Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: +OuxALLc2g9LQWTVJfF0558odQ36GKvEopAUqWcYY1w=
Subject key identifier: 87:58:CA:92:2D:3C:D9:CE:63:BE:88:BA:16:25:18:04:D2:52:AB:63
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019E3005756521393946916C77673DC99E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 09:02:04 +0000
Manifest this update: Sat 16 May 2026 09:02:04 +0000
Manifest next update: Sun 17 May 2026 09:02:04 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: b4yKmPgyW1QqjEgEZq+96pbl9nUbSnqz8x5g4tXlaWs=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:75:65:21:39:39:46:91:6c:77:67:3d:c9:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: May 16 09:02:04 2026 GMT
Not After : May 17 09:02:04 2026 GMT
Subject: CN=8758ca922d3cd9ce63be88ba16251804d252ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:46:97:57:ec:09:85:20:97:b1:76:be:48:
9a:ec:41:d4:23:87:b5:2c:2f:65:b5:51:25:2a:af:
ee:7e:cc:92:9d:07:f0:6a:e9:79:7f:c3:21:ba:25:
0c:e1:f7:76:b9:16:40:ae:6b:03:67:44:27:b1:0b:
40:8b:71:03:d5:48:78:5b:8b:95:c5:10:68:6f:97:
a5:ab:f3:32:0a:83:d1:07:21:3b:8e:e5:01:a3:d6:
ba:8d:df:5d:4a:97:b8:9a:0f:a5:23:54:8a:48:31:
7a:e9:dc:39:67:91:fb:66:c6:c9:bd:1f:eb:18:d1:
73:27:4d:e6:51:72:6a:66:f3:fb:2e:a6:f1:0b:c4:
36:1c:e1:cc:14:a8:f6:86:8e:1e:c4:e2:93:80:f6:
3f:cf:a6:53:12:3d:c8:b4:e7:da:07:e1:a9:e7:47:
a1:44:d0:52:97:88:21:58:54:04:3c:5d:90:23:80:
86:e0:91:6e:2c:c8:91:52:f9:40:c7:bf:52:f9:8b:
d6:2c:7f:f0:e6:f0:56:2e:d7:a1:ed:ed:52:10:8c:
7b:51:47:ba:96:04:68:9e:f0:f9:e0:6e:b9:26:28:
d6:77:5a:c8:d5:5a:e2:98:5d:a1:7e:00:81:74:cd:
ce:93:86:eb:6d:86:dd:c8:53:42:d7:4e:66:be:7d:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:CA:92:2D:3C:D9:CE:63:BE:88:BA:16:25:18:04:D2:52:AB:63
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7d:41:ce:22:ab:a1:0d:cb:06:c9:b6:f3:f4:55:59:75:45:
c4:59:71:0c:17:c0:5f:fc:7e:b6:ad:94:88:f7:d1:8b:9c:d6:
c3:72:d4:51:a1:c3:9d:93:32:90:3a:bf:e9:6e:dd:f6:8c:3c:
b6:30:b0:47:4a:a3:07:88:98:ee:30:ab:1a:48:29:76:56:5b:
b1:4c:5e:f5:4e:8e:31:1b:3a:18:ca:b7:92:cd:c7:13:dd:c1:
46:ce:fa:5e:ad:62:49:56:67:1a:6d:8b:d1:2b:8c:3c:2b:df:
f9:74:0a:00:81:0f:9a:77:95:f7:93:f2:d7:10:ed:a5:7b:c4:
4d:d3:dc:a6:77:0e:9e:a7:51:e7:53:58:86:10:72:ce:8f:47:
4f:72:69:e7:61:04:55:38:3a:05:ac:9f:8a:d6:ab:70:42:fb:
f7:13:57:49:cc:8c:2e:32:42:b1:98:54:71:14:7b:d6:59:52:
24:d6:b2:76:9d:fd:42:e4:46:22:49:4d:89:b1:cd:37:58:04:
4e:88:e5:e3:a1:94:08:b9:7a:da:2f:13:97:af:eb:41:65:57:
ac:ae:3a:06:8d:98:7e:48:04:9b:c7:9e:26:63:ae:e5:23:87:
ea:e1:98:e9:7b:e4:8e:70:d4:24:d6:22:d1:fd:8c:59:c0:e4:
6c:5c:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:00 2026 by rpki-client