Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: iGtYSzSa5SgVpWh4FAlz8Yyb/oOXI7GJCiH/CESRZT4=
Subject key identifier: CD:B9:19:50:75:7D:27:03:86:1B:9E:26:27:37:8A:47:CF:D3:40:62
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 019E295D8F67EDCA3A08ACEB216B326B0359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 1732
Signing time: Fri 15 May 2026 02:00:57 +0000
Manifest this update: Fri 15 May 2026 02:00:57 +0000
Manifest next update: Sat 16 May 2026 02:00:57 +0000
Files and hashes: 1: 2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa (hash: MpQCPMnmPtD2sJGqmtD1rBnmiwGX8J1+k78/7G1N5Nw=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: cEzNg2k706brA8adgHrcdPYG8Y1NcMutH4uTw7T+Pc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:8f:67:ed:ca:3a:08:ac:eb:21:6b:32:6b:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: May 15 02:00:57 2026 GMT
Not After : May 16 02:00:57 2026 GMT
Subject: CN=cdb91950757d2703861b9e2627378a47cfd34062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:55:10:04:b6:dd:8d:05:93:da:3c:a7:b8:
3e:8f:0c:de:b7:8c:eb:80:68:4b:29:8f:43:9a:9b:
23:6e:64:6d:47:2a:e3:63:fa:0e:99:15:ac:2f:70:
0b:0e:ce:85:89:28:3d:ff:4c:c1:8d:4b:f0:44:64:
47:1d:33:f3:07:d1:4a:8e:51:6d:c5:85:ef:4a:7d:
1b:7a:69:e4:c8:84:e0:d5:23:d0:0d:2e:88:cb:d1:
74:61:3b:f6:c4:de:ab:5b:73:13:b8:e3:b4:b2:63:
c8:99:9c:d3:91:92:b9:03:cd:5c:d5:b5:0e:52:42:
db:84:e0:48:fb:7a:8d:81:0c:92:65:de:e8:90:75:
34:a9:2a:8a:8a:f8:f2:19:23:f6:14:29:7b:74:0c:
fb:c3:65:43:bd:73:40:4e:71:a7:ec:55:96:59:a8:
9a:d0:b8:9f:b3:1c:10:f8:4c:18:9c:40:d4:e4:7f:
fe:52:54:05:40:90:e1:26:64:af:94:57:17:32:b8:
8e:8f:b0:45:39:5a:15:92:25:43:53:1d:99:e7:c0:
85:34:bd:cf:64:c3:33:3a:82:39:c9:40:80:b6:eb:
80:42:8b:3d:2d:02:c6:a8:f2:06:fe:d2:a7:07:8f:
d0:5f:ae:c7:2b:08:87:ca:de:65:15:5d:b2:49:ba:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:19:50:75:7D:27:03:86:1B:9E:26:27:37:8A:47:CF:D3:40:62
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:15:e9:e2:68:2d:2d:e2:59:1e:b1:ae:e6:5d:36:1b:a0:
be:49:d7:df:a6:04:8e:3b:55:67:66:c2:c9:88:d2:62:3a:1b:
a3:71:0d:4b:7f:a9:cf:36:ae:f9:12:9b:cf:aa:46:2a:5f:29:
39:ba:38:cb:c0:54:5e:8f:9a:fd:c3:87:f7:cd:07:0c:10:f0:
92:ae:2c:2a:6b:a2:37:13:7a:b7:ed:3d:d8:0a:80:8c:56:00:
ae:85:e4:62:3e:39:88:a7:8f:3c:c0:de:aa:cf:19:aa:49:fe:
cf:ff:3d:ef:a1:d2:d9:f9:46:27:90:bd:d3:9a:0d:ce:4c:58:
fa:cb:1e:ef:dc:0a:86:2d:8e:e5:85:0d:69:de:9b:73:f2:85:
f6:f5:50:d6:88:2c:38:8e:c6:51:e6:52:b3:a0:bf:23:7b:eb:
90:56:46:87:cd:d6:d7:61:89:9f:5e:b9:8c:63:36:ad:c7:2e:
83:e5:54:dc:67:30:f4:9d:15:60:81:d6:79:d0:e6:e7:ce:2c:
45:d6:b2:0c:6a:05:d7:6e:8f:2d:34:c5:93:91:29:aa:b9:89:
e5:b9:4c:e2:98:cc:be:86:da:74:9f:5b:50:5c:d7:52:e3:0b:
06:2e:05:fd:d7:47:d4:e1:65:2b:81:f1:5f:18:fd:27:2e:ed:
8a:e0:fb:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXY9n7co6CKzrIWsyawNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx
YjRkZGEwHhcNMjYwNTE1MDIwMDU3WhcNMjYwNTE2MDIwMDU3WjAzMTEwLwYDVQQD
EyhjZGI5MTk1MDc1N2QyNzAzODYxYjllMjYyNzM3OGE0N2NmZDM0MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5hVEAS23Y0Fk9o8p7g+jwzet4zr
gGhLKY9DmpsjbmRtRyrjY/oOmRWsL3ALDs6FiSg9/0zBjUvwRGRHHTPzB9FKjlFt
xYXvSn0bemnkyITg1SPQDS6Iy9F0YTv2xN6rW3MTuOO0smPImZzTkZK5A81c1bUO
UkLbhOBI+3qNgQySZd7okHU0qSqKivjyGSP2FCl7dAz7w2VDvXNATnGn7FWWWaia
0LifsxwQ+EwYnEDU5H/+UlQFQJDhJmSvlFcXMriOj7BFOVoVkiVDUx2Z58CFNL3P
ZMMzOoI5yUCAtuuAQos9LQLGqPIG/tKnB4/QX67HKwiHyt5lFV2ySbrrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM25GVB1fScDhhueJic3ikfP00BiMB8GA1UdIwQY
MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt
N2U5ODM3YTkyMjhjLzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj
LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZIV6eJo
LS3iWR6xruZdNhugvknX36YEjjtVZ2bCyYjSYjobo3ENS3+pzzau+RKbz6pGKl8p
Obo4y8BUXo+a/cOH980HDBDwkq4sKmuiNxN6t+092AqAjFYAroXkYj45iKePPMDe
qs8Zqkn+z/8976HS2flGJ5C905oNzkxY+sse79wKhi2O5YUNad6bc/KF9vVQ1ogs
OI7GUeZSs6C/I3vrkFZGh83W12GJn165jGM2rccug+VU3Gcw9J0VYIHWedDm584s
RdayDGoF126PLTTFk5EpqrmJ5blM4pjMvobadJ9bUFzXUuMLBi4F/ddH1OFlK4Hx
Xxj9Jy7tiuD7aw==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:26 2026 by rpki-client