Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: UuOSp76b248xDruW2WyFfE/gfWCxyjvx6iMSZPOkOUA=
Subject key identifier: 0D:49:F8:FA:F2:BC:5D:98:06:7F:09:E4:90:A9:B5:A4:25:C2:B7:A3
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019E25B77675C187F87FAF2DC3F0A55773F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 190D
Signing time: Thu 14 May 2026 09:00:40 +0000
Manifest this update: Thu 14 May 2026 09:00:40 +0000
Manifest next update: Fri 15 May 2026 09:00:40 +0000
Files and hashes: 1: 6nS7ChSMwS0NiVMZWHlnkhrttP8.asa (hash: iXhlJdpfjIUYJ5YZ/S4lqTUks7mtZzgak62hVEHY6bM=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: 9X2G16IFoEPSpQw0O8KB4BT3KPXaRw4k7X4dQUvT1b4=)
3: kh97mCRCb1gM-n6T2L16tRWt1No.roa (hash: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:b7:76:75:c1:87:f8:7f:af:2d:c3:f0:a5:57:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: May 14 09:00:40 2026 GMT
Not After : May 15 09:00:40 2026 GMT
Subject: CN=0d49f8faf2bc5d98067f09e490a9b5a425c2b7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:04:64:76:33:24:36:33:1c:e1:22:89:64:
fb:f8:98:2d:d0:55:27:e5:5a:53:de:af:6f:85:12:
b0:45:16:e3:73:9e:a5:8a:a6:e4:1d:c5:c5:5c:4d:
37:e8:88:64:7f:9b:dc:fb:a4:3b:3d:2e:0d:13:7d:
3c:05:85:be:22:1e:ed:cc:9e:a4:d3:c8:41:cf:bc:
df:ef:07:d9:d1:73:a8:6f:f2:2b:9e:3d:d4:d6:30:
7f:bf:15:58:2a:8a:63:66:5f:f8:08:b5:a8:1d:e7:
21:65:3f:8f:e4:9e:e9:ed:d2:32:c3:b5:d2:cb:f9:
d3:a7:38:1b:e1:2f:af:dc:31:fa:26:34:e0:24:22:
6a:11:45:46:c4:ac:11:48:89:37:05:0e:3a:d3:5c:
5d:cf:3b:33:58:3f:2b:24:7d:3f:0c:53:11:71:7c:
92:53:29:d5:d3:46:69:da:bf:b2:4c:c8:64:d4:3b:
32:73:5d:bb:7d:b1:0e:b4:9d:25:d3:5a:c6:9a:c6:
cc:dd:c1:4f:e4:f5:11:da:2c:ac:06:13:b9:ac:84:
ee:32:1f:59:ce:51:03:29:d2:27:d8:45:9d:d2:3c:
8f:9b:b2:30:b6:bf:90:0b:1c:30:2f:bc:45:f3:c7:
d0:8c:ed:23:5e:4f:b8:bf:a2:5a:e7:64:f8:39:d2:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:F8:FA:F2:BC:5D:98:06:7F:09:E4:90:A9:B5:A4:25:C2:B7:A3
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:80:86:32:cf:48:aa:f2:78:79:f5:7e:75:2a:95:d5:f2:6e:
1a:71:ea:43:52:8a:91:e0:dc:03:f1:ec:a9:04:a5:9d:60:8e:
38:2f:05:d0:8f:bc:c2:cb:42:d9:05:05:fe:ac:43:f6:a6:b7:
b7:18:ed:8e:24:4e:74:4f:d8:8c:86:61:1d:6f:35:82:aa:8a:
6c:8a:be:45:b2:16:e1:d0:60:df:7a:70:b6:4f:2d:86:6b:a6:
7f:f6:58:8d:be:79:28:84:9b:85:64:e0:8e:2e:4a:2e:ca:72:
a3:48:39:38:b1:1c:0e:a3:2e:94:98:49:61:71:04:b3:9b:2c:
4b:0f:d6:56:e1:48:32:6b:9c:f7:2d:bc:b0:97:ac:64:5a:53:
28:b3:6a:ac:bc:43:68:e5:4b:d7:73:bb:36:af:8a:40:9e:2b:
27:11:90:4f:db:ff:53:e9:30:b4:4b:17:37:e4:3c:b5:b4:43:
a2:e6:5e:ca:a2:11:92:6e:3e:3e:8c:6a:1f:36:05:6b:6b:ba:
1a:24:3b:c3:77:92:29:f1:05:77:fa:e7:0d:29:20:ef:e3:00:
c2:a5:c9:de:52:92:6d:5f:30:00:a6:ca:b6:64:9a:01:03:a5:
9c:bd:ea:3f:98:de:57:43:df:9a:3f:97:fa:75:ec:11:c1:5e:
0d:26:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 15:19:52 2026 by rpki-client