Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: NvQgRETuMVNmlUlaVg8EmvN6OwHM/Q+IkHlxSueEpQ8=
Subject key identifier: 36:48:14:7F:A4:AB:0D:B7:9F:08:45:AB:C5:39:45:F6:81:45:61:71
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019E29CB7177D97A0386BF360B7E494D13BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 18A4
Signing time: Fri 15 May 2026 04:00:59 +0000
Manifest this update: Fri 15 May 2026 04:00:59 +0000
Manifest next update: Sat 16 May 2026 04:00:59 +0000
Files and hashes: 1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: Nqy1uhoKGOAvxnBzyW3c5RFND+lzXinvIRBb9X8shXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:71:77:d9:7a:03:86:bf:36:0b:7e:49:4d:13:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: May 15 04:00:59 2026 GMT
Not After : May 16 04:00:59 2026 GMT
Subject: CN=3648147fa4ab0db79f0845abc53945f681456171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:50:fe:16:61:44:94:95:a7:a4:40:41:2d:
be:9b:59:0c:48:b0:ac:c2:1d:f9:d1:1e:53:11:01:
d9:19:16:39:75:fb:68:a9:e0:69:8e:19:7d:fe:8b:
7a:d9:62:8a:96:7f:1c:7a:bb:87:a3:36:ec:e2:33:
a2:72:88:27:15:34:65:5c:4a:04:70:ec:cd:15:fa:
0f:bb:13:e8:3a:b7:92:c3:21:0e:d8:8b:8c:83:1e:
8b:3b:9f:a1:49:e1:2d:69:5f:bf:23:49:61:f0:4f:
8e:14:5e:d5:21:db:92:4d:ab:26:7a:c4:7a:46:1c:
07:d9:c8:23:04:a0:91:08:b7:ee:72:eb:5a:f7:44:
3e:5e:f3:6b:60:61:c1:f2:3a:52:cf:e6:61:bb:12:
9b:85:7c:3b:7f:db:a2:0b:86:93:c8:c4:0f:79:40:
4e:a0:ac:cc:34:06:04:1a:6f:bb:f0:ea:b4:5e:11:
97:c7:52:eb:c0:04:f7:9a:60:62:ae:44:f5:ab:f9:
d6:72:bf:36:ee:e0:dc:d6:44:e3:2d:81:2a:2f:88:
cb:8d:21:09:4a:b3:f9:0a:ad:03:db:69:8d:b8:df:
2a:d9:c6:5b:82:e0:f1:4f:52:01:14:cb:56:18:f6:
26:3f:eb:a6:09:4f:2c:c8:59:97:b1:2c:b6:81:e4:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:14:7F:A4:AB:0D:B7:9F:08:45:AB:C5:39:45:F6:81:45:61:71
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:d1:62:de:40:90:e8:c5:c1:a5:37:20:22:39:45:ef:23:
0b:98:26:5f:40:3c:9f:5c:9a:af:fc:4b:21:71:9d:d7:f3:8e:
b4:c7:07:8e:c3:e6:59:61:69:c7:ca:29:02:91:d6:3e:cc:06:
87:43:3d:08:49:69:a6:93:41:5d:c9:52:37:14:54:56:36:4d:
b9:7c:8c:20:0a:51:92:b0:52:f4:83:b0:5a:08:0b:5d:06:a3:
b1:9d:59:c7:8d:61:e7:b3:29:32:1a:27:5a:a0:42:30:1b:47:
23:05:33:2e:a1:e5:14:72:3e:e9:69:ac:7e:23:ef:4b:9e:5a:
7b:52:62:8e:9a:34:da:54:83:f1:51:60:91:18:7f:13:a3:f3:
56:e6:3a:26:7a:4b:a9:a1:a3:fa:04:b6:e1:a7:25:f1:ce:b0:
f0:fc:d7:35:3c:75:cd:94:ab:80:d2:58:67:9b:8a:32:47:37:
88:3c:44:03:86:15:0e:cb:16:13:de:05:63:e5:7e:0a:12:34:
61:21:02:23:ab:9e:ff:1a:60:a2:2a:61:72:fe:df:58:4a:82:
f2:e6:ce:1b:80:fe:8a:44:2a:19:36:50:a7:64:24:c0:30:e7:
cf:b2:f8:86:5a:50:d6:1d:d9:c9:78:59:dd:96:4a:af:c8:ce:
96:26:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:39:15 2026 by rpki-client