Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: 2r+MmS3uU2qqTX6jvkJ/Ks8OFM7nNg5tIdaU6UomA5c=
Subject key identifier: BF:57:91:70:35:D1:85:36:14:DC:12:B0:2A:FF:34:35:CC:09:4B:03
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019E9C2944D68FA7CB88B7331E8A3C8EF7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1509
Signing time: Sat 06 Jun 2026 09:00:10 +0000
Manifest this update: Sat 06 Jun 2026 09:00:10 +0000
Manifest next update: Sun 07 Jun 2026 09:00:10 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: K0ddc8Ns/MIHXTVw8mzsKZkn9PqI/1+KShcdPj6fLVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:44:d6:8f:a7:cb:88:b7:33:1e:8a:3c:8e:f7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jun 6 09:00:10 2026 GMT
Not After : Jun 7 09:00:10 2026 GMT
Subject: CN=bf57917035d1853614dc12b02aff3435cc094b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:b4:7e:ae:b8:c0:d3:11:8c:ab:17:cb:ce:
e2:2a:54:e2:27:a2:90:d6:3a:9a:fa:c6:9e:00:e0:
6f:87:8a:26:41:49:63:3a:72:71:a4:56:4a:b0:8e:
fb:d2:bb:86:eb:46:8b:f0:b7:18:d6:15:9c:4f:bf:
d8:61:0b:db:81:b9:c0:6e:20:df:16:37:15:98:40:
b7:fd:96:56:e5:3c:9c:15:aa:f9:c0:15:9c:05:66:
a5:5d:88:5c:4e:26:43:06:97:c1:48:83:f9:e3:b4:
29:99:8b:f6:3e:a8:33:e3:eb:1a:c4:bd:07:11:6b:
7f:01:cb:e2:c2:1a:de:bd:b6:8d:94:85:f1:ec:15:
28:04:37:99:d2:74:23:08:22:ae:b3:a4:ae:1e:28:
83:c3:a2:26:db:1f:62:0b:04:ef:f7:aa:d7:57:35:
f8:05:40:b4:c4:14:3d:6c:01:30:fd:b3:11:87:90:
2a:10:5f:9f:25:51:f3:f0:ad:4b:76:53:bb:ee:83:
62:7f:93:a3:6c:95:29:64:e7:61:86:27:3f:bb:17:
c6:7a:25:6c:75:ab:08:82:eb:ee:7f:e3:a2:4d:35:
58:5e:e6:8c:74:51:fb:3c:8e:20:68:63:e3:ec:7f:
f5:1b:8e:00:94:b1:6a:9e:ec:46:ca:a6:de:db:90:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:91:70:35:D1:85:36:14:DC:12:B0:2A:FF:34:35:CC:09:4B:03
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fb:66:a8:79:fd:32:db:b3:83:e5:4f:b3:67:7b:4d:93:07:
b7:82:07:c5:d5:75:77:38:9c:20:25:50:1c:78:ac:6a:d3:95:
df:87:21:00:b4:b1:1b:0b:d7:a6:ca:09:b9:f1:c9:8a:51:b5:
5d:46:61:f3:72:f9:cd:7b:c9:55:02:88:84:45:e7:0e:55:6b:
e9:9e:cf:81:63:be:e9:0e:38:95:69:51:52:6a:dc:c8:33:59:
20:7b:73:36:5a:2b:4b:cf:85:e6:2a:a1:a7:26:b1:57:dc:b6:
f3:40:8f:3b:82:d0:43:cf:47:ba:f0:f7:d7:aa:5d:30:0a:7b:
e2:96:29:31:66:22:4a:be:c5:a6:1e:a5:6d:78:f4:68:a9:9a:
a1:d1:65:36:a4:a2:49:0c:d0:94:60:a4:9a:76:8d:18:be:f9:
59:1a:df:c3:4c:8f:52:15:9e:05:ef:16:3b:3e:53:8d:99:36:
a2:9f:ee:2e:99:18:06:19:fd:c7:53:d4:bf:4e:3b:37:a4:a9:
5c:47:a5:28:39:6d:c7:fa:d3:91:1a:be:a4:67:7c:bc:ae:98:
82:d7:62:6a:a5:dd:27:54:53:91:71:97:81:c9:69:65:43:7f:
5b:be:e3:75:f8:ce:5b:43:49:10:e1:38:f2:f9:b9:25:18:89:
76:72:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:45:00 2026 by rpki-client