Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: zWtSfqPDSMg5tT3sk5i+Rs1YWrgfgarjeg8mrmnThoo=
Subject key identifier: E9:44:9D:E9:66:F5:E5:97:C0:6D:FC:9C:1A:13:B3:5B:29:7D:E4:C1
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019EBC914D3FE737C0EE51376766D16C9FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 16:01:39 +0000
Manifest this update: Fri 12 Jun 2026 16:01:39 +0000
Manifest next update: Sat 13 Jun 2026 16:01:39 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: L22zDoc1NN69xw40YaV61LKjGqDtPdIRwocvo4ZtXX8=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:91:4d:3f:e7:37:c0:ee:51:37:67:66:d1:6c:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jun 12 16:01:39 2026 GMT
Not After : Jun 13 16:01:39 2026 GMT
Subject: CN=e9449de966f5e597c06dfc9c1a13b35b297de4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:e2:7f:65:4b:7d:94:f9:99:a1:8a:e1:fc:
09:eb:cb:7d:01:c3:28:27:df:38:a4:f5:ff:cc:27:
f9:72:fa:31:9b:43:d4:d4:55:4f:a3:90:d3:79:26:
ac:cb:48:16:bc:99:23:69:a8:3f:fe:7e:6b:45:09:
b5:8e:aa:03:aa:95:62:a6:68:9b:f7:eb:86:40:d5:
da:5c:78:94:e2:64:bd:8d:91:a5:2e:9e:a4:5c:63:
84:06:fa:88:d2:e5:09:86:c7:49:f8:a9:bf:5f:ad:
a1:d1:82:3f:53:f9:cf:d5:64:48:7b:a3:da:2e:c5:
1b:96:a0:e9:c8:ce:d1:29:aa:9d:d1:68:91:1d:c5:
ba:c2:96:ab:d4:e3:25:bc:4d:ba:06:11:41:e3:20:
51:0a:fa:04:e0:ad:e8:a8:29:e1:a7:e8:c5:ff:1d:
a8:22:0d:03:7e:ad:f2:41:cb:c9:ba:b9:68:f3:d6:
9d:14:7f:21:a9:2e:1c:94:63:d0:2c:25:38:3c:b6:
99:22:9c:2e:ca:18:bc:e4:05:c6:cc:dd:dc:86:01:
52:22:3d:16:44:ca:cc:16:09:a1:56:f5:1e:05:be:
24:53:cf:29:2c:b2:6c:73:7b:39:0f:42:c1:33:2d:
38:08:bc:9d:73:5f:35:c4:82:0c:97:ee:d1:66:3f:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:9D:E9:66:F5:E5:97:C0:6D:FC:9C:1A:13:B3:5B:29:7D:E4:C1
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3c:87:f2:3f:49:b8:fe:b5:85:2c:9d:79:8c:0f:70:ea:a3:
71:70:84:8d:8b:dc:b0:79:1b:0f:1b:f3:6e:04:2d:65:e9:12:
86:59:50:a7:9f:7e:81:18:48:c5:94:d8:0b:33:57:f6:cf:78:
80:84:df:fb:37:00:62:10:80:ba:48:f1:60:c3:12:40:65:8e:
e3:13:4c:c0:b5:3d:75:6b:04:3a:d1:cc:ab:d9:ba:00:94:78:
c0:cd:8f:a1:31:1b:70:6e:1b:47:bb:68:56:e8:3c:a1:a8:01:
4a:d5:0b:c2:82:8d:83:69:fa:51:fe:ca:47:b2:68:fa:fd:34:
7d:d2:5a:36:d1:11:82:57:89:04:27:e0:4a:91:07:14:d6:d2:
46:a5:d7:af:74:c1:2e:35:a2:b9:8f:09:16:7a:e0:23:19:f2:
9b:0d:c7:83:8a:55:b6:75:3e:8e:e6:d8:b1:db:a2:d4:db:68:
be:8e:3e:95:46:44:c6:65:09:37:30:57:ea:5f:79:2e:9d:16:
85:a7:24:2c:ca:71:b1:e3:81:26:95:49:53:14:60:ab:0c:cd:
86:d6:a1:7b:df:67:95:03:60:0d:8e:d4:7a:03:aa:dc:fd:c2:
1a:ca:de:0d:be:7b:89:d8:39:10:ff:6b:c3:6e:cb:f6:52:69:
66:e3:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:57:17 2026 by rpki-client