Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: PPgOaXrO+GvGlOaZGk0hUwdYC7PedVcmoj4oulKZRhU=
Subject key identifier: EB:44:5C:51:AE:60:F4:D8:C4:90:8E:97:CD:22:24:2E:E0:B0:2C:BE
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 019DCCAADC8C965A116A151AE3615FA688EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 13DC
Signing time: Mon 27 Apr 2026 02:00:42 +0000
Manifest this update: Mon 27 Apr 2026 02:00:42 +0000
Manifest next update: Tue 28 Apr 2026 02:00:42 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: 9FJKh9qxYBxypGt9ae2yw0d+CEWiXEPBnVODNWAHhuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:dc:8c:96:5a:11:6a:15:1a:e3:61:5f:a6:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Apr 27 02:00:42 2026 GMT
Not After : Apr 28 02:00:42 2026 GMT
Subject: CN=eb445c51ae60f4d8c4908e97cd22242ee0b02cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:e6:2a:f7:21:5c:3f:9e:dc:4b:79:fa:58:
04:f1:b3:de:b4:07:d1:46:e6:a3:94:e7:fa:95:d7:
92:ce:09:1e:5a:79:73:08:a0:de:13:cd:dd:38:6a:
c3:93:b5:d9:42:44:3e:3a:dd:67:97:ab:74:7d:af:
4e:be:ac:5b:b5:f1:9e:76:9f:61:fe:29:01:91:08:
39:ba:12:b0:46:9d:68:60:e4:f5:b3:5e:6e:f4:88:
2b:17:61:f4:49:1e:5c:6e:8f:d5:fa:cd:58:1f:7e:
c9:9e:ca:bc:86:63:98:c8:38:05:a4:d3:00:29:b7:
fe:1f:83:3e:99:9b:a2:40:e4:52:b7:78:c5:54:45:
26:0f:a9:08:b1:59:ba:5f:e1:3a:29:99:b8:45:63:
30:49:92:0e:a4:83:c1:b7:ed:39:16:b6:f6:5a:b9:
f4:ff:21:11:27:60:ca:37:58:fd:c6:74:77:aa:77:
90:38:8e:0c:57:77:f8:b1:22:85:84:9a:1b:e2:b4:
57:a6:84:68:93:75:2b:b6:c6:02:ad:e8:ef:fa:66:
a8:65:59:6a:bf:fd:f1:a1:45:5e:05:95:e2:08:9a:
50:77:41:92:ec:ef:49:dd:90:c1:16:d1:71:26:30:
34:af:0b:03:91:d8:09:ba:00:a4:2b:29:ed:22:ca:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:5C:51:AE:60:F4:D8:C4:90:8E:97:CD:22:24:2E:E0:B0:2C:BE
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:19:8c:fa:33:b8:86:d0:a0:19:e7:13:29:b4:fe:71:31:f0:
d2:32:e6:68:6f:11:cd:bd:c3:a9:f2:12:9d:fa:b4:06:89:d8:
35:6c:52:86:32:25:09:f7:83:81:39:d4:16:4c:e6:40:21:3f:
46:7e:78:ac:7d:ef:fb:ea:05:53:d5:f9:5e:d0:d0:37:6e:d4:
69:7f:2d:eb:06:14:da:c2:a1:ef:25:9d:9d:af:7f:dd:8b:0b:
33:8a:99:cd:63:e5:26:ff:1e:1b:37:34:39:d5:12:65:d8:d5:
a4:1a:c0:10:d5:c9:b6:7a:7d:6e:4e:0e:11:8a:92:e9:27:84:
3f:4e:7e:ff:29:00:9c:3e:61:d7:b8:8a:c4:31:a1:4c:8c:37:
8c:4f:fe:8d:2e:9d:f1:de:5d:da:fe:17:f8:b5:7d:6a:51:a8:
2e:14:d6:7e:10:65:a3:65:d4:98:4c:a2:5e:be:42:17:d8:93:
73:67:3e:54:60:a7:ec:6f:a7:67:6a:90:e6:3c:90:2d:4f:6b:
7b:0a:0a:33:94:a8:16:6b:11:99:1b:85:de:cb:f9:e1:99:80:
20:07:c7:22:ad:1e:ee:51:47:93:4a:be:46:22:7c:1d:24:a1:
ca:a4:57:ed:0b:f7:ad:b4:96:5d:ee:96:bf:d1:17:cf:83:da:
d0:f5:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:16 2026 by rpki-client