Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: ovBHLNgrSeXAa/WLQM4r9+0GQzsJ5ySCezK+jVTswfg=
Subject key identifier: E0:B0:35:03:AF:DD:84:39:B1:7A:B5:36:2E:5C:6A:0D:1B:02:1E:B6
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019E4E7D09E2CBA3D590C0ECBD7EAE9240B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 191D
Signing time: Fri 22 May 2026 07:01:17 +0000
Manifest this update: Fri 22 May 2026 07:01:17 +0000
Manifest next update: Sat 23 May 2026 07:01:17 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: NHS5DPhdoGQWlTa0M4Qrd1ivmpCCPVZ7Wnma8b9quDw=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7d:09:e2:cb:a3:d5:90:c0:ec:bd:7e:ae:92:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: May 22 07:01:17 2026 GMT
Not After : May 23 07:01:17 2026 GMT
Subject: CN=e0b03503afdd8439b17ab5362e5c6a0d1b021eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:b2:a1:c5:b1:69:e3:80:57:03:15:7d:00:
3e:03:b4:6f:11:ca:3c:b9:24:1e:0a:9e:7c:90:c2:
ab:12:4b:5f:41:89:db:53:4c:bc:6c:01:3f:e7:64:
65:cc:58:0c:18:b1:54:17:2f:f7:01:19:62:90:3d:
6d:f7:da:01:ff:cf:db:e4:61:47:fa:de:11:c9:00:
6f:36:e2:e2:95:53:03:d6:3b:34:c0:28:bc:c2:86:
3a:ac:a2:30:c1:c6:c9:d0:b2:f6:91:cf:a8:90:79:
b6:1d:c3:5c:3b:76:6e:f5:87:7e:42:eb:07:ab:19:
cb:61:3f:4b:6e:63:f8:ed:87:4a:7c:d8:07:52:6d:
74:ec:b9:ca:5c:46:13:38:23:5c:18:2a:99:67:1b:
42:c1:c1:37:44:50:f9:54:e6:7c:46:c9:94:4e:e3:
3f:d8:26:6c:bf:5e:ff:68:a4:e6:65:9b:8d:4d:8d:
19:f3:0b:c2:c8:69:1a:79:0b:67:02:10:5e:41:fe:
56:f5:1d:29:f8:d8:a2:fb:97:0d:70:fd:f8:d9:15:
40:a4:79:fc:4b:7c:01:91:6c:b1:ae:75:c9:37:09:
f1:ab:ee:bf:53:39:ae:d5:27:55:e5:50:f1:c1:aa:
fa:65:f5:e8:75:94:91:a4:21:d3:c2:78:78:44:09:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B0:35:03:AF:DD:84:39:B1:7A:B5:36:2E:5C:6A:0D:1B:02:1E:B6
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:d7:16:ea:b2:25:5a:de:00:34:43:06:8c:89:e2:3c:b8:
d1:72:d4:95:9f:c1:fe:06:12:44:77:b0:fc:95:5e:27:04:5b:
2f:df:73:c3:06:dc:82:40:a1:13:46:7d:75:26:ba:53:ef:e2:
75:0f:66:57:f3:8c:41:b0:42:8c:eb:60:64:76:a9:41:e2:85:
c1:93:cb:ff:d9:d9:21:34:70:7c:f9:4d:da:fb:cc:3b:c7:b6:
1f:bf:37:c4:a3:ae:b0:0e:14:03:5f:44:e9:f9:99:52:53:ef:
e8:d6:f1:f8:1a:4b:69:0a:24:64:96:18:56:63:6f:41:3a:29:
fd:ab:b2:f1:73:cc:0a:13:89:3a:9c:8f:17:6f:1f:8f:f2:47:
1c:50:bf:d3:41:ff:26:55:c7:82:f5:c9:23:fd:ab:fb:9c:0b:
99:86:b7:bd:fe:7e:aa:5a:5e:2d:46:96:dc:d0:e8:d6:10:85:
d9:72:f7:a2:20:d3:41:2c:f1:63:e1:9e:ae:37:66:41:47:f0:
fb:29:aa:aa:de:0e:ab:93:40:fe:49:d9:5e:1b:1c:35:f9:c3:
c9:f3:9b:e3:1c:fc:58:9e:17:c6:a9:bf:3c:77:a2:e7:da:0d:
ba:6e:61:b0:af:db:d7:2e:34:7d:3c:04:3d:ee:17:06:2d:48:
5a:e9:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:50 2026 by rpki-client