Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: 9cvbZIAfDSuG2Qv+T8KTwRbd/Sv+zvzdQqnQ2KIZ2dA=
Subject key identifier: D7:E7:AA:09:E8:60:01:AB:09:12:D1:42:32:1F:4D:93:47:16:05:13
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019EC0A3E752920CAE1189573FB8159B805F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: A0
Signing time: Sat 13 Jun 2026 11:00:27 +0000
Manifest this update: Sat 13 Jun 2026 11:00:27 +0000
Manifest next update: Sun 14 Jun 2026 11:00:27 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: TOzd9gcv8P9sjvsdWaf0aBjO1/qZwXMSGfBmnRGxzUU=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:e7:52:92:0c:ae:11:89:57:3f:b8:15:9b:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Jun 13 11:00:27 2026 GMT
Not After : Jun 14 11:00:27 2026 GMT
Subject: CN=d7e7aa09e86001ab0912d142321f4d9347160513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:bf:65:ef:7c:bb:b6:96:f0:55:1f:21:05:
79:60:2e:ff:02:7a:f9:b0:9f:34:c5:7c:cb:d0:42:
84:a5:57:05:17:57:ab:6e:95:ad:d8:0e:3e:53:ce:
57:13:2e:f9:52:a2:2e:85:5b:36:fc:62:5b:27:5b:
d0:9b:fb:9a:6a:ce:fb:9a:23:b1:2c:ab:0d:6d:da:
8e:49:36:88:e3:ef:3d:73:11:d6:58:ac:8b:fc:4d:
21:6a:33:f7:d4:af:b8:e7:8b:76:29:8f:56:15:b1:
16:b3:bd:9f:29:b5:2f:19:ab:7c:87:50:ee:fd:80:
cf:f7:25:2d:6d:68:81:a6:d0:ad:e1:ca:4d:6f:ef:
32:97:82:a6:e1:ff:9e:ce:fe:52:b4:06:66:21:e4:
35:67:5c:44:cb:f1:02:2e:b7:e5:70:91:bb:0b:90:
69:f0:46:a0:71:5e:90:87:e1:26:95:22:37:76:d9:
99:e6:16:7a:aa:c6:85:9f:f1:9b:c3:1d:a9:df:e7:
4b:28:31:83:70:82:54:47:80:af:e4:f4:74:15:d9:
d8:9d:9f:2b:62:bd:e7:cc:eb:b5:2f:96:65:b6:fc:
f6:91:b0:c6:6d:99:f6:a2:e3:89:f8:fb:45:cd:e8:
2d:b9:25:c9:2c:f0:e2:47:b5:bb:18:94:e2:8d:43:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:AA:09:E8:60:01:AB:09:12:D1:42:32:1F:4D:93:47:16:05:13
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:d3:c1:c3:13:a4:c0:1b:50:d6:ea:be:52:80:94:13:0a:
b2:bb:fc:f8:9e:62:e6:67:dd:cf:72:65:07:4a:68:2c:62:00:
ba:da:7e:e4:a8:2a:cd:eb:d2:53:80:df:98:ee:90:d5:7d:65:
9e:a7:d4:08:47:a4:d2:49:0e:2b:01:60:08:13:f1:82:c2:8d:
f4:04:76:33:63:75:d6:ff:cd:e9:77:3d:19:eb:85:e9:e9:c1:
e1:43:71:cf:8b:3c:0f:a8:85:94:77:36:eb:ff:2d:5b:78:44:
15:bd:ab:d2:c0:e9:6a:a0:fb:46:cb:f8:0a:ab:f7:4e:20:ba:
fb:b3:46:3b:0e:46:42:ea:2f:09:46:94:46:ab:25:05:1c:ed:
6a:2d:a6:29:a5:2d:bb:e1:5f:45:99:d5:0f:a9:b1:4c:d8:69:
d3:98:f4:ff:98:e7:d6:96:28:aa:6b:d1:9f:4f:ac:e5:59:13:
ba:57:34:d8:9b:d4:01:04:92:6a:8f:34:44:2b:42:80:6f:06:
de:b2:96:48:d1:02:61:97:e2:3f:2b:77:21:48:6e:94:8e:05:
9e:45:e4:d4:2f:05:28:df:cc:8b:fe:73:39:d7:89:41:57:e6:
c6:bf:8e:e0:7e:e0:57:27:0f:59:46:e4:e4:d5:f3:2a:36:fe:
6e:af:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:47 2026 by rpki-client