Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: ebmcrbBGXHKPk3Za7c1tA55t94S5/YiwHwpf6MFGy8s=
Subject key identifier: 0F:C0:F7:9D:B7:9A:0D:09:FC:1C:B8:9A:67:E3:35:38:EB:0F:E6:48
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019E3184F258EDCAB74D5446E3644DD3BA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1919
Signing time: Sat 16 May 2026 16:00:56 +0000
Manifest this update: Sat 16 May 2026 16:00:56 +0000
Manifest next update: Sun 17 May 2026 16:00:56 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: BRf1u2tI0MdQq-fmpym4aodlAHc.roa (hash: EgaKCAtRV2lGFKlk2kU+aO26h/pUeqeqSUfRHYRzlNU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: f8Q0xsi6+L65+AJKW7YRefbVwl5ZvPfmq0iex5U9PYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:f2:58:ed:ca:b7:4d:54:46:e3:64:4d:d3:ba:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: May 16 16:00:56 2026 GMT
Not After : May 17 16:00:56 2026 GMT
Subject: CN=0fc0f79db79a0d09fc1cb89a67e33538eb0fe648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:aa:1f:4b:3f:23:9b:53:4c:d8:68:06:c4:
9a:d0:6c:38:2c:31:28:7b:1d:bd:fd:1d:e7:94:f3:
20:ae:f6:4c:a0:ce:f0:4b:65:61:44:5c:d4:0c:ee:
97:47:c4:a4:b4:a9:9e:49:45:cb:db:df:ff:9d:f9:
56:00:34:85:66:87:97:d0:48:b4:a7:22:07:25:34:
13:a0:0e:ec:fb:e5:18:ce:7c:28:3a:e3:db:f7:4e:
9b:e9:aa:36:78:42:7f:c6:25:cb:2a:82:55:78:a9:
53:63:da:bc:4c:9a:e8:4d:46:9d:4d:05:ab:9c:e9:
06:7a:e7:ac:7a:67:29:9c:ce:f3:e5:6d:2a:cc:67:
d9:b2:62:f6:9a:3b:84:1c:c8:0c:59:7d:bd:f9:2a:
72:3e:59:72:ac:df:2f:ba:66:6a:df:88:87:d8:33:
58:55:d1:06:ca:72:66:a2:0d:10:6f:39:8f:f7:00:
6d:3f:ec:51:38:62:52:8f:94:8d:2e:ef:c8:a7:b8:
6f:85:09:21:02:99:92:33:af:a5:52:97:15:35:95:
f3:b5:0b:f9:22:ae:3e:6f:9d:27:32:7f:72:42:8a:
37:80:69:b2:ae:ac:e6:27:78:50:be:4f:ae:d7:a6:
04:49:1d:4d:8b:ab:47:04:12:5c:73:2f:6b:b0:9c:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:F7:9D:B7:9A:0D:09:FC:1C:B8:9A:67:E3:35:38:EB:0F:E6:48
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4a:c6:47:b9:6f:76:a4:23:68:a5:77:ba:70:d5:6a:e6:91:
30:ce:24:47:0a:78:ad:9a:0e:65:54:7b:4e:a9:f0:42:23:74:
c5:a3:d6:e4:a3:6c:43:c6:91:d3:d4:54:f0:94:25:93:a2:41:
4d:c0:66:b1:7b:67:c8:90:de:39:62:27:e3:86:3d:bb:7e:99:
f5:26:cc:e4:27:38:04:de:34:4d:6c:42:8e:cc:44:bb:b7:e1:
57:12:9c:da:67:1f:9d:20:32:03:cb:1a:68:be:a2:48:d6:32:
da:f4:46:0c:b6:0f:5d:31:4d:f9:0f:45:a7:ab:54:02:fc:b4:
98:15:3d:fd:21:58:3f:8d:1f:df:81:fc:b4:0d:ec:e6:f1:9f:
05:7b:0e:4e:ed:bb:0b:5e:ab:5d:fb:bb:0d:dc:d7:5d:fe:2b:
49:22:21:58:40:15:e4:46:68:0c:fc:cd:30:e6:c4:77:97:85:
97:ab:42:7e:7b:c0:1e:6d:3a:b6:43:19:19:28:79:b7:a5:85:
5a:5d:92:db:db:5b:8d:10:25:9d:aa:20:19:49:52:60:6d:56:
f5:5a:4b:e3:9a:63:77:f2:8b:fd:60:c0:a6:d1:42:57:e4:50:
86:63:a1:12:55:1f:cf:b7:42:4a:0d:58:1e:a6:43:af:bb:28:
af:6f:9d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:11 2026 by rpki-client