
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: /4Xp63BO9L0/wZllbZPkDSIku690WeQ1DG+NuHqiKks=
Subject key identifier: 5B:D7:DB:A0:72:BF:6B:9A:59:4F:D4:59:EC:6C:83:27:5A:8C:49:82
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 019E6203BD80C867966AF0710EABEF125835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 0475
Signing time: Tue 26 May 2026 02:01:12 +0000
Manifest this update: Tue 26 May 2026 02:01:12 +0000
Manifest next update: Wed 27 May 2026 02:01:12 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: dS15XC/Ev6aAYeM6HtKEc1/4np+MuBdnAPvKk37pyRY=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:62:03:bd:80:c8:67:96:6a:f0:71:0e:ab:ef:12:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: May 26 02:01:12 2026 GMT
Not After : May 27 02:01:12 2026 GMT
Subject: CN=5bd7dba072bf6b9a594fd459ec6c83275a8c4982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:01:3b:60:85:a1:57:17:c3:3c:06:f6:53:
7d:cc:08:56:30:99:e4:0d:21:f6:af:26:c3:6e:cd:
89:34:00:4b:b5:8d:36:1a:f8:ca:b1:2b:bb:6a:b4:
7e:d7:72:c4:04:27:00:ef:58:0b:85:1a:54:96:af:
cf:52:ca:5e:30:b5:f3:b0:1f:e0:2c:12:64:f7:be:
67:41:5e:b0:ac:af:ec:2f:d0:61:cd:60:ec:b0:74:
1f:c7:64:8a:f0:7f:a2:5c:07:d8:f6:27:39:e0:5e:
a9:43:fa:f9:d4:67:56:b3:2e:6b:11:05:eb:10:ad:
8c:d1:35:a4:8c:a2:83:dc:9d:10:fa:bd:5c:f4:38:
68:95:0a:c7:03:21:c7:9a:25:4b:06:72:92:42:ae:
4c:64:b4:c1:d3:86:68:e2:4d:6b:34:3f:cb:40:f2:
08:8d:11:4d:44:7e:25:c7:2a:63:1d:5a:a9:1e:47:
9a:9d:10:c2:31:de:51:39:e3:44:ee:8e:a8:45:4e:
10:e1:17:53:34:5c:47:00:91:51:c0:39:ef:83:25:
6b:86:90:08:ea:c4:4d:f1:d5:d2:fa:36:bd:e6:d1:
52:c4:83:ac:1e:34:ab:31:80:5e:17:14:a2:fc:13:
cb:ed:76:a8:fb:09:d6:11:15:03:75:93:fc:27:97:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:DB:A0:72:BF:6B:9A:59:4F:D4:59:EC:6C:83:27:5A:8C:49:82
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:68:fc:cb:4c:6c:fb:cd:20:d3:d3:44:13:b3:52:71:d4:aa:
5b:85:78:16:49:a2:22:cd:bd:62:b8:df:30:0f:2a:81:1d:0f:
8b:39:fc:ae:50:44:fa:ff:4e:97:8e:6a:ea:de:e8:1f:d1:e1:
e8:d4:d2:7b:77:8b:6a:66:10:4c:81:6e:c5:ad:89:b5:21:a1:
5c:dc:01:93:38:8d:00:3c:8d:87:3a:cb:35:e9:97:3a:29:82:
8e:35:5f:dd:82:01:94:70:68:f3:f0:18:43:bb:6d:93:0f:f0:
f8:fb:95:22:ee:a5:d3:67:69:16:1a:c3:80:49:1a:d8:9d:6e:
ae:38:73:9f:9d:1e:04:0c:51:5b:bb:ce:4c:5a:4f:21:f6:7c:
de:e6:69:98:e4:a0:d5:d9:35:c3:ba:24:9c:41:37:90:d1:40:
8a:4c:6f:96:3b:93:03:4d:97:be:b3:93:8e:24:bc:40:f8:24:
84:15:a9:f7:e1:6d:d5:fa:45:95:ab:93:fa:4b:80:3e:ec:99:
cb:20:6d:e9:a2:a3:1d:cd:d7:4c:83:b6:a6:6d:9a:58:df:74:
b1:c3:55:90:6e:b6:6d:e5:11:c4:80:eb:f6:36:8f:5d:35:2a:
a0:ef:bd:c5:15:27:e1:28:99:50:1d:1b:7c:7c:0a:61:3b:e8:
55:0f:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 12:28:40 2026 by rpki-client