Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: ze25vOiK4avMrmTDE8uRElhfYYc0vqS8834/9eP5p8U=
Subject key identifier: 2C:B7:71:7E:1A:3F:34:79:B4:F4:B9:E9:28:17:E1:15:FC:59:EE:F7
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019E314E0F45CCAEC6F5DE9615AF9A7C6B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0AE3
Signing time: Sat 16 May 2026 15:00:59 +0000
Manifest this update: Sat 16 May 2026 15:00:59 +0000
Manifest next update: Sun 17 May 2026 15:00:59 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: F9yaaZchZJJVDnls/38cpN2CR03l1yyBxSRoz6Vc3lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:0f:45:cc:ae:c6:f5:de:96:15:af:9a:7c:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: May 16 15:00:59 2026 GMT
Not After : May 17 15:00:59 2026 GMT
Subject: CN=2cb7717e1a3f3479b4f4b9e92817e115fc59eef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:ef:5a:22:9a:53:fc:ac:4d:bc:67:02:28:
a4:a8:f2:45:d8:d5:66:f6:e9:1d:02:a1:51:65:34:
c3:3e:2a:00:fb:e0:7e:5c:ab:2a:ae:3c:ba:35:1b:
e1:3e:07:6a:33:76:b2:0c:c1:69:21:26:ea:85:6a:
8c:1e:ae:af:30:be:1c:c0:1d:22:8d:0c:5d:99:0a:
28:6f:b7:88:95:b6:2b:c2:f3:b9:1c:bf:a6:bf:e5:
b1:4d:9b:40:67:7e:16:52:96:67:ac:ef:d6:6b:41:
e5:dd:e0:c7:b4:d0:45:01:88:46:b2:04:ec:31:c8:
39:af:1a:bc:9b:cb:a9:c0:ad:e8:d9:81:e6:98:0b:
52:57:05:4c:79:d9:f8:04:50:ab:c5:8f:9c:45:46:
2a:0e:69:6d:26:5d:3f:86:73:12:53:cb:c9:64:77:
bf:44:f8:8e:3b:a1:02:57:e8:67:88:dd:3d:07:f2:
26:f9:70:42:2d:ad:39:3d:4e:b6:44:00:80:30:0a:
3e:1c:80:4e:5d:17:5e:f0:18:4d:9e:5b:de:d0:65:
e2:5a:ae:7b:7d:3e:e6:86:ef:02:2d:5a:f6:54:18:
a6:a4:35:f4:2d:69:78:71:c5:1e:a0:8c:9f:95:cc:
3c:29:28:44:cf:c9:f7:34:70:04:5c:c1:ef:81:00:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:71:7E:1A:3F:34:79:B4:F4:B9:E9:28:17:E1:15:FC:59:EE:F7
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:83:94:df:94:06:f0:f3:66:34:59:1d:20:25:15:61:d9:
8f:68:a7:e5:4e:1c:d9:1e:95:2d:4b:31:20:e3:cb:0f:78:bc:
8d:40:9f:a3:f3:e0:3c:ba:82:b0:3f:1d:2b:85:7b:24:e5:3b:
88:c2:03:a9:90:fc:65:d8:33:65:80:88:44:f5:bc:21:1a:59:
1e:eb:6e:b9:dc:36:50:52:23:ff:93:39:73:6d:d5:fd:b6:1f:
67:80:3c:37:a3:dc:4c:9e:87:0e:51:72:5a:54:38:b7:0a:b8:
f3:52:a0:77:24:10:4b:49:cd:56:37:b5:53:ad:51:59:fe:06:
a0:df:96:7c:26:f8:32:11:c3:04:bb:6a:f2:e1:8b:12:69:c3:
e8:e5:9f:f8:6f:49:0f:f4:25:ac:36:67:60:d6:7e:74:5c:92:
35:32:28:3a:c0:e4:ef:7e:0f:7b:17:26:9c:48:69:20:0e:53:
c4:ad:83:85:2b:d1:0d:b6:55:2c:b8:2e:3f:a6:0f:71:85:94:
c1:58:21:b8:1a:b3:5b:dd:0a:c8:4c:82:6d:ea:06:f2:a3:35:
34:0c:c5:84:3d:ff:b1:eb:76:ec:a9:dd:df:36:d6:2f:fd:1f:
a6:3b:c5:9f:7f:13:c8:49:c0:cc:d8:17:b9:6a:7b:eb:47:c9:
a6:e0:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:45 2026 by rpki-client