
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: T03Y/3A1pMYLIWMUSZNAcKPkz/SSLimPQL8pO/Cvocg=
Subject key identifier: 5A:4F:50:92:38:F9:71:B9:7F:A6:49:96:83:02:30:79:E9:01:56:73
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019EC035F7216D4545BDA6CC0F8A029D9C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 1463
Signing time: Sat 13 Jun 2026 09:00:22 +0000
Manifest this update: Sat 13 Jun 2026 09:00:22 +0000
Manifest next update: Sun 14 Jun 2026 09:00:22 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: Cn9bzQJR6xy7+DGKl2RNoLPaRb45AOGdeNLGfwuF8bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:f7:21:6d:45:45:bd:a6:cc:0f:8a:02:9d:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Jun 13 09:00:22 2026 GMT
Not After : Jun 14 09:00:22 2026 GMT
Subject: CN=5a4f509238f971b97fa6499683023079e9015673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:14:72:49:b5:17:d4:1b:5e:4c:08:dc:a9:
16:09:08:67:44:c4:9e:49:ff:61:1a:4e:6d:60:1a:
52:a0:82:fa:e4:67:9d:0d:e4:92:64:00:d5:11:4f:
67:3b:fc:65:f8:dd:05:ed:b9:92:ac:2e:28:2d:d9:
1a:67:df:d1:a3:3e:a1:2e:09:55:ad:c5:fa:85:e7:
e0:03:66:a8:85:5e:9e:9e:b8:cd:a8:8e:e9:22:9e:
b4:be:1c:b2:cc:1b:2b:6d:6b:6b:9a:b1:9b:9e:9b:
15:7c:f0:4b:5d:d9:47:52:c9:cd:09:bc:ed:31:35:
93:48:9b:f1:52:60:f2:08:31:5a:0d:20:9d:31:b6:
bf:24:8e:b3:9f:ae:22:41:2e:0a:e8:bc:be:1c:33:
7a:11:f7:d8:64:a5:b2:a6:66:52:21:38:3f:db:40:
62:90:8f:17:bb:94:9f:cc:ca:02:b4:1b:8f:69:fe:
19:36:64:12:48:1e:09:c7:70:cc:e1:e6:13:f4:a7:
97:61:f6:9e:82:a6:95:94:2c:33:2a:7b:30:97:ae:
c9:07:bb:94:7a:dc:16:2d:d9:ae:b7:67:69:e5:6b:
a0:bf:ca:84:7f:e2:24:f0:d6:c5:1c:39:1b:3b:6d:
0d:8c:ad:1b:87:5c:89:8a:a6:cb:03:3c:53:26:c7:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:50:92:38:F9:71:B9:7F:A6:49:96:83:02:30:79:E9:01:56:73
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:55:0a:e8:63:1d:fc:0c:44:ce:d5:11:3d:fa:cf:bc:d8:
51:ca:df:5a:ee:22:cd:aa:3f:b7:4f:90:20:a2:67:c1:1a:cb:
f4:dc:65:9f:59:a3:f1:ac:3d:14:f6:6a:55:59:88:0b:fe:15:
98:dd:8b:5c:fc:61:bb:cd:31:36:42:b2:d1:26:00:15:bb:57:
6e:12:d8:41:2f:a4:ed:58:c4:23:87:aa:7b:0c:9d:33:fa:fa:
7a:f7:42:8f:f6:24:6f:dd:7d:24:55:2e:39:fa:f3:38:1f:61:
4e:97:c2:de:dc:ac:4b:12:fc:e0:34:ef:29:62:11:b5:61:76:
e2:06:14:6b:02:09:20:07:3a:a8:71:19:79:77:c4:a7:bb:82:
73:7a:a7:93:8b:c1:d2:5b:44:8b:7f:3f:c2:be:2e:9b:70:35:
ce:8f:6d:47:ab:60:dc:e3:18:9d:b0:27:2c:25:22:80:3f:ef:
87:b9:bc:0c:42:77:01:a1:3b:05:c0:f0:ed:28:af:f4:51:a8:
e0:b6:6d:7d:01:c3:64:ad:74:e2:e9:5b:9f:ba:aa:11:83:25:
d0:a4:4b:d1:b9:09:cc:91:59:6e:8a:7b:ba:c1:c6:b4:cf:bf:
7c:e6:59:2a:a6:47:22:89:49:ff:65:28:34:f1:8b:f0:bc:d2:
c8:39:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:38 2026 by rpki-client