Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: Q3yZJJlFck+QLtGACMVIUL4TjC4D6lz1BW98wuDHFFw=
Subject key identifier: 76:B2:87:D1:50:69:4D:65:FE:71:EB:A9:9A:CD:1A:AF:4B:C0:D2:E0
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019E3004EB3747A92072A992521900F90DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 16C3
Signing time: Sat 16 May 2026 09:01:29 +0000
Manifest this update: Sat 16 May 2026 09:01:29 +0000
Manifest next update: Sun 17 May 2026 09:01:29 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: NkW1qtoskfHAEzm1BnO2QyzuhnKzNZUrE0avCwSKIwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:eb:37:47:a9:20:72:a9:92:52:19:00:f9:0d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: May 16 09:01:29 2026 GMT
Not After : May 17 09:01:29 2026 GMT
Subject: CN=76b287d150694d65fe71eba99acd1aaf4bc0d2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:86:d1:9b:b7:e0:23:18:70:2d:44:eb:83:
8c:3c:12:f2:03:d5:e3:2e:d3:1e:ab:81:6d:2a:d0:
d8:f5:bb:8b:5a:24:e0:c4:6f:19:4e:b3:53:93:5a:
28:ba:f1:8d:0b:13:c6:d6:7a:aa:3e:d0:4d:ea:3b:
ef:32:90:71:8b:42:2f:ce:af:22:6e:48:5c:d2:69:
8c:93:b1:ce:f5:f0:22:ec:b9:a9:1f:56:46:4a:bf:
12:97:92:2a:a0:09:4f:13:55:16:f2:95:e8:64:8f:
3c:c4:ed:19:2d:d6:26:a6:42:40:68:fe:45:2a:dd:
91:c6:88:01:ed:58:c2:e3:30:42:e1:7f:04:c3:4d:
1b:ef:44:8e:92:01:48:5e:93:de:ca:44:3d:3c:11:
70:b4:5f:7d:4a:6a:8e:ba:f5:f0:1b:01:16:c8:6e:
7d:a2:b2:53:2c:bf:aa:93:27:19:9d:a9:ff:c4:83:
b9:6b:e1:fe:9e:59:31:76:7b:af:78:dc:d7:67:79:
89:3d:4d:b8:ae:29:82:fc:c1:1c:e2:73:83:b3:c3:
9f:2f:19:42:7b:ce:6a:91:62:e2:57:59:6a:58:3d:
e3:23:2a:8a:8e:f3:b4:23:e2:76:ea:0f:24:2f:c8:
bb:01:05:02:be:49:a2:fe:b3:09:e0:1f:41:f7:21:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B2:87:D1:50:69:4D:65:FE:71:EB:A9:9A:CD:1A:AF:4B:C0:D2:E0
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:1b:20:99:a5:f2:f1:46:7d:ff:5f:97:ef:f1:ca:96:81:
b6:ee:41:41:8a:c0:32:9d:ba:29:1e:f9:06:97:bc:f1:3a:0a:
0a:2c:60:bf:cc:f7:0e:6a:cd:7e:56:1a:72:50:0b:05:3d:4b:
47:9a:ca:6a:80:88:f7:d7:65:60:ce:01:af:ab:0c:85:a5:8f:
c1:3a:55:f9:0c:32:66:6a:be:e3:5c:0b:11:21:a3:f6:51:6d:
d6:e6:a0:4b:e6:96:eb:5d:a4:09:db:90:d9:ae:4c:c3:0e:b3:
b1:d3:74:17:ee:c7:85:76:e5:e2:8b:ba:1d:d4:4e:fa:93:ce:
16:3e:a8:02:5a:7e:44:a1:da:8c:40:d3:67:fc:e3:a9:67:ca:
e1:30:cb:3c:b3:cc:56:cc:5b:ca:c6:0f:94:b7:9b:0a:98:92:
08:57:8c:81:de:b3:4f:e0:e4:61:6c:23:b0:01:b9:19:f9:96:
31:de:0d:c6:99:dd:bc:39:92:85:9f:76:05:54:e8:00:b1:1b:
69:d3:e7:d3:17:1e:8f:07:8b:a4:0e:37:69:fe:be:85:85:7e:
e6:6d:31:77:a6:fa:40:e8:8b:af:31:20:d2:58:e7:c6:c8:6c:
c0:a6:cd:c4:99:03:c7:5d:f9:5e:05:12:99:58:f1:9c:e2:c0:
a8:d9:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:03 2026 by rpki-client