Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: MyGp57fNIQMBxY5tip5kbRn4BMM45VP+B/9jagxK870=
Subject key identifier: 04:E0:95:FF:93:0C:D4:45:B1:06:EE:C1:CD:25:B5:8C:4A:9C:EF:D7
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019E30E01F9C6E2DCEF86CAFC9720190A476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 17D5
Signing time: Sat 16 May 2026 13:00:54 +0000
Manifest this update: Sat 16 May 2026 13:00:54 +0000
Manifest next update: Sun 17 May 2026 13:00:54 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: eIyFl3fwNMhYkR1JunS8rwzuCrr4HaQEQ+OPGYBGrcE=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:1f:9c:6e:2d:ce:f8:6c:af:c9:72:01:90:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: May 16 13:00:54 2026 GMT
Not After : May 17 13:00:54 2026 GMT
Subject: CN=04e095ff930cd445b106eec1cd25b58c4a9cefd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:2e:6e:fe:04:b9:9b:c2:d1:28:5c:5a:90:
ad:3c:77:11:9f:6a:33:bf:91:da:5e:8e:b6:a1:d5:
41:30:e6:02:30:15:d2:0e:be:23:b1:11:2d:4a:f1:
9a:18:ba:3c:84:b6:68:46:81:fe:ab:f2:00:a3:45:
83:c2:99:a8:72:34:c7:3e:a9:40:7c:8d:e7:d9:e2:
53:66:08:e4:4b:f3:f0:98:ff:9b:0b:84:ce:49:60:
df:bb:af:b6:b8:b3:fb:1a:6e:b4:8d:c7:45:fa:62:
d7:85:98:77:d7:51:27:c5:5d:13:93:79:14:9a:9f:
40:f6:ab:a0:94:bd:db:ac:d9:00:51:1a:75:b4:4f:
0a:07:9b:56:6e:8e:59:b8:23:14:5f:f6:c8:36:f6:
6d:8c:92:5f:01:92:21:89:d2:db:61:fa:38:8b:5b:
33:fd:f8:86:1c:71:fe:eb:82:51:c6:e8:ae:6c:84:
bf:f9:c9:dd:0c:46:17:9a:0b:dd:52:68:29:92:31:
4a:a4:3a:f6:34:f0:cc:9c:48:42:c8:40:34:6f:27:
0b:48:98:b3:6b:f6:0e:81:41:16:8a:9a:9d:7b:54:
ac:2b:ec:c3:97:78:cc:5a:46:9a:de:99:17:b3:d0:
13:a1:8f:30:30:f6:3f:b9:82:49:9b:79:d6:c8:fd:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:95:FF:93:0C:D4:45:B1:06:EE:C1:CD:25:B5:8C:4A:9C:EF:D7
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:85:22:48:25:eb:31:f4:a3:cb:af:f3:ac:05:6f:33:74:3a:
74:c6:75:f2:d8:9f:2a:2a:60:23:b4:e0:bb:be:7e:6c:f9:c6:
b8:4a:62:da:09:ec:80:fc:9a:50:14:cb:4a:f1:8f:9e:4f:2d:
a1:22:52:1a:9e:be:9f:63:bb:fc:ec:1d:51:e0:e2:ea:41:cc:
e7:bf:cf:95:57:e1:81:cc:0f:3d:bd:3c:98:d2:a0:9d:9f:7f:
0f:13:53:a1:dc:30:22:27:e8:ab:5c:53:94:74:4f:65:5b:30:
f9:b2:78:3c:79:aa:33:28:d2:05:25:00:83:2d:65:d3:54:2f:
9b:46:1e:0c:51:1f:0b:19:d6:e6:a0:96:14:c9:6b:3d:aa:aa:
0f:8a:f5:d2:db:c9:87:5f:e4:a5:1f:e1:55:d8:76:94:32:4a:
80:4f:00:7a:69:94:4d:07:62:7e:cc:43:7c:0a:24:29:31:83:
f8:dd:bb:71:5b:00:fb:f3:13:0f:85:cf:87:57:ee:18:8f:62:
0b:10:26:6f:42:03:38:aa:fe:3d:ed:05:6a:d5:9e:be:62:f8:
d0:41:46:ca:f8:7c:f2:f9:07:86:36:5c:63:f0:9f:26:28:1c:
8d:e0:8a:61:fc:54:be:dd:d3:72:26:b5:c4:bd:d0:0b:70:da:
a9:a3:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:09 2026 by rpki-client