Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: PyMol1b8fy1ra/nZBigH7V507dX5Xa3TdcFFb6KiCXc=
Subject key identifier: 2D:57:66:0E:57:15:24:84:E7:0C:88:3C:E1:39:98:2F:08:D5:9C:0F
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019EB8B3982111C0E30B7AD31FC04FB1362E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 169F
Signing time: Thu 11 Jun 2026 22:00:37 +0000
Manifest this update: Thu 11 Jun 2026 22:00:37 +0000
Manifest next update: Fri 12 Jun 2026 22:00:37 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: FoKM8emUDxpYYIrtp8YlJBHnf9bhVlX1Zs9NHTciE1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:98:21:11:c0:e3:0b:7a:d3:1f:c0:4f:b1:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jun 11 22:00:37 2026 GMT
Not After : Jun 12 22:00:37 2026 GMT
Subject: CN=2d57660e57152484e70c883ce139982f08d59c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:f0:de:1f:e6:f8:5a:c0:9a:ff:3d:27:ae:
e9:33:84:02:24:58:3c:49:0a:68:21:61:1d:5e:02:
58:34:86:90:fd:44:96:5e:fa:a3:6f:d3:cc:e7:91:
8c:85:a8:8a:7f:46:84:d5:41:90:34:ba:c0:66:d2:
71:85:1e:db:1f:86:c1:6a:dc:13:ae:68:0c:65:e5:
3c:83:bf:7f:e6:cc:b9:80:41:db:70:27:7d:de:f1:
a0:e3:fb:48:17:95:a3:56:a5:88:68:3c:4d:1d:c7:
b8:85:1c:24:20:db:92:35:91:d0:7a:e0:e4:cd:cc:
c1:82:ab:02:4e:51:c0:a7:4c:3e:ed:97:c7:73:0e:
d8:d2:9d:1a:63:57:f8:6f:eb:8c:a1:cf:79:dd:98:
52:e8:8b:23:3a:7a:ff:a2:c0:ee:5b:56:9f:2f:aa:
e1:8d:eb:36:f9:27:06:4e:c9:1e:bd:ec:df:94:47:
56:df:9a:90:b5:f2:a4:ec:83:a5:02:1a:4e:9c:6c:
aa:b2:f2:97:3d:bb:a6:4a:99:80:5c:05:1d:10:1f:
39:fc:77:6c:4e:1e:b7:05:a0:33:52:08:fd:e0:d1:
e1:ad:71:f1:d6:f6:f1:db:0b:29:af:ad:7b:6c:36:
6d:88:d5:66:7c:e2:d1:6e:00:15:9b:ac:9d:28:2f:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:66:0E:57:15:24:84:E7:0C:88:3C:E1:39:98:2F:08:D5:9C:0F
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:80:a0:06:32:85:aa:39:51:67:ec:b3:04:5f:17:04:0f:8e:
4c:59:05:57:bf:ab:b0:27:d0:a6:75:9a:02:99:4c:4a:d0:96:
8f:2c:77:7e:a6:32:e4:00:26:da:c3:be:2f:20:0b:2b:89:c1:
fc:2e:90:e7:e8:1f:54:8f:2f:5b:02:4c:b7:15:d9:fe:a2:db:
32:33:00:41:31:a0:86:c7:a2:78:c6:e6:4d:4b:e6:cb:69:33:
36:5f:7b:b0:74:06:52:e6:ed:b8:98:b2:c3:59:99:da:d7:77:
12:9d:ba:70:8b:72:f6:39:0e:c8:de:f0:c5:00:30:fb:1f:f6:
f8:13:9e:30:89:d6:90:c3:c6:c4:d3:79:0e:02:2e:28:e9:05:
c0:75:45:08:5a:9c:19:d8:76:18:f0:d0:a3:ea:bf:3e:40:76:
15:8b:a7:36:e0:20:76:2d:1e:34:d0:b5:ea:86:36:06:b0:a6:
70:bd:3c:36:88:10:cc:f7:67:62:6c:cd:55:a3:c9:91:61:9b:
f6:9d:f3:9f:12:a2:81:9d:64:71:08:9f:ef:cf:fe:86:0d:be:
2d:99:8d:9b:d7:a9:3c:f4:1e:0e:15:f8:12:0b:75:4f:b9:b8:
43:fd:46:6f:e2:eb:1f:5f:49:5a:72:a6:b6:3a:70:e9:20:8f:
f7:60:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:52:30 2026 by rpki-client