Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: FAeDjzDA1nZmyLsfqB/gR9WB6JPhdKYApnDXqgkQJeI=
Subject key identifier: AC:CF:21:48:41:3D:2B:3B:16:50:D3:BE:60:30:21:D1:A2:69:4B:44
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 019E2FCD6AC83A20DC29A7F60206BEE4B754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0AE3
Signing time: Sat 16 May 2026 08:00:51 +0000
Manifest this update: Sat 16 May 2026 08:00:51 +0000
Manifest next update: Sun 17 May 2026 08:00:51 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: 9CzHzBd4uI4AmXYYzPr690IR3AteFFJy2NRZvc8z1ro=)
2: iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (hash: btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:6a:c8:3a:20:dc:29:a7:f6:02:06:be:e4:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: May 16 08:00:51 2026 GMT
Not After : May 17 08:00:51 2026 GMT
Subject: CN=accf2148413d2b3b1650d3be603021d1a2694b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:66:4c:89:32:8f:f9:0e:3a:0f:04:b8:df:
20:ef:df:b9:7c:b5:3c:da:28:1a:2d:80:d8:b6:26:
50:c1:aa:96:df:53:9f:bb:10:9c:f4:9c:f9:57:b0:
ee:83:c3:49:ec:62:c4:81:6d:37:fe:dc:c0:7c:8e:
8b:b5:10:eb:af:f9:a5:a1:0f:10:56:16:0f:cd:84:
39:07:89:e9:12:fc:88:3f:86:5d:35:e3:78:4e:9c:
11:f0:0a:bc:b6:08:da:4f:c1:f6:5a:0f:10:d1:72:
ef:08:70:07:37:49:d2:50:5b:c6:15:77:a4:25:46:
f1:9e:d5:97:55:6e:6c:f1:d9:7f:83:03:52:57:e2:
bf:e2:2e:e0:b0:82:1a:d8:9b:14:48:49:c8:08:e0:
6c:d1:a9:db:26:87:7e:f9:72:7b:d9:1d:c9:c2:7b:
c4:d0:9f:42:09:12:83:74:a1:09:a7:96:6a:63:90:
d2:34:45:77:5d:23:a7:7d:ea:df:46:ea:bc:24:c5:
e5:5d:3c:b7:c9:36:63:46:24:7a:c4:7a:6d:ff:96:
ac:18:ae:a7:1b:1c:5c:20:14:27:b9:b2:bf:7a:cb:
56:de:75:a8:ae:ab:93:4f:86:a6:b3:b4:d1:4f:d6:
29:62:c9:c1:62:0b:62:07:c6:7d:d3:c0:68:cd:be:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:21:48:41:3D:2B:3B:16:50:D3:BE:60:30:21:D1:A2:69:4B:44
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:02:a5:99:21:af:72:ad:a0:22:34:81:53:02:d2:5f:0f:7d:
db:a5:be:ab:2a:4a:da:e5:83:10:86:8a:1c:bf:86:10:08:39:
7b:93:71:09:6f:1c:07:a6:70:f9:7c:70:4e:95:37:27:2b:69:
fd:f4:85:c4:94:4f:65:ab:5c:37:14:f9:1d:8c:b6:3a:13:a6:
1a:c4:0a:dc:67:29:f1:b8:45:6b:d5:11:e7:a0:e8:c9:d2:e5:
30:89:c1:79:7f:b8:6d:fd:ce:ed:93:e7:e2:40:51:e8:7f:e8:
b2:c2:95:f4:71:f0:72:aa:bb:e5:3e:35:59:a2:19:f3:c9:b5:
3d:6b:63:0a:3d:37:78:99:97:09:e3:2f:92:f1:ff:27:7a:08:
e6:c2:41:b8:29:7f:3b:01:d5:7d:73:97:34:90:08:a2:e7:e4:
04:6e:e0:5e:68:e7:c8:8c:40:39:ab:72:99:85:8e:fb:3d:f8:
ab:5f:73:88:8d:89:78:0d:45:6e:58:a4:67:7a:2c:88:f6:78:
12:d2:7f:5c:72:8d:b7:60:ef:91:8e:bd:f9:6e:38:4e:88:1e:
5a:43:c5:26:50:45:43:3c:84:25:3a:71:51:99:79:ce:a8:e0:
61:f9:9e:0b:ac:ae:1f:b9:21:bf:26:1d:6b:ba:40:cf:dd:53:
12:7a:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:49 2026 by rpki-client