Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: Bgir63QOF/FOOLMukItkKXM8Dtsh5aieIUbY28ArPJM=
Subject key identifier: B4:35:19:79:E7:66:FB:B0:B1:27:27:AE:EB:97:D5:7B:54:C1:E5:7D
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019ED3190939F2CF80D3ECF666E4FC7A9D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1967
Signing time: Wed 17 Jun 2026 01:01:33 +0000
Manifest this update: Wed 17 Jun 2026 01:01:33 +0000
Manifest next update: Thu 18 Jun 2026 01:01:33 +0000
Files and hashes: 1: 3FSpgzAXC8p7jTixkHlGezHGwxw.roa (hash: q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=)
2: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: 0N8e7WfiEnr1vcLeFbDVyio/uBnOMbgOPemggSHmoEo=)
3: wXIpuWNeJpplraRivZmQRjPoSsY.roa (hash: LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:19:09:39:f2:cf:80:d3:ec:f6:66:e4:fc:7a:9d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jun 17 01:01:33 2026 GMT
Not After : Jun 18 01:01:33 2026 GMT
Subject: CN=b4351979e766fbb0b12727aeeb97d57b54c1e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:1c:19:eb:d9:b6:6f:8c:51:8c:12:a0:2c:
d6:9e:c9:1e:a6:53:f5:10:66:b3:06:01:6b:08:61:
35:64:89:7d:2a:8e:a4:e9:14:5f:8d:8c:34:bc:25:
97:e7:f1:28:17:2e:89:4d:79:34:0c:84:c9:21:dd:
bc:26:15:9b:0d:45:4e:6c:94:ed:7d:84:74:09:44:
2b:55:75:6d:dc:45:69:4b:6b:39:04:48:e3:5c:78:
04:c0:4d:b9:0c:f2:8a:24:1a:f4:6e:96:df:d1:8f:
f8:0f:ff:ce:51:4a:ed:b7:18:80:d9:03:2c:fc:6e:
79:7e:b9:43:82:6f:39:49:0a:d6:e4:a7:7c:2d:24:
31:68:84:9f:42:39:70:65:53:88:22:06:fb:d0:e4:
15:84:41:c4:75:c6:7a:4a:88:d0:ef:d2:74:48:52:
25:dc:ab:19:50:db:e7:64:b9:34:a7:46:f3:2e:e2:
eb:96:b9:60:55:fe:54:43:88:3a:90:cd:ce:4e:a1:
1c:b8:50:bd:d5:95:b6:97:56:22:9c:14:55:5b:0c:
9d:00:67:64:84:83:5a:69:b9:02:7e:1f:77:53:d2:
9b:77:74:cc:72:12:06:b9:6b:56:86:8c:96:1b:28:
4f:86:58:a0:77:72:0c:ba:94:19:dd:6c:1a:c5:c4:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:19:79:E7:66:FB:B0:B1:27:27:AE:EB:97:D5:7B:54:C1:E5:7D
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:d8:c3:f9:e8:af:24:a1:d0:b9:c5:31:e1:d1:fd:2d:76:
ff:9c:7a:6f:a8:79:9a:6a:2c:68:e7:07:31:36:57:ba:df:8e:
64:87:f3:f0:4f:d6:6b:59:f1:2b:66:1e:4a:32:75:d1:f2:b9:
99:e1:e1:b6:65:dc:72:c2:6f:b1:02:bf:c6:c8:a7:d2:cb:a9:
03:90:89:77:d6:24:ca:af:6d:25:89:db:82:7c:df:32:18:ee:
af:35:6a:d0:19:44:ec:f7:46:ac:0c:61:b7:c6:b3:d4:55:45:
c0:2b:cd:17:2f:21:a8:5f:10:2d:ea:62:b3:d7:5f:db:ed:7e:
98:21:0d:66:10:2c:ca:82:f7:97:c8:cf:ea:60:4c:a5:99:d9:
ec:31:c9:86:cc:ca:34:3a:b7:67:cf:40:3d:7f:e8:c4:f2:d6:
96:e4:be:d8:58:91:41:d7:f1:95:9d:38:2f:e6:26:3a:0b:c6:
62:42:b1:2e:64:88:f2:f1:fa:13:77:94:7a:ab:85:45:d3:91:
58:0b:30:ec:5a:a9:80:23:64:76:12:5e:00:7f:02:55:ee:2d:
78:75:c1:a8:40:b8:db:7b:43:21:c2:54:cd:bd:53:00:76:2a:
fa:78:8c:e7:25:3d:11:d0:29:32:7d:4a:87:4c:76:74:79:46:
e6:96:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:46 2026 by rpki-client