Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: SwRbL+03ykh4E1SKcde4TW9UlRCI4vMESxRAaKixW/8=
Subject key identifier: E1:99:EE:4F:EF:74:F2:01:29:2E:EB:D1:EB:CE:63:EE:15:4B:DB:02
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019ED50773E650F0E4C7941BD8DBB1E45A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1968
Signing time: Wed 17 Jun 2026 10:01:35 +0000
Manifest this update: Wed 17 Jun 2026 10:01:35 +0000
Manifest next update: Thu 18 Jun 2026 10:01:35 +0000
Files and hashes: 1: 3FSpgzAXC8p7jTixkHlGezHGwxw.roa (hash: q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=)
2: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: +htWb78dERgI3ZVyoMlHbBfd5WGdUKgn+yU8XZP0ER0=)
3: wXIpuWNeJpplraRivZmQRjPoSsY.roa (hash: LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:73:e6:50:f0:e4:c7:94:1b:d8:db:b1:e4:5a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jun 17 10:01:35 2026 GMT
Not After : Jun 18 10:01:35 2026 GMT
Subject: CN=e199ee4fef74f201292eebd1ebce63ee154bdb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:2d:bd:f9:0b:57:70:86:30:4d:dc:30:e1:
0e:99:ef:07:9e:54:4d:5e:fb:17:2e:50:62:dd:0e:
3d:6e:f3:b5:66:07:c0:40:95:4d:c0:4e:d8:65:61:
a3:c0:03:10:9d:83:08:cf:e8:cf:9e:f2:0a:8e:c0:
a2:ef:d4:a1:79:03:6e:0c:48:6f:cb:ac:fb:e6:46:
be:0c:35:1a:c6:48:55:ed:2d:c4:2b:92:c1:8f:53:
8d:c0:f0:2a:b8:98:29:fe:0a:d7:00:2a:25:58:9e:
0c:65:43:4a:9f:90:9d:25:c4:7e:3c:a6:a8:83:41:
fd:4c:1d:05:3e:d7:ce:3b:e7:7a:90:81:b9:6d:c9:
d1:80:d6:f8:4f:f1:a4:dc:72:c0:d5:24:c9:c7:9c:
83:b8:86:03:f1:b4:c7:2c:e9:c2:98:cf:47:57:d7:
ae:a1:e4:b8:24:24:64:53:fd:ca:98:18:44:cd:4f:
6c:c1:65:db:3a:71:07:7f:b4:4a:e3:69:bf:bd:1c:
4b:47:16:48:18:96:4e:31:f7:56:aa:02:ed:75:b8:
99:80:75:ee:68:c2:cd:ed:01:11:a4:bd:01:ec:43:
cf:1c:4a:67:e8:8c:3c:52:b1:1c:5d:ff:84:49:10:
7d:cd:cc:82:8c:b8:61:ed:70:ee:7c:22:61:8f:41:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:EE:4F:EF:74:F2:01:29:2E:EB:D1:EB:CE:63:EE:15:4B:DB:02
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:39:d5:ba:c4:14:e5:f0:e3:3c:0a:4c:fd:09:f6:ea:70:ae:
71:e2:c1:dd:77:8f:74:fe:75:0a:41:74:6e:56:dc:47:87:23:
8d:03:8b:24:dc:8b:cd:d1:54:db:c9:fc:bf:9d:ee:02:37:00:
5a:a4:a7:64:4c:78:c8:ad:a9:2d:62:a7:e7:cd:1e:2f:65:ee:
1e:e0:ff:cf:eb:69:ce:0e:38:17:a2:5a:27:4f:04:2b:d1:8a:
96:82:4d:ae:f7:97:27:3b:c8:aa:4b:c6:41:b3:4d:2e:99:b7:
8e:da:79:39:58:37:b4:7b:f0:ad:4c:3d:be:21:0d:4d:ed:23:
3b:db:b1:61:d4:2d:b9:1c:9d:b3:fa:2c:c3:34:70:61:4a:06:
de:a5:3a:b2:bd:37:04:66:27:7b:05:8f:a8:6d:f2:b0:90:e8:
22:ca:40:29:20:f3:3b:b6:28:2e:77:5a:44:c0:d0:8a:90:cb:
47:b8:66:0c:6a:af:54:75:54:d6:b5:2e:83:0e:07:21:ba:5f:
6b:04:cf:91:93:71:56:22:54:31:8c:86:a1:ac:b5:8e:bd:37:
4a:1c:c8:93:eb:eb:48:5f:d9:29:69:fb:5b:11:eb:a0:bc:89:
0e:64:d2:17:2c:3e:a1:75:93:e8:40:c3:90:76:b4:79:fe:00:
e0:9f:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:49:06 2026 by rpki-client