Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: 56YvbJr4JYLVliS0rbDXzJxQoxwF0gLD03WcjdkGXoU=
Subject key identifier: 98:55:51:1F:ED:7C:E9:2D:41:D1:EE:06:52:B6:AD:5E:47:3F:B6:89
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 019E5591939109D372D4AAC6E9C3995F8F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0DA4
Signing time: Sat 23 May 2026 16:01:04 +0000
Manifest this update: Sat 23 May 2026 16:01:04 +0000
Manifest next update: Sun 24 May 2026 16:01:04 +0000
Files and hashes: 1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: FfxmifXMkRublcddwtr5/kf9AorBfHGgIN2ekINRZUQ=)
2: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (hash: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:91:93:91:09:d3:72:d4:aa:c6:e9:c3:99:5f:8f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: May 23 16:01:04 2026 GMT
Not After : May 24 16:01:04 2026 GMT
Subject: CN=9855511fed7ce92d41d1ee0652b6ad5e473fb689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:41:7f:0f:b3:e4:5d:7a:70:87:2b:11:8d:
26:56:d0:3f:a3:d2:fd:07:f0:ad:8a:4d:50:00:29:
98:c1:e9:e5:27:62:3a:ac:34:18:3b:3c:b7:6d:92:
ce:af:59:8d:3d:0a:15:ce:ab:d3:5d:8f:73:eb:22:
ae:b1:08:9d:63:eb:68:18:73:c6:63:3d:fb:ae:ec:
ac:63:d9:45:dc:16:8a:76:ae:ed:ea:0e:7e:14:86:
09:8c:7f:fb:df:92:c1:c2:59:4b:9b:96:5e:bb:8a:
6d:4d:71:6e:78:be:b6:2d:50:9f:e6:78:fe:c2:ff:
c5:45:13:7f:dc:ec:1b:0c:93:b6:e8:63:ae:11:d2:
ed:22:dd:2a:08:e1:e9:91:22:f5:3c:25:6b:91:b4:
a7:9a:60:30:39:6d:0e:92:18:62:d8:62:a5:32:72:
e6:77:b1:92:49:19:9f:3d:c0:55:82:40:a9:88:fc:
83:16:1b:ec:2e:61:90:57:15:b8:0f:ef:70:d1:52:
a5:f3:ea:eb:10:3c:c0:30:c8:1d:b8:88:58:76:af:
9a:13:6f:d6:38:90:fd:28:a4:45:eb:43:54:70:3f:
a7:85:e3:81:f7:ad:39:30:97:2d:77:30:66:66:63:
88:1a:ff:1f:4b:52:b5:ef:4f:f1:0a:fb:27:f5:92:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:51:1F:ED:7C:E9:2D:41:D1:EE:06:52:B6:AD:5E:47:3F:B6:89
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:74:c4:40:00:01:82:22:ba:6c:43:3a:37:40:25:30:f1:
26:ea:1e:d9:65:dd:0c:9f:80:ae:e5:d1:c6:f8:b3:5e:5a:0a:
b8:23:be:aa:50:49:7f:53:b8:4a:e1:c9:fb:33:11:bc:73:4f:
ba:77:0d:54:74:b4:3f:41:df:af:fb:e5:27:a1:40:67:6a:94:
c3:ea:bb:bd:46:e2:eb:67:f7:18:19:8c:25:e4:01:44:a1:ae:
b2:fc:5a:ff:71:4a:19:fe:4b:62:46:ac:75:db:cd:07:2b:49:
d9:f0:d2:2f:42:d4:fc:b9:f2:93:d5:1f:ea:76:1b:a2:5c:63:
18:78:a4:d2:d8:27:d9:ad:a4:e6:89:9d:e7:db:92:7b:af:38:
01:78:2c:e1:ce:12:bc:48:4e:07:3e:25:45:e5:d2:38:3a:7f:
22:77:db:31:ac:72:0b:f0:ba:4a:55:3a:34:20:11:31:f4:36:
b6:61:ec:06:56:79:2e:95:60:25:2a:02:82:06:91:58:35:fe:
db:ca:1b:06:0e:c9:c4:f8:f2:de:ac:d1:d1:83:f6:51:e9:cf:
2e:c3:0e:25:53:38:f3:25:47:fa:fd:bd:a3:fc:c0:c2:80:9c:
19:b8:78:a8:32:92:a6:38:b1:5c:94:a8:ad:50:d4:05:c9:6e:
0a:3a:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:49:12 2026 by rpki-client