Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: Gs9cUchFPYhjXMxMkecYUkKpze8Nho9BycBHmuLT0Pg=
Subject key identifier: 04:52:18:3D:7F:48:83:E9:3A:04:F2:59:51:D8:8C:C5:A6:D2:AC:BF
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019EDC1C501C7CCD099F4F34B6EE155301F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0D5B
Signing time: Thu 18 Jun 2026 19:01:43 +0000
Manifest this update: Thu 18 Jun 2026 19:01:43 +0000
Manifest next update: Fri 19 Jun 2026 19:01:43 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: s+g5qwT9uuKDgncHPEw2KiFHuFp62sxnuhZk28YmERE=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:1c:50:1c:7c:cd:09:9f:4f:34:b6:ee:15:53:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Jun 18 19:01:43 2026 GMT
Not After : Jun 19 19:01:43 2026 GMT
Subject: CN=0452183d7f4883e93a04f25951d88cc5a6d2acbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:23:a6:f2:2d:30:61:1f:56:fc:1f:73:33:90:
73:85:c9:60:df:18:df:30:2b:42:e7:a2:40:f7:85:
10:55:1f:13:d6:9d:e7:80:a4:44:69:6b:ba:9b:5e:
a6:75:1f:67:33:b5:a4:99:79:ff:62:98:57:d3:69:
0a:46:0c:58:45:a6:b5:c4:86:be:92:36:6d:e7:e0:
c2:b2:54:da:1a:f3:a3:cc:de:22:d9:35:bc:46:66:
5f:7d:84:38:be:11:da:c8:f9:d1:27:36:f4:f1:c5:
fa:66:cb:ef:ef:af:ab:f4:d7:ca:03:ae:79:29:3c:
b7:85:ba:df:46:1b:f4:ec:b6:e2:9b:cc:37:1c:28:
4f:07:81:1a:0a:61:e9:4e:88:e6:6b:a8:c4:4d:35:
94:71:6b:72:f1:e3:6b:86:0e:bb:e6:51:b4:9a:fb:
62:2c:f5:6a:48:84:c4:3e:5a:c9:f4:66:1f:df:23:
e3:f4:55:1f:65:98:e9:44:b0:14:75:2e:0b:07:32:
c2:c1:be:9d:5a:a4:31:a0:74:77:a9:d8:8d:19:46:
a5:f7:c7:04:9b:ba:4d:49:e2:78:ce:e6:5b:38:b0:
b5:c5:54:75:db:c9:2c:6d:ec:9a:32:40:78:fa:e1:
1c:75:5f:55:58:6c:5c:cd:43:31:a0:92:f3:2b:ff:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:18:3D:7F:48:83:E9:3A:04:F2:59:51:D8:8C:C5:A6:D2:AC:BF
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:50:4f:5d:aa:26:e6:a9:3b:f9:1e:45:d7:11:65:2a:4c:cd:
29:06:c0:e6:3e:fc:3c:21:c6:7f:5a:9d:89:ca:38:ac:0e:c4:
a6:b5:61:77:b1:32:84:b9:77:e2:30:80:fa:41:33:bb:35:2a:
25:3f:6a:99:08:11:e6:eb:dd:0c:5a:af:49:97:3f:16:33:b7:
dd:d2:21:ca:c3:0d:52:17:8f:1b:76:80:c1:d3:fd:4f:8e:e1:
9f:fb:58:81:34:6f:b7:69:8c:ad:5a:3b:ab:95:4a:94:48:de:
3a:bc:b9:30:4d:d7:c7:cf:97:9a:9b:cb:d8:17:90:5f:fa:a9:
fc:64:9a:e7:49:cb:e1:20:9c:ab:9a:00:96:b6:08:01:a8:18:
d5:e8:8c:18:42:e5:5a:82:4a:a2:e5:94:fc:35:de:88:a0:07:
bf:8c:e4:80:a5:99:51:6b:e2:76:f3:4e:02:cf:f4:56:e3:f6:
fd:cc:c8:8f:41:20:87:c9:f0:00:37:9d:3d:a6:61:74:9c:04:
bf:04:64:e3:38:7e:41:e7:1e:85:ba:47:e2:31:83:e6:33:fd:
12:cb:c1:fe:9d:2a:2b:fe:63:e7:7c:c4:54:52:0c:e4:d2:65:
23:75:bb:f5:a3:fc:d1:a3:f5:47:d4:ce:1b:b4:10:2f:cc:d6:
45:1c:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:51:48 2026 by rpki-client