Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: DMu7T3rIrCwX5FdZ9ZDbVpz3PznVW6wliT3mEfR0Z+E=
Subject key identifier: C5:26:FB:F9:C0:A5:19:1B:FC:A8:B3:79:A3:9D:07:CB:13:0C:2D:B0
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019E89B634117FF9AD3F701B50B88293CDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1945
Signing time: Tue 02 Jun 2026 19:01:19 +0000
Manifest this update: Tue 02 Jun 2026 19:01:19 +0000
Manifest next update: Wed 03 Jun 2026 19:01:19 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 4VHerXDDYQyY7vQc1lazg6SoWr7RrRcV4bJ8TUr+QVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:b6:34:11:7f:f9:ad:3f:70:1b:50:b8:82:93:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Jun 2 19:01:19 2026 GMT
Not After : Jun 3 19:01:19 2026 GMT
Subject: CN=c526fbf9c0a5191bfca8b379a39d07cb130c2db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:33:bb:f3:9c:d9:07:dd:fb:43:3a:15:66:
6d:55:ef:15:c1:d6:b1:13:0e:9f:85:76:1c:e6:da:
39:35:73:0b:6f:34:0c:db:db:ac:9d:cd:81:47:d4:
e1:0d:fc:5f:9d:32:98:31:0f:5b:97:4d:a5:36:95:
e2:1c:bf:e5:cb:ca:60:10:ba:fc:84:43:bf:70:1e:
24:17:75:5b:84:22:9c:a8:49:22:5d:ee:32:1a:70:
8a:a2:10:93:00:78:b1:1b:32:5e:57:dd:31:a4:dc:
20:45:b7:69:34:d3:a5:52:9f:14:01:11:1d:81:83:
fb:f1:a5:de:16:e7:30:5c:cb:36:7c:5b:85:90:d4:
30:d1:da:51:ed:17:73:5f:5f:b4:35:e1:49:03:de:
80:3e:62:af:49:ca:d8:70:20:83:97:52:41:a7:f9:
b5:9f:9a:b2:7b:d4:e8:10:be:f3:86:dc:e5:66:7d:
95:fb:42:89:9e:8a:aa:ee:33:56:42:16:d4:c8:43:
e0:00:e0:9d:0c:85:21:5d:39:f9:dd:42:79:c8:bd:
05:45:a1:59:08:92:6c:1f:d5:06:57:51:4c:71:cd:
d9:f7:37:68:cb:a6:36:78:ee:07:6b:63:76:d2:da:
87:c6:ac:06:24:78:22:ff:86:36:80:1e:53:b8:40:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:FB:F9:C0:A5:19:1B:FC:A8:B3:79:A3:9D:07:CB:13:0C:2D:B0
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:e7:d0:c5:ea:11:77:54:63:43:cf:0c:ee:d2:d0:57:06:
c4:32:05:2f:a6:48:99:fb:33:f3:4b:cc:62:a9:14:f6:20:17:
01:c8:cb:a3:e8:f6:eb:53:07:92:a0:a5:fb:f0:1f:d6:0b:7b:
a8:8f:9d:3b:db:db:4a:5e:ec:43:ea:b7:49:2d:f9:9e:87:e2:
0b:4b:4d:41:a4:d0:92:63:59:63:7a:60:cf:91:e0:19:ce:36:
26:2e:9f:bd:ec:64:25:cd:5d:6a:e9:d0:24:f9:44:af:4d:df:
a0:49:cd:7e:8f:1f:38:9a:0c:1f:95:aa:43:6d:eb:47:02:eb:
f8:e9:9d:92:8b:16:d2:ca:d6:3a:0c:0c:29:d9:0a:af:ff:8b:
99:74:23:d0:c4:25:95:fc:16:6c:25:12:24:a4:9d:5a:7f:77:
79:12:40:34:c3:04:b8:24:50:09:d8:22:e2:d6:eb:7a:f5:e6:
ea:81:6c:9e:29:91:5e:b9:2c:a6:35:96:dd:23:ce:88:fa:66:
0e:91:0e:25:d2:a8:aa:b7:0c:cf:52:b0:51:f0:82:b7:27:9b:
ad:bc:3a:5b:1b:75:e9:c1:3b:18:93:80:ae:d1:8f:e1:34:e5:
3c:ed:9f:cc:99:b7:10:bf:da:92:a0:28:1e:d2:9f:fb:ba:39:
2f:de:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:13 2026 by rpki-client