Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: g4Ve7nkEK9dEz3guZ2/2l0fc6eqY5zgd0pgxkkyUAOE=
Subject key identifier: 1B:97:CF:AE:B2:36:B3:C0:E1:D2:31:46:2C:31:96:D3:1A:00:88:04
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019EADF92E329AFE22A413C6D70D989967A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1961
Signing time: Tue 09 Jun 2026 20:00:49 +0000
Manifest this update: Tue 09 Jun 2026 20:00:49 +0000
Manifest next update: Wed 10 Jun 2026 20:00:49 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: +dBQpuaBM8QktJzZq6UutJ4JCVRc5b87g0nbzhqlB4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:f9:2e:32:9a:fe:22:a4:13:c6:d7:0d:98:99:67:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jun 9 20:00:49 2026 GMT
Not After : Jun 10 20:00:49 2026 GMT
Subject: CN=1b97cfaeb236b3c0e1d231462c3196d31a008804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:5b:f7:5b:6b:17:a8:73:0e:b2:b7:32:8d:
40:dc:2c:0f:8f:67:f7:74:5b:75:ad:9b:2a:50:cb:
a5:eb:33:11:76:1a:d9:95:27:e3:a6:ab:30:84:3c:
a5:0c:66:94:75:91:be:7d:ae:73:ac:a5:1f:3e:25:
e0:42:c4:c0:15:4c:34:aa:50:b4:84:c0:d1:f7:45:
47:ce:15:db:3f:35:6c:6c:9c:18:be:1e:99:1f:31:
f5:de:c7:b4:d4:33:72:de:76:23:56:18:3d:4b:38:
f1:cc:79:9f:17:7b:df:c4:27:11:ce:d1:45:7b:d1:
af:5b:9e:f3:56:9b:cf:42:9a:cb:c3:79:7a:11:60:
f4:d3:c8:21:c0:99:17:f0:fe:ec:f7:65:75:c9:11:
e7:fd:cc:d3:50:be:61:db:68:54:d8:37:1e:60:2f:
2a:31:8c:c1:96:bb:c1:aa:1e:4d:17:09:6c:61:a5:
ef:88:b7:be:67:ae:0d:78:88:c8:3a:11:54:10:25:
7b:4c:db:74:84:5a:5d:7f:99:07:28:43:9d:58:86:
fd:99:3f:ee:06:9a:56:6f:d4:34:b9:82:7e:75:24:
fc:a2:21:fd:38:ea:b0:ad:8d:ad:16:53:4a:5d:65:
c8:02:6d:df:48:fd:85:49:96:ca:e5:84:7d:27:fa:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:CF:AE:B2:36:B3:C0:E1:D2:31:46:2C:31:96:D3:1A:00:88:04
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:24:84:bf:bb:4a:ae:55:2e:86:51:79:42:c7:4f:41:7d:e3:
73:58:4b:67:d2:40:10:e4:01:3e:f1:b0:d9:fa:4d:c3:aa:9e:
a9:e3:f8:f5:28:82:ad:a4:a5:90:01:a8:2a:76:2f:bc:48:1a:
e9:f3:ea:8e:d5:9c:49:49:76:d6:98:50:4a:2f:62:8c:02:66:
ca:1d:07:eb:7e:43:19:ea:d6:ef:77:67:0e:c5:cc:32:8f:3b:
bc:64:b4:35:37:94:f6:92:88:0d:6b:02:97:52:39:df:30:d8:
d5:76:44:30:c0:31:16:20:e5:81:1e:1f:4e:92:a9:5a:6c:29:
58:f3:71:95:43:78:10:58:de:c5:3d:ea:c7:13:91:8d:d5:22:
62:ab:1b:26:c6:00:44:d2:9a:e8:bd:e1:8d:23:bf:17:de:08:
7a:5b:01:e7:f2:b5:bd:0e:ac:95:38:26:dd:5f:fc:46:ec:64:
49:31:28:8f:9f:62:fe:89:dd:79:33:6a:ee:86:aa:ad:68:66:
4a:1f:3d:3e:3f:3c:17:be:69:06:2a:b1:57:17:26:9b:a1:65:
a4:3c:62:aa:95:2e:31:ec:a0:ad:6b:65:54:14:20:a2:76:27:
ce:ef:c2:ef:d0:b6:e1:66:66:65:0e:d1:53:96:f5:f8:8a:a2:
32:30:cc:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6t+S4ymv4ipBPG1w2YmWepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0
ZGQ0N2QwHhcNMjYwNjA5MjAwMDQ5WhcNMjYwNjEwMjAwMDQ5WjAzMTEwLwYDVQQD
EygxYjk3Y2ZhZWIyMzZiM2MwZTFkMjMxNDYyYzMxOTZkMzFhMDA4ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Jb91trF6hzDrK3Mo1A3CwPj2f3
dFt1rZsqUMul6zMRdhrZlSfjpqswhDylDGaUdZG+fa5zrKUfPiXgQsTAFUw0qlC0
hMDR90VHzhXbPzVsbJwYvh6ZHzH13se01DNy3nYjVhg9SzjxzHmfF3vfxCcRztFF
e9GvW57zVpvPQprLw3l6EWD008ghwJkX8P7s92V1yRHn/czTUL5h22hU2DceYC8q
MYzBlrvBqh5NFwlsYaXviLe+Z64NeIjIOhFUECV7TNt0hFpdf5kHKEOdWIb9mT/u
BppWb9Q0uYJ+dST8oiH9OOqwrY2tFlNKXWXIAm3fSP2FSZbK5YR9J/oVZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuXz66yNrPA4dIxRiwxltMaAIgEMB8GA1UdIwQY
MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt
NjkzYmY2N2U2MWYzLzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz
LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiSEv7tK
rlUuhlF5QsdPQX3jc1hLZ9JAEOQBPvGw2fpNw6qeqeP49SiCraSlkAGoKnYvvEga
6fPqjtWcSUl21phQSi9ijAJmyh0H635DGerW73dnDsXMMo87vGS0NTeU9pKIDWsC
l1I53zDY1XZEMMAxFiDlgR4fTpKpWmwpWPNxlUN4EFjexT3qxxORjdUiYqsbJsYA
RNKa6L3hjSO/F94IelsB5/K1vQ6slTgm3V/8RuxkSTEoj59i/ondeTNq7oaqrWhm
Sh89Pj88F75pBiqxVxcmm6FlpDxiqpUuMeygrWtlVBQgonYnzu/C79C24WZmZQ7R
U5b1+IqiMjDMpw==
-----END CERTIFICATE-----
Generated at Tue Jun 9 23:08:28 2026 by rpki-client