Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: bMwDOUmgOCjNdnPaUYzM1jD1Dm1aKt2STePktHu8G7w=
Subject key identifier: C9:78:C8:9C:E6:BE:78:B9:8C:F9:24:9F:87:BD:2E:59:B0:17:B3:CE
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019E9101BD10119C96BE2E7A76738247179A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1944
Signing time: Thu 04 Jun 2026 05:01:10 +0000
Manifest this update: Thu 04 Jun 2026 05:01:10 +0000
Manifest next update: Fri 05 Jun 2026 05:01:10 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: ZGlUN7q3VJOL+j3tXriU9cQcaarRHqXj2MDD+/OTBMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:bd:10:11:9c:96:be:2e:7a:76:73:82:47:17:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jun 4 05:01:10 2026 GMT
Not After : Jun 5 05:01:10 2026 GMT
Subject: CN=c978c89ce6be78b98cf9249f87bd2e59b017b3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:31:c0:b9:31:09:8b:2b:6a:08:34:89:c3:
5b:9f:d0:d8:18:b7:14:10:80:3a:d7:49:c2:b1:4f:
63:8f:03:38:8e:80:b8:9a:e9:9a:10:93:64:f5:af:
3d:e2:b4:ee:64:38:a8:d9:77:1b:e1:f7:6c:cf:8f:
76:72:4f:7a:1f:87:13:a6:87:23:be:89:c9:f8:9c:
44:4a:0a:cf:73:d5:e0:c0:12:4f:2e:a0:8c:dc:8c:
fb:3e:8c:5b:04:12:a5:18:52:30:e4:ce:25:7a:89:
86:14:46:1f:81:9b:cc:e1:46:27:c6:c6:17:64:d4:
c9:e1:50:d3:6b:8e:00:e0:b6:96:61:04:a8:01:aa:
5d:71:29:a4:f4:48:c6:f6:0b:33:56:0a:9c:6b:fa:
32:ca:c2:b9:f4:6a:0e:ae:71:77:2c:15:56:b6:b9:
13:0b:e5:63:66:ef:31:35:d6:6f:8e:d2:2b:79:62:
01:48:c2:e5:fd:e6:a1:73:c8:61:b9:f9:f3:24:9c:
b7:ad:76:b0:be:08:a6:85:b2:b4:0b:d8:62:05:1c:
d1:b6:78:2b:75:c5:e5:04:d9:8b:4b:0c:9b:d5:9a:
7f:84:b6:3b:53:3c:13:60:2c:2a:b8:82:b8:cf:38:
a6:ce:17:8c:60:d1:15:48:60:f7:78:73:7f:21:bf:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:78:C8:9C:E6:BE:78:B9:8C:F9:24:9F:87:BD:2E:59:B0:17:B3:CE
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:50:99:27:f1:f4:93:2b:28:e1:50:31:b7:f7:e2:53:0d:67:
7f:6e:47:0e:17:cf:d8:9b:c0:69:76:c9:4a:ed:c6:63:6a:0d:
47:35:1a:ab:fb:e7:6f:75:a9:f7:3e:6f:97:1a:0a:f7:53:64:
3a:41:a4:94:68:56:f3:ec:8e:3b:a4:46:9e:04:3d:8d:2d:6d:
9a:f3:05:5f:bd:8d:12:a4:0d:9b:30:72:ed:6f:f1:b4:4f:34:
c1:88:c9:26:d4:f5:33:2b:9b:6f:fc:40:6e:31:70:f0:40:a8:
08:71:a0:ff:08:14:d3:1e:7a:93:2c:17:f5:92:67:61:6f:5f:
4c:30:ee:1e:7d:b7:d0:58:1b:b0:1d:d8:56:9a:04:76:22:71:
fc:60:1f:74:68:47:d5:4a:d7:7c:90:17:a7:7b:30:76:f3:d4:
00:bb:90:e8:c7:4d:22:d3:c7:74:a1:e9:6d:74:27:9d:2d:de:
8d:80:09:f0:c0:8e:ae:17:23:c7:d2:fb:81:05:e8:02:27:e8:
bf:96:dd:4e:31:55:78:b5:86:09:37:a3:11:fe:39:5c:e6:b2:
4c:e8:2f:88:95:f6:5a:b4:94:9b:9b:71:25:e0:ef:23:c5:b3:
83:0a:74:a8:27:3c:1e:7b:a3:f0:61:ce:1a:e3:44:c4:64:d3:
1c:75:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:14:48 2026 by rpki-client