Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: mafJMZW5jI7NjQwYL3SgYeNkaGwIhbJyl3jJBb7IWvM=
Subject key identifier: 73:13:D3:DA:A7:45:48:ED:CD:E7:78:DC:A2:25:8D:08:2C:C0:C2:7A
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019E34BCAAED686C51BEE3033E0A9C28EAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0594
Signing time: Sun 17 May 2026 07:00:40 +0000
Manifest this update: Sun 17 May 2026 07:00:40 +0000
Manifest next update: Mon 18 May 2026 07:00:40 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: h/X8bIbq/+F/D5eRyp/5NBlM2erbdwlJCTkDdnfkZcc=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:bc:aa:ed:68:6c:51:be:e3:03:3e:0a:9c:28:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: May 17 07:00:40 2026 GMT
Not After : May 18 07:00:40 2026 GMT
Subject: CN=7313d3daa74548edcde778dca2258d082cc0c27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:a9:81:36:56:64:96:89:73:b2:03:e7:ed:
a2:4a:c1:e2:0c:c2:aa:16:f5:b3:da:cf:09:4c:0c:
4b:5c:36:e8:34:bf:b9:bc:1a:c1:01:93:4a:b5:4e:
88:d1:3d:11:81:d8:9f:e0:31:5c:5e:3b:1c:5b:39:
a5:2d:3e:4b:c5:17:4e:16:2a:e6:f2:81:02:03:da:
af:13:8d:a9:64:f0:57:6f:cc:1f:af:a2:84:8c:9a:
87:0d:08:a1:38:a4:8a:e4:e5:06:8e:b3:4a:9d:04:
e5:15:b3:29:1c:6f:ef:f6:62:01:91:13:4c:e8:0a:
be:f2:6f:6f:f5:e1:63:a3:c2:88:dd:34:26:a5:43:
30:27:fa:01:e6:fc:d9:37:95:a9:64:e7:34:5f:c2:
8f:ca:dd:b2:82:24:b0:de:c0:30:b4:a3:25:57:d7:
00:ba:f9:2b:a7:23:7c:0c:8a:1b:e0:ed:f1:dd:fa:
6b:c7:89:7e:b7:ea:d9:25:41:e6:7e:4d:55:cd:d1:
44:e0:98:37:10:83:1f:c7:c5:a6:05:39:2b:d2:fc:
0a:c8:34:7b:03:51:a5:98:e2:45:de:83:d0:30:70:
92:8b:5e:af:df:95:c2:52:e3:ed:46:89:12:ba:25:
47:d6:24:c6:c3:c6:4e:97:46:61:95:61:87:0b:9a:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:D3:DA:A7:45:48:ED:CD:E7:78:DC:A2:25:8D:08:2C:C0:C2:7A
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:ab:0e:41:83:52:97:9e:87:7f:5a:4c:5f:61:f0:8c:5f:
f4:2d:cb:c3:84:9e:2f:b8:c7:33:38:5a:d2:6e:15:2a:6d:8a:
b3:4a:c8:6c:87:b7:51:f9:c9:42:28:fe:a7:7d:87:e9:4a:0e:
ae:1a:17:cf:6a:90:00:21:c2:31:14:c7:ca:64:88:34:7e:be:
3a:fe:ce:63:6b:62:ab:e2:6f:7d:da:9b:fa:bb:76:3a:da:52:
0e:82:16:68:1d:1e:b1:93:58:9f:36:25:59:79:25:ca:2f:66:
b2:cf:41:3b:4b:1e:3e:8f:7b:cf:75:3a:0d:2b:62:13:db:2c:
41:59:29:20:a9:31:c6:2f:7b:8e:b8:a4:24:40:4e:69:01:53:
23:25:86:e0:9a:7c:38:c3:f6:dc:b1:a7:0b:98:e1:91:0b:4d:
aa:16:55:0e:7a:69:6c:74:88:13:18:fe:8a:22:c1:55:38:7b:
3b:3b:d3:c5:3d:c6:f8:17:49:12:01:4b:58:de:f5:27:86:ed:
bc:d1:0f:0f:7c:55:fb:8d:74:ce:b4:2c:d4:1d:8a:50:75:fb:
d5:28:89:9e:56:34:2e:18:86:21:a0:2e:b7:ad:f1:1b:28:fe:
ab:6a:e2:b0:c2:06:14:30:5f:f2:29:e1:1b:7f:89:1e:7a:33:
af:65:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 13:48:22 2026 by rpki-client