Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: A8EP7xZgtfOaqIRxPc+DTKeDE6Lb0A2RdwT5ZGKT37M=
Subject key identifier: D3:01:FE:9D:D4:9E:ED:E7:5E:D5:BB:BB:77:82:58:56:10:A2:4A:7C
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 019E91DCF2D33BD8D72B243E3A47998332A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 85
Signing time: Thu 04 Jun 2026 09:00:36 +0000
Manifest this update: Thu 04 Jun 2026 09:00:36 +0000
Manifest next update: Fri 05 Jun 2026 09:00:36 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: 4h0pka8vOjWIts1rMfrBmoKlafgoy9CUbZI2jZRFwKw=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dc:f2:d3:3b:d8:d7:2b:24:3e:3a:47:99:83:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Jun 4 09:00:36 2026 GMT
Not After : Jun 5 09:00:36 2026 GMT
Subject: CN=d301fe9dd49eede75ed5bbbb7782585610a24a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:25:ba:55:a8:a3:b3:e0:62:dd:e0:54:d5:
0c:2e:09:3f:ed:29:6e:c3:af:1e:8a:f2:71:22:ed:
5e:ff:9f:a5:53:e3:91:af:71:30:4a:69:80:e6:7b:
70:eb:34:eb:37:00:9a:63:05:4c:af:5e:0b:ee:88:
bf:a2:d3:59:d2:5f:db:0e:02:1d:d0:63:6b:13:e8:
82:1d:8c:7f:90:c5:be:c2:b9:f0:65:34:cf:5a:88:
9d:21:3e:b3:b6:65:69:84:06:e2:84:34:db:d1:64:
bc:7e:70:0f:a7:db:70:67:32:66:00:b6:50:7b:d3:
d3:3b:08:69:cc:40:fb:92:08:b6:c1:62:4f:1c:72:
04:0a:a8:8a:c3:7a:c4:d9:26:96:d6:92:f6:f7:54:
f7:f1:91:87:f7:bd:f1:e4:85:3f:3b:3f:12:0f:6f:
df:c5:fe:b7:10:3b:10:1f:99:f3:4d:c5:c0:1d:7a:
4b:02:34:fe:e6:d3:14:70:81:81:95:79:9d:da:44:
ed:12:d0:36:6e:3a:04:6e:22:e7:94:03:d0:82:55:
e6:ba:56:4a:a8:5b:68:d0:6a:d3:0e:cb:b8:49:64:
b1:9a:a3:96:90:74:01:e8:fc:34:4e:a9:d8:c4:c9:
0e:f3:e1:5c:04:43:8b:fe:4a:38:6d:56:e4:50:5d:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:FE:9D:D4:9E:ED:E7:5E:D5:BB:BB:77:82:58:56:10:A2:4A:7C
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:44:70:00:1b:42:c1:b8:e0:ea:0d:06:c3:4a:a4:f4:f9:
f5:e0:62:89:8f:d4:a7:da:f2:98:1b:cb:63:de:1f:7b:0d:b9:
18:c4:36:f0:d1:5f:ab:de:a4:29:40:87:2a:ec:cd:0c:89:6c:
70:74:24:87:54:3b:d4:32:a2:b9:f8:86:36:72:38:dd:5c:88:
31:42:7b:1d:e1:9e:7d:8c:fc:bc:b5:f8:73:f7:ee:41:e2:8c:
5a:f5:b7:79:85:0c:2b:6e:67:e6:c2:a1:b6:66:bc:16:05:b6:
7a:4c:95:58:7d:19:08:17:4d:0b:29:0f:eb:2d:79:b8:2e:e4:
9d:85:c3:23:97:82:ec:bb:b0:d9:c7:eb:5e:73:f6:c3:d4:b0:
1e:74:69:fc:03:bc:e6:38:fb:9b:09:9d:c9:aa:78:c4:b8:8d:
32:cd:82:b3:62:91:d1:eb:e7:13:05:de:0e:e6:94:73:c8:2e:
e2:4a:63:2d:28:dd:eb:1e:b8:cd:eb:f3:84:4a:1d:3f:c4:a6:
fa:27:9d:a5:d1:b3:7d:af:c1:ae:1c:24:e8:7d:79:7d:37:99:
1a:c2:73:bd:30:c5:8a:78:59:6b:02:de:91:49:8d:43:8c:4a:
1c:aa:f0:83:91:7f:b6:e1:69:82:c2:1b:51:30:af:47:4c:b8:
bc:26:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:26 2026 by rpki-client