Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: 1kaEZoJim28AyXhXlDiH3F/toYxjIwJ4Ve/QNrUYc00=
Subject key identifier: A4:79:ED:97:FB:5A:A1:64:22:79:14:83:39:43:26:58:32:0C:E5:5E
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019EBFC856C3AD41FE8D0A19072BFED5C314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0CB9
Signing time: Sat 13 Jun 2026 07:00:38 +0000
Manifest this update: Sat 13 Jun 2026 07:00:38 +0000
Manifest next update: Sun 14 Jun 2026 07:00:38 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: JzN3RTBdwSWZMqLoXu1mPdQChlOf5KsyZxefgdn8jhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:56:c3:ad:41:fe:8d:0a:19:07:2b:fe:d5:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Jun 13 07:00:38 2026 GMT
Not After : Jun 14 07:00:38 2026 GMT
Subject: CN=a479ed97fb5aa1642279148339432658320ce55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:6f:13:7b:51:47:47:2e:d2:17:54:93:3c:
e5:fa:05:38:eb:4d:91:26:81:72:a2:34:f5:a1:d4:
e0:a7:73:72:b3:41:01:1e:72:eb:b3:78:e1:17:76:
ec:71:8c:86:f0:85:58:af:1a:d6:86:7c:0a:17:5e:
27:40:ba:fc:a8:8d:ce:9e:9f:32:d1:d4:2d:b0:45:
e3:9b:4a:6a:ef:d3:4a:16:bc:7e:90:46:61:62:75:
40:95:b6:62:c0:26:bf:8a:66:26:b8:7c:ba:e5:df:
cd:0b:fd:3b:04:52:ad:07:84:b1:f6:2c:c4:11:02:
00:45:9f:37:c8:86:e1:51:1c:93:98:59:4c:46:28:
e6:93:0c:2d:3c:ff:f6:34:6e:08:ea:a0:9b:8e:17:
88:24:b6:a8:ca:13:e3:6a:60:4b:85:5f:5a:4d:45:
e8:46:f2:02:e5:d5:93:6b:df:67:d0:9a:51:7d:73:
a4:25:3d:f2:92:95:b7:59:5e:da:d9:0b:bf:74:02:
17:6f:e0:91:11:1b:0e:3e:64:e7:8c:ff:c5:18:30:
bf:22:cd:ab:61:90:6f:bc:a1:b5:bc:1f:cb:ba:59:
34:fe:fd:43:3e:70:98:97:07:d4:dd:c7:40:7e:43:
c6:91:71:8c:e5:83:db:20:1a:d8:55:35:91:36:58:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:ED:97:FB:5A:A1:64:22:79:14:83:39:43:26:58:32:0C:E5:5E
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4e:d5:85:b7:ab:75:10:ea:d3:fa:23:e6:b8:d5:1f:03:45:
71:00:c3:d1:94:1c:75:8c:d1:e2:cc:34:fd:dd:00:02:0e:22:
4a:d0:54:54:35:db:c5:e4:4a:07:ba:89:5f:68:76:36:d4:3f:
99:96:0c:ab:e9:28:a5:60:96:7c:69:6a:cd:91:b2:3c:63:bc:
53:00:73:d1:26:a8:70:bd:69:d5:cc:a7:7a:8a:23:a4:34:87:
8c:d3:e9:38:48:30:f4:92:8c:c0:1d:04:f1:2e:ef:a8:88:5c:
26:7a:db:76:d8:50:e1:10:c0:21:21:ad:7c:ee:2e:83:8c:4f:
df:8a:ea:9e:69:ce:07:9a:3b:d3:61:a2:41:53:a9:2f:22:f5:
52:34:3c:a4:3e:58:11:16:76:7a:a8:10:80:5e:77:e9:b7:99:
d1:32:e7:e9:b7:7c:b1:87:ff:80:22:cd:5c:fb:ee:b0:fb:c5:
42:64:69:52:1a:64:45:f5:72:dd:81:ed:4f:ce:7d:40:a6:ee:
cb:46:e7:51:cc:39:e5:d1:c1:cc:6e:64:7a:5c:5f:d7:bd:dc:
8a:f2:49:14:87:ca:1e:5d:3f:fb:05:f9:5b:86:7d:f1:be:ca:
6f:50:3f:f4:21:a1:94:2a:d4:70:c8:31:2d:53:85:d5:c1:b5:
31:cf:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:19 2026 by rpki-client