b0:cb:d4:a3:5b:fe:8c:4c:31:48:be:ab:ce:69:
25:74:9c:d7:ae:08:a9:4e:7b:e0:7f:f6:77:f7:02:
52:e5:c8:97:1b:9f:02:77:dc:d6:d0:15:f2:f0:40:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:1F:C1:61:3E:8A:C1:52:2F:B0:30:CB:C4:38:97:85:09:DA:82
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3a:d3:27:15:29:78:17:94:36:f5:9a:a1:a2:20:30:ce:3c:
34:f4:6d:30:1e:53:00:1d:7f:28:0e:76:7e:d4:c0:13:3a:c6:
b6:5c:a6:9c:39:a2:52:bf:7b:65:b5:37:2c:11:63:57:5b:61:
60:d2:a8:57:b3:04:c6:b3:74:30:81:0b:43:6b:d9:4d:31:94:
83:f4:ba:29:dd:41:8a:a6:15:97:a7:7a:9e:63:62:22:05:c1:
c3:aa:47:d3:a6:fe:2a:20:7a:bf:56:6e:c8:01:0c:f2:08:d3:
05:8e:ed:fb:af:78:f8:f6:8a:68:84:1e:2b:a1:4d:64:b8:e2:
b6:96:c6:a8:e0:f5:13:17:6d:b6:7b:2d:60:a4:51:c8:5a:1e:
14:4d:57:bd:27:e5:a0:b7:20:f2:18:a0:5a:14:14:31:f7:39:
d8:30:ea:47:91:ba:74:89:38:43:98:a7:5f:07:ba:eb:23:d6:
e8:da:63:0c:7a:d6:4c:14:46:cb:45:b5:1a:5c:f1:ee:d3:c7:
b6:52:ca:08:95:9a:f1:c4:6e:7c:f4:b8:52:25:61:de:ce:80:
9c:b6:fc:64:63:f6:d2:8a:68:8c:63:f9:9b:8d:1e:c9:0e:75:
e7:03:fa:b9:71:6b:ac:aa:2e:7f:5a:38:cc:54:c6:ab:c7:d7:
8b:7a:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:28:17 2026 by rpki-client