Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: IOXV3QRTBoPfRMilQy9sLJKUA++ifAJMA4mjjOd0VQk=
Subject key identifier: A7:5F:2B:CD:69:D3:A8:08:3F:65:88:A6:CD:9D:32:89:4D:4B:A0:9F
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019EB6FC0E45612C5B1D76D1294CB30FF4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: 9B
Signing time: Thu 11 Jun 2026 14:00:32 +0000
Manifest this update: Thu 11 Jun 2026 14:00:32 +0000
Manifest next update: Fri 12 Jun 2026 14:00:32 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: Es+EkkBKJMRwaahMlgvFWSCZ3iEqU5YsH7m2D3Zp6rk=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:0e:45:61:2c:5b:1d:76:d1:29:4c:b3:0f:f4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Jun 11 14:00:32 2026 GMT
Not After : Jun 12 14:00:32 2026 GMT
Subject: CN=a75f2bcd69d3a8083f6588a6cd9d32894d4ba09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:ec:50:00:70:3e:63:33:96:f5:72:32:84:
58:31:80:08:99:23:32:03:98:9a:54:56:2e:a8:64:
46:16:b9:20:47:3a:4b:91:62:11:4b:aa:ea:11:09:
8d:4e:2e:e8:45:c4:80:90:b5:ec:9a:03:cf:0d:d5:
61:50:88:ee:3d:2b:cf:c2:3a:bf:5d:e3:33:1f:b3:
68:c4:70:96:a5:ae:0f:18:4c:de:ac:90:76:43:1a:
6a:bc:80:ab:51:93:ed:e0:b2:00:91:87:a7:c8:ed:
55:0c:7c:b2:9e:3c:e5:6c:8a:4e:d7:9a:a2:c2:e4:
ca:a9:53:8b:f2:26:7b:d1:73:37:7b:e6:5c:ce:fa:
7a:44:e8:13:ba:03:28:a1:95:68:8d:80:13:32:9d:
ae:68:b9:78:5a:6d:b1:04:44:b3:da:bf:01:4e:a2:
a1:4d:4b:13:91:c6:36:e7:0e:5c:6c:a7:4b:61:73:
12:c4:e9:8e:da:a7:1a:3a:7f:13:bc:12:8d:34:28:
f3:a6:62:b6:f8:89:71:9a:83:cc:4e:8d:ec:8e:d8:
68:ab:e7:54:91:92:ed:9a:8f:9b:a1:76:52:39:65:
9d:f6:0c:4a:a5:f5:74:d0:2e:7a:61:e2:78:5f:f4:
bc:18:38:46:03:1a:a1:b3:ed:79:52:f3:9b:7f:b0:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5F:2B:CD:69:D3:A8:08:3F:65:88:A6:CD:9D:32:89:4D:4B:A0:9F
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:f1:c4:df:f8:01:67:51:92:34:1a:2d:46:eb:3c:2c:f7:
d1:69:0a:51:af:f8:77:4f:f6:f3:8c:a0:6b:59:b8:a5:41:cd:
be:2f:0e:d0:bd:49:21:9e:f9:06:9f:b6:8a:28:f9:ad:0d:2d:
6c:6c:20:98:71:9d:31:82:89:ba:7b:5e:ab:91:01:c0:a2:e6:
6e:ba:71:34:2d:a2:b7:d3:c3:ab:15:0a:e7:e2:2d:10:0b:84:
27:60:42:25:2b:e7:72:b0:08:f8:bb:ab:1c:22:5d:94:b3:cd:
81:78:20:9c:91:a3:9e:c8:ab:ce:8a:2f:1f:8a:f8:9c:5e:f7:
82:fc:12:aa:12:4f:4b:f5:7b:70:8d:93:19:d2:81:85:28:db:
2e:a8:6e:2b:de:e2:65:30:1b:38:fb:89:5c:d0:83:1a:e6:b2:
a4:53:12:36:9f:30:6a:ff:17:d3:50:b9:0f:04:74:c3:40:c9:
72:97:0f:f6:11:c2:98:0a:5b:c2:d9:d2:43:a6:0b:f8:46:15:
13:e0:73:f3:f4:14:ee:77:3b:12:1c:5c:9a:aa:ce:60:43:c6:
71:59:f6:ed:2d:62:e7:a3:bb:bc:0e:a0:7c:0b:73:06:3e:39:
a2:7d:ca:9a:b7:5c:8a:f6:51:08:97:6a:01:d1:7a:76:51:ca:
10:f4:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:30 2026 by rpki-client