Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: j23zC4pNSeITP/RH5X6p2jHf/hYv0hEZZnTg2HAoPHY=
Subject key identifier: F3:EB:66:1A:D7:7F:21:E8:74:F6:6C:7C:C2:59:3A:39:7C:D7:3A:FC
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019EC0DB4C44A24FD508035525E326F006FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 12:00:57 +0000
Manifest this update: Sat 13 Jun 2026 12:00:57 +0000
Manifest next update: Sun 14 Jun 2026 12:00:57 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: s/MZQj1TGkoDAfBVTy44viHuqTJPMrlIEnkR79EEOnk=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:4c:44:a2:4f:d5:08:03:55:25:e3:26:f0:06:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jun 13 12:00:57 2026 GMT
Not After : Jun 14 12:00:57 2026 GMT
Subject: CN=f3eb661ad77f21e874f66c7cc2593a397cd73afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:15:56:27:f3:58:03:06:36:69:7d:b0:2e:
3b:24:2f:f2:a6:d2:02:92:d2:3b:61:a1:22:ba:7c:
83:5f:26:e4:f1:9a:0d:ac:54:76:7f:1f:a0:f3:9a:
32:dc:3d:c7:66:99:09:9e:06:65:bb:f2:2e:67:61:
3d:ee:c9:7e:13:7b:f3:2a:6c:7e:9c:d5:15:25:b0:
a0:37:bd:2d:8c:06:89:42:1e:e0:eb:d7:09:25:fb:
ff:ff:69:72:86:10:8d:67:28:f6:86:10:5c:3b:f6:
29:af:1e:b4:c3:25:b0:6f:ef:c7:66:bd:43:28:9f:
b7:5e:7d:58:d7:51:dc:a3:0c:f2:d2:52:85:5d:71:
4c:da:b9:ac:0f:8e:60:d5:a5:06:de:09:e1:92:ae:
5f:9f:4d:fe:6a:2e:6f:32:76:11:14:8b:2b:f4:20:
c3:73:86:88:6a:ec:aa:79:15:e3:6f:f5:c9:46:5c:
e5:e3:f0:11:14:d0:e5:1e:e8:a7:d7:43:26:3e:b7:
20:db:e1:b2:52:2e:5b:66:76:10:cc:80:ad:32:b4:
67:82:f2:e3:9c:d6:bf:c3:69:31:58:75:f1:63:a4:
c1:a7:87:c0:09:43:08:ba:aa:42:0f:a8:e1:23:6f:
59:aa:bd:3f:88:4d:ee:59:8a:33:1c:15:00:26:cf:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:66:1A:D7:7F:21:E8:74:F6:6C:7C:C2:59:3A:39:7C:D7:3A:FC
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d6:d6:5e:71:31:44:20:59:d2:1b:26:1f:b1:a5:c2:ee:65:
0a:65:9a:3f:69:0c:d2:ba:ea:fd:88:c9:19:02:28:87:6d:1f:
6e:40:c3:dd:1c:5c:14:0d:cf:6d:ec:92:fe:2d:a9:38:52:51:
4d:5b:8d:83:21:a2:f4:20:78:d8:b5:a9:09:ad:b0:fb:82:79:
91:97:f2:e1:37:d7:9b:ab:70:77:ca:c3:74:16:e8:36:06:b6:
a8:fe:f0:3a:6d:35:1e:f2:1f:0d:c0:fb:bb:0f:09:81:90:f1:
4f:9b:10:61:55:89:d5:68:3c:99:5c:3e:ea:0f:f5:09:7b:6c:
8a:a2:49:86:a8:1c:ae:a5:b5:db:10:df:ca:93:0a:16:c8:bc:
3c:41:dd:d1:5b:75:69:53:15:e6:db:c3:b7:e3:b6:d8:bc:41:
0b:4e:e0:9b:bc:12:26:04:46:07:ac:e0:7d:ce:18:f4:5f:5b:
dd:d2:7d:3e:4b:23:a3:43:ca:9b:f3:17:0c:a9:fb:11:1f:e6:
68:af:a0:3d:9f:7f:f7:4a:6e:e1:31:b8:30:35:3b:05:93:a6:
d5:22:0b:a6:60:74:ef:3d:33:c1:b9:d0:5b:43:77:68:5e:c5:
e5:a2:80:83:e3:86:0c:72:aa:05:83:c0:91:f7:13:48:e2:bf:
c1:9e:93:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A20xEok/VCANVJeMm8Ab+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj
YWY3ZWYwHhcNMjYwNjEzMTIwMDU3WhcNMjYwNjE0MTIwMDU3WjAzMTEwLwYDVQQD
EyhmM2ViNjYxYWQ3N2YyMWU4NzRmNjZjN2NjMjU5M2EzOTdjZDczYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CUVVifzWAMGNml9sC47JC/yptIC
ktI7YaEiunyDXybk8ZoNrFR2fx+g85oy3D3HZpkJngZlu/IuZ2E97sl+E3vzKmx+
nNUVJbCgN70tjAaJQh7g69cJJfv//2lyhhCNZyj2hhBcO/Yprx60wyWwb+/HZr1D
KJ+3Xn1Y11Hcowzy0lKFXXFM2rmsD45g1aUG3gnhkq5fn03+ai5vMnYRFIsr9CDD
c4aIauyqeRXjb/XJRlzl4/ARFNDlHuin10MmPrcg2+GyUi5bZnYQzICtMrRngvLj
nNa/w2kxWHXxY6TBp4fACUMIuqpCD6jhI29Zqr0/iE3uWYozHBUAJs/1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPrZhrXfyHodPZsfMJZOjl81zr8MB8GA1UdIwQY
MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt
MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh
LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9bWXnEx
RCBZ0hsmH7Glwu5lCmWaP2kM0rrq/YjJGQIoh20fbkDD3RxcFA3PbeyS/i2pOFJR
TVuNgyGi9CB42LWpCa2w+4J5kZfy4TfXm6twd8rDdBboNga2qP7wOm01HvIfDcD7
uw8JgZDxT5sQYVWJ1Wg8mVw+6g/1CXtsiqJJhqgcrqW12xDfypMKFsi8PEHd0Vt1
aVMV5tvDt+O22LxBC07gm7wSJgRGB6zgfc4Y9F9b3dJ9Pksjo0PKm/MXDKn7ER/m
aK+gPZ9/90pu4TG4MDU7BZOm1SILpmB07z0zwbnQW0N3aF7F5aKAg+OGDHKqBYPA
kfcTSOK/wZ6Tng==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:02:05 2026 by rpki-client