Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: 1vtdjXVjYD3+YP4DiExJIY+dfWKX3L8JaCQDKxFOlh0=
Subject key identifier: 0A:E4:04:E4:A3:8E:6F:0D:A5:43:E7:1F:A9:81:8D:B2:3C:36:3D:A7
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 019EB846196F1E7F26AF4AB4605CE0B0E642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 1456
Signing time: Thu 11 Jun 2026 20:01:02 +0000
Manifest this update: Thu 11 Jun 2026 20:01:02 +0000
Manifest next update: Fri 12 Jun 2026 20:01:02 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: eUK6s5Sk4z9uF7JhvjsNRL62+dEQP1cKBsbKk8TQZQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:19:6f:1e:7f:26:af:4a:b4:60:5c:e0:b0:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jun 11 20:01:02 2026 GMT
Not After : Jun 12 20:01:02 2026 GMT
Subject: CN=0ae404e4a38e6f0da543e71fa9818db23c363da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:75:e3:0f:0d:40:f2:33:b5:65:27:1b:28:
88:56:90:42:19:40:20:e5:5e:00:1e:94:1d:fe:85:
23:c0:b5:2d:7b:7b:20:41:6e:37:ea:29:3e:d6:ee:
96:a5:f0:39:e5:50:13:c7:cd:e6:26:1e:b5:62:fa:
94:2e:e7:75:95:8b:e7:24:2a:ab:7e:fb:e8:73:cf:
6e:9e:ad:4f:6c:9c:d8:19:b2:78:17:84:9e:1c:e5:
21:da:14:3c:50:f3:4e:62:51:d4:b3:d8:e3:56:b1:
9b:6e:2b:12:21:64:eb:01:89:20:72:e6:2f:c5:dd:
3c:e6:d3:97:f2:32:df:9f:99:39:62:c2:62:24:b4:
c1:4f:a3:01:a7:75:2a:ec:52:33:50:36:17:2e:08:
ca:b1:38:39:5c:d4:c6:fc:2c:24:09:4c:f1:e2:8e:
7f:f6:d3:05:4a:92:a1:05:6d:10:21:1b:f5:2b:3d:
62:82:a8:fa:86:cf:b5:c6:c5:e2:6e:b2:b7:1e:5d:
b7:7d:9d:34:fc:d8:6a:e5:c4:6a:db:b9:f5:88:dc:
8c:01:be:57:70:72:5f:f9:77:b3:e8:c6:04:01:c8:
c2:bc:e5:7b:bc:2e:58:d6:7e:70:46:97:54:21:8b:
30:c1:dc:f7:ed:e7:b9:4f:4a:11:20:ef:5b:28:e3:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:04:E4:A3:8E:6F:0D:A5:43:E7:1F:A9:81:8D:B2:3C:36:3D:A7
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ef:04:f1:35:4f:b6:60:e5:0a:7d:22:0f:42:c5:d7:55:d5:
c7:5d:15:fc:b0:33:f0:52:c1:9f:b5:6c:ac:87:11:2b:51:ab:
1d:0b:bd:95:0b:14:b6:2f:67:0a:fa:be:61:47:87:7d:ec:c3:
15:ac:a9:f8:8c:61:94:0b:2b:55:67:d3:34:c4:12:d9:7d:72:
7b:36:95:da:16:32:00:a3:07:6b:15:43:54:b7:74:10:89:e6:
47:2e:fe:d2:23:4f:43:22:36:40:ed:c8:09:65:d5:c4:4d:1a:
90:14:dd:6e:d8:de:5f:fd:75:38:83:83:86:c1:4f:8f:e6:a8:
12:40:c4:31:f5:f0:22:45:71:89:1e:e4:0c:28:d8:01:be:3c:
3a:82:90:8e:0d:d5:97:47:d4:ba:09:46:8a:fc:30:27:9c:a2:
64:c7:42:e8:3a:2d:06:96:d6:86:75:ca:1b:27:ec:6e:d2:1c:
d5:2e:2d:50:c4:8e:e1:eb:05:bd:ad:e0:53:db:12:a0:7a:63:
55:3b:a3:9e:57:f3:62:cb:83:54:99:1f:13:69:ca:7f:8c:3d:
78:88:1b:4d:77:5a:7a:56:77:30:b0:10:5f:f7:56:1d:47:6d:
e8:82:d0:53:e4:d6:5c:7c:4b:9b:73:44:dd:b1:c8:4a:3a:80:
71:a5:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:07 2026 by rpki-client