Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File: OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier: eayKu5xKbTXVSpZz6hHlH7AS1jjWjCpiUCWurZhTT1I=
Subject key identifier: 13:1D:A9:4C:AA:58:F3:EE:33:2B:7A:BD:A7:9E:C5:F7:04:43:11:A0
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 019E3373A43108E1F0E05916E6A05FFCE33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number: 1919
Signing time: Sun 17 May 2026 01:01:17 +0000
Manifest this update: Sun 17 May 2026 01:01:17 +0000
Manifest next update: Mon 18 May 2026 01:01:17 +0000
Files and hashes: 1: 5tf62tGZz7nxnApGHs0XPt8oyEo.roa (hash: eqObETU4MUet/YxGyvd+4bjlEhpIkWmlGdSy4IzjRT0=)
2: C4lzeE9s0JPh3LMFogAb2-unpfM.roa (hash: B/VA7Y5H146Nk4o0VlZHFllZAXs0gNzPmZMsk3LGaPk=)
3: GlGwuQ4tVBcVbzdxZ764xAH4ZKY.roa (hash: dAsL5YC+dtQ5UOuP3k5Dc/1X4NRNua75JEno17YoMPc=)
4: MhSY36OZkDXTKKOaDPZo_gxxyys.roa (hash: 2VWhIerfpwbk0gwrISpBPr4SWZ289fTqKRc3I0+Rsfg=)
5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: 99bgNRegJBjjH11+lIU0klOHZ3NE94SW+Xpo6I/rrMI=)
6: SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa (hash: 316dq0EbdTMXN9J+sZt1LaGvCQCGOGhyEJsLNYpVENg=)
7: Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa (hash: wb6n3U2bPJOBiqYHITV1Aqlnrh4S2E/QbN0YryOpk2o=)
8: h2NmHgEuIROZq_hEdlknexmBTGM.roa (hash: 7SwAGH9Cu/tcgfRdpv3e3i4Xnp328jS2BOR70XX2pq0=)
9: n6AwAFReNaZdbkfki7LETtgHQPk.roa (hash: 1R1A1mLyenvEeIw8x55MsxtBChYHFqi/CKG9tPv+lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:73:a4:31:08:e1:f0:e0:59:16:e6:a0:5f:fc:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: May 17 01:01:17 2026 GMT
Not After : May 18 01:01:17 2026 GMT
Subject: CN=131da94caa58f3ee332b7abda79ec5f7044311a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:68:16:ce:1c:26:ba:7d:b8:4c:18:71:54:
d2:32:3d:c2:7e:3b:10:1a:8a:ec:2c:1a:c9:3a:ff:
81:3c:f1:1a:e2:ca:98:05:90:9f:a4:ff:a7:6f:63:
87:38:c0:91:31:70:bf:ad:f1:bf:df:ee:7e:f3:ae:
c1:58:89:0d:54:39:b3:11:47:2d:db:75:69:9f:46:
9e:98:4b:38:bc:8c:c9:ad:51:cd:89:b1:d0:db:44:
05:dd:76:8d:30:1a:07:77:c5:ba:fe:52:08:9d:a5:
cd:15:a3:89:21:1d:aa:af:9e:fa:76:7c:e2:71:8c:
6b:48:65:41:07:20:df:cf:3c:26:81:dd:ba:b7:81:
c1:49:90:0b:80:0d:95:89:d1:e8:42:66:46:36:ea:
89:d6:95:a6:62:a4:23:f6:52:78:3d:cf:4e:aa:cf:
8a:1c:e1:3c:46:b8:d8:02:8b:de:bc:66:7a:3a:13:
cc:ff:cc:a6:36:a7:b2:c9:e0:e3:55:1b:53:e9:c3:
9f:f5:5e:b3:58:66:51:ba:d3:64:0c:fa:1d:86:bd:
b8:80:64:73:63:84:6b:eb:ae:b6:0d:b8:23:82:2d:
9d:d5:d1:44:8a:4e:91:b8:28:99:bb:93:7c:ab:de:
2a:90:bb:c0:95:c1:8c:3a:76:b6:55:4d:0d:5f:17:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:A9:4C:AA:58:F3:EE:33:2B:7A:BD:A7:9E:C5:F7:04:43:11:A0
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:52:a9:81:6a:02:9f:e8:d4:c5:57:ae:21:f4:0b:cf:c3:
23:94:63:5f:01:c1:2e:76:45:85:96:d9:7c:de:39:2e:c3:cf:
98:a1:e7:00:8d:91:41:ea:8f:ab:c3:35:85:ee:8a:29:9d:54:
a2:20:53:3d:ef:51:4e:06:da:2b:e7:b4:73:41:c0:c2:d8:71:
77:bc:d0:2c:64:34:b2:0b:92:71:cd:76:2e:f0:d0:79:9c:1d:
0c:2a:c4:a3:79:4c:5f:7d:b2:21:8d:8a:7c:38:9e:82:0b:ea:
ed:2a:07:06:7d:9d:18:03:98:4c:8f:6f:24:67:c7:c5:6c:68:
36:ff:4e:92:d3:5d:42:54:7a:87:2c:2c:af:49:ce:4d:04:81:
a4:26:cf:ed:88:db:ab:da:61:f7:bb:b3:8d:9b:09:82:04:1b:
7b:2c:2b:7c:a0:11:14:f4:75:27:3b:94:b3:02:ee:8f:81:09:
e6:cb:ee:3b:8d:b5:b5:74:f0:80:4a:17:30:c0:92:e9:da:00:
a8:72:68:e7:7f:ac:55:d1:7f:5c:77:d2:73:6c:82:3c:dd:e2:
27:1b:23:f4:a4:55:5f:aa:31:48:ff:df:19:10:64:4a:ab:8e:
b2:2b:a8:e4:9f:6a:d0:2d:76:df:19:67:fc:96:12:be:6c:6e:
ef:e2:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 06:10:24 2026 by rpki-client