Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: IqGOYGCLBeefng4upsiXCtrK5DP27xlUz+wNUoB7J+o=
Subject key identifier: 07:63:29:AD:5F:32:1D:A9:91:AC:A3:16:A9:F0:95:31:A9:50:DA:58
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019EB8EA779598468D21041AD836692287E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 0125
Signing time: Thu 11 Jun 2026 23:00:34 +0000
Manifest this update: Thu 11 Jun 2026 23:00:34 +0000
Manifest next update: Fri 12 Jun 2026 23:00:34 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: eHRK9SvC6pv8QZ1wKNvOFj+nwJArWsU0NXdv8SBDNoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:77:95:98:46:8d:21:04:1a:d8:36:69:22:87:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Jun 11 23:00:34 2026 GMT
Not After : Jun 12 23:00:34 2026 GMT
Subject: CN=076329ad5f321da991aca316a9f09531a950da58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:59:5d:47:e2:31:cb:cd:e8:6f:97:b7:b0:
6d:fd:9f:62:aa:d5:11:38:c7:7f:20:a5:2c:24:af:
37:4c:27:2b:5c:67:53:92:94:18:2a:ad:52:d4:8c:
b0:e3:6a:7e:4a:54:fc:4d:07:f2:6d:d0:1a:37:a4:
10:08:ec:e2:a6:95:a0:c1:f6:35:ee:02:e1:14:02:
68:6e:bf:24:e8:42:8c:03:92:ed:29:21:f9:9e:98:
69:39:6a:7f:9e:8c:e8:37:06:f8:b8:0e:06:99:30:
ba:44:a0:30:85:e3:1e:e1:ca:f6:5f:9f:99:34:97:
ab:6c:22:0d:f2:b3:49:bf:89:d1:f5:08:80:c4:f1:
d9:5b:6f:63:4a:0e:74:87:7a:90:2e:b4:3a:5e:f1:
d4:12:ba:aa:c1:61:b2:1e:f0:9a:f1:0d:54:28:6e:
d6:1c:69:ae:29:8a:ac:2f:66:42:35:f7:2e:86:30:
7c:43:d3:0f:be:01:f9:e8:05:e8:1a:ee:91:de:43:
5b:1e:b3:f7:05:45:58:98:a1:d6:ac:f8:e8:32:bc:
95:c5:83:e1:51:0e:ed:e7:aa:24:ef:6d:8e:79:3c:
5e:68:52:24:65:34:4a:2c:0e:1b:c1:84:d6:3b:37:
81:26:43:29:77:b9:96:25:d6:8e:3a:95:6a:4c:6c:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:29:AD:5F:32:1D:A9:91:AC:A3:16:A9:F0:95:31:A9:50:DA:58
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:80:d1:e2:67:97:2c:47:74:09:48:a0:9d:3d:38:7a:09:
ad:47:9e:95:78:21:9b:39:83:07:b8:27:f1:06:6c:ed:1c:ed:
8e:7c:5e:23:d4:33:c8:53:71:b9:3d:77:2a:47:8c:8b:4b:b6:
f1:84:c5:c3:be:65:07:c7:9b:61:b8:bb:6b:ad:d3:6d:d1:fe:
74:53:9f:d5:4c:2e:e6:41:81:8f:03:08:58:bb:0d:47:79:00:
74:b9:4b:72:f1:f7:02:4e:04:5f:05:82:a4:f7:2e:85:00:a3:
12:44:a5:3c:51:e6:20:76:9c:71:a0:ce:79:65:e2:a7:d9:77:
b9:b7:91:e2:7f:2f:ba:cf:98:f2:20:b6:93:9a:a5:85:af:c5:
0b:09:8f:17:88:0f:da:ca:66:00:89:6f:57:aa:27:ae:c0:55:
33:1d:35:94:da:2a:1c:f0:8d:96:1f:d2:bc:64:92:13:29:29:
76:36:c7:1e:2b:c6:b1:d4:50:3a:5c:87:bf:a0:69:be:20:99:
25:ff:6f:4d:ad:5a:d6:e8:25:22:dc:a8:b7:2d:82:fc:73:02:
6e:25:e3:7e:f2:dc:da:81:d5:b2:0a:23:1f:f3:c5:20:35:58:
e5:a1:f6:0c:7a:23:82:f5:12:be:48:6d:b4:f9:67:06:be:66:
f7:ca:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:01 2026 by rpki-client