Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: Vez4cBP5iaZnLRc4Os/dkWdSeU8oLFb17w5fYdB7yAU=
Subject key identifier: C9:C3:4F:DF:DD:12:D9:A9:33:EA:30:41:EA:7C:0C:DC:09:8F:D7:38
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019EC225015C3DC7FF9DD737CBAF03C4BA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 18DA
Signing time: Sat 13 Jun 2026 18:01:05 +0000
Manifest this update: Sat 13 Jun 2026 18:01:05 +0000
Manifest next update: Sun 14 Jun 2026 18:01:05 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: yDs0yu0gbo37L9x3RCFPMn27YKB9o6nTHdZ9vAmwUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:25:01:5c:3d:c7:ff:9d:d7:37:cb:af:03:c4:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jun 13 18:01:05 2026 GMT
Not After : Jun 14 18:01:05 2026 GMT
Subject: CN=c9c34fdfdd12d9a933ea3041ea7c0cdc098fd738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:8e:2c:e2:fe:33:de:23:0d:16:60:74:09:
f1:cf:56:3c:04:b1:0c:a9:f3:f6:ac:31:2c:a8:f1:
86:ad:25:e2:e0:32:db:b1:f3:60:61:4c:86:93:aa:
f7:72:ed:14:48:ba:bd:0e:28:38:fe:ca:23:8e:4c:
45:7a:d8:89:4f:1d:bb:c2:21:14:13:7d:86:ba:d9:
31:ac:9d:93:55:e3:3d:39:db:e8:3c:0e:4e:89:89:
4a:bd:56:7d:34:23:65:43:15:a9:ad:58:33:1d:76:
0f:e2:8c:2f:3f:4f:38:59:08:fd:13:02:f5:85:5d:
8f:20:03:76:27:4d:02:13:eb:d4:b7:44:2f:4b:32:
86:5c:ea:83:d3:c8:1f:d8:76:3a:88:b0:f9:d2:be:
89:9a:8f:b4:83:e1:3f:27:c4:73:3b:a7:40:30:74:
e0:d4:d9:c5:51:cd:d0:e2:84:98:76:11:2e:73:c2:
dd:6a:48:90:04:bd:6e:e2:aa:f7:e2:46:13:3b:e4:
a5:98:d8:f8:ed:a6:cb:d7:51:60:0a:b2:bf:13:61:
a7:47:d3:51:ee:70:8e:88:a8:0e:57:09:e7:6a:7a:
00:45:23:d8:80:9c:22:e3:b0:08:a5:23:96:c3:72:
08:d0:77:73:9b:22:70:ca:12:40:41:44:e5:fc:2c:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:4F:DF:DD:12:D9:A9:33:EA:30:41:EA:7C:0C:DC:09:8F:D7:38
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:07:3b:a7:7c:dd:58:41:cf:c9:96:a1:8c:33:8e:8a:24:
18:7e:5e:2b:90:4e:05:ee:de:af:90:39:3f:b4:d3:27:1e:02:
05:9a:8e:eb:0c:24:85:9a:43:64:f2:ce:c7:c3:f4:27:59:6f:
4d:8f:aa:ad:0f:2b:31:22:cd:8d:98:c4:10:b8:47:16:2a:9f:
f1:fb:dd:cd:33:4d:1e:1d:18:11:ae:af:2b:73:9b:2c:9d:d1:
8b:57:b5:60:9a:48:9c:83:cd:73:8a:31:6d:bc:3e:ce:19:67:
1e:44:e5:f3:eb:e2:7b:80:72:bd:38:31:af:50:7e:ba:7d:1d:
be:6e:06:24:f2:05:f7:03:cc:ef:60:1d:75:92:9c:25:eb:99:
53:14:bf:96:b7:78:2d:45:ce:2a:31:2c:85:a8:31:e4:00:17:
b0:96:7b:c8:92:d6:72:87:b3:74:12:16:b3:2f:01:87:93:13:
0d:2b:c0:47:76:e4:66:88:78:d6:74:0c:1f:76:5e:af:72:34:
54:c1:01:2a:73:1c:44:db:03:04:f7:7c:1c:0c:17:13:f5:71:
2a:68:c1:70:a4:cf:3d:9a:10:dc:58:d1:79:90:7b:01:50:12:
e0:82:2d:c9:f7:e9:d0:da:15:4f:d4:5f:14:57:a7:8f:02:5a:
79:2b:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:20 2026 by rpki-client