Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: WAk7p2o/EITzFnyqO/prOTc5Rakm2lcZZvsuiIcPmtk=
Subject key identifier: CA:B1:16:D1:9A:F9:E2:FB:7E:BB:D9:F5:DA:63:D8:D3:41:E1:35:C5
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019E48E8DFDBE25EA4FC96C19380BBB13111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 191D
Signing time: Thu 21 May 2026 05:01:21 +0000
Manifest this update: Thu 21 May 2026 05:01:21 +0000
Manifest next update: Fri 22 May 2026 05:01:21 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: ZGIRNw6VdOfIxPKuvOEnFY7twN+yQOJ2sottuGc3BVs=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:48:e8:df:db:e2:5e:a4:fc:96:c1:93:80:bb:b1:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: May 21 05:01:21 2026 GMT
Not After : May 22 05:01:21 2026 GMT
Subject: CN=cab116d19af9e2fb7ebbd9f5da63d8d341e135c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:c7:6c:be:e9:63:12:f2:57:ad:a4:bd:4d:
6d:0b:e9:c6:d6:e3:d2:d2:26:4c:c8:b0:74:0d:4e:
2f:6d:ac:13:8d:58:18:50:90:1b:7f:7f:02:d8:08:
db:66:70:62:26:dc:ee:95:f9:20:3f:fc:60:c3:9b:
a2:b5:0f:0a:c1:a1:c5:59:e0:c9:18:85:b5:17:87:
3c:4c:4d:d9:18:4d:72:94:02:a4:1a:bc:34:8d:e0:
2c:07:df:55:4a:97:11:de:c8:70:c3:4b:79:73:60:
63:09:c7:35:32:31:ca:b9:2c:d5:4d:d4:b6:a4:4c:
39:94:01:85:23:75:d5:c8:b9:46:b0:2a:80:ec:50:
e9:03:81:23:79:98:46:d8:d8:57:db:ff:03:5f:d9:
02:0f:a9:53:01:9c:e7:22:3f:72:b1:67:21:39:24:
1d:b1:98:19:9d:4f:e7:2f:4d:57:33:2e:be:9c:77:
88:ef:32:db:b0:c7:27:a4:69:05:5e:fa:3c:cd:7d:
ee:9d:5f:32:bd:12:34:21:cb:33:c6:e3:e6:76:21:
d5:51:fc:50:34:7d:0c:62:56:a5:77:55:47:a3:52:
d9:13:b2:b8:29:f5:fb:71:4f:f5:25:85:12:bd:69:
73:95:e6:94:f0:de:03:19:57:d5:c4:87:3a:c2:59:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:16:D1:9A:F9:E2:FB:7E:BB:D9:F5:DA:63:D8:D3:41:E1:35:C5
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:22:15:eb:54:38:c7:16:1f:97:ad:84:c7:08:8a:34:78:
87:89:c3:9c:fe:e4:30:fc:27:8b:50:7e:e6:db:50:74:b9:22:
28:14:a2:43:f6:66:37:4e:84:91:d1:ae:02:72:f9:e6:fc:f9:
e1:9c:06:17:42:c7:0a:ca:8e:da:76:ed:53:d2:a2:40:68:51:
94:d9:ba:57:2b:a9:2c:a8:34:74:2f:fd:91:f7:e5:e4:41:f2:
0b:5b:2a:cc:4f:a3:cf:6f:4b:c2:e4:d9:3b:4c:8a:38:fd:1d:
d6:3b:86:0d:c3:3d:52:5f:c9:fb:80:8e:39:96:c7:60:fe:0e:
2d:2c:28:ac:1d:1c:a3:cb:d1:05:e5:db:9a:b8:bb:72:41:df:
72:f0:c5:5a:3c:8e:43:b1:8e:bd:26:86:0b:75:81:37:9d:8d:
09:6a:99:d0:9c:48:e7:22:6a:d5:b4:73:d7:93:92:db:36:b9:
11:c8:6e:73:f8:d6:27:50:54:a5:88:83:ef:c8:dd:6c:87:97:
af:4d:33:bd:14:07:fc:a4:63:7f:f9:20:78:92:cf:5b:52:5e:
29:00:26:7c:0f:fa:25:45:15:86:fa:dd:80:56:ae:65:85:f8:
4d:e2:02:2f:75:28:d4:3f:bf:4d:67:97:17:2c:93:c7:09:f7:
81:e4:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:44:00 2026 by rpki-client