Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: YAhD6flt+VUfl8qRfRLY4G3gVhb2udefs+uVqjd/kns=
Subject key identifier: B7:CA:AC:71:88:52:E7:14:99:6F:BD:5E:D3:1C:D9:36:A0:C3:1A:67
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019EC449CF03540C3B0153F5F387A5138FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 16A5
Signing time: Sun 14 Jun 2026 04:00:31 +0000
Manifest this update: Sun 14 Jun 2026 04:00:31 +0000
Manifest next update: Mon 15 Jun 2026 04:00:31 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: Bp3GHWptzX76ALKU+8KQp5IQngOLOW7ob73naS3bj8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:49:cf:03:54:0c:3b:01:53:f5:f3:87:a5:13:8f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jun 14 04:00:31 2026 GMT
Not After : Jun 15 04:00:31 2026 GMT
Subject: CN=b7caac718852e714996fbd5ed31cd936a0c31a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:bc:15:38:32:f8:9a:e9:69:e8:0c:27:bb:
c9:5b:ee:a5:64:bd:be:85:f8:cc:7f:e9:5d:31:50:
cf:23:7e:f4:af:67:ac:31:82:a1:d8:24:58:ec:44:
95:e2:4b:73:5e:8b:6a:24:da:20:25:43:bd:70:08:
7c:a1:e8:1a:e5:27:07:c3:1f:4f:71:de:27:16:db:
2b:a7:31:29:0a:1d:81:37:b3:52:ae:d7:83:79:b0:
2d:24:f8:b6:f7:ce:b5:54:cb:17:4e:26:bb:34:fe:
63:a7:4e:d1:11:af:55:f6:21:be:6b:3b:b5:64:77:
8c:62:af:21:f3:73:93:55:5f:17:24:e2:75:cf:a1:
71:76:6a:29:e2:5d:79:6a:12:3e:9e:0b:81:54:b4:
cc:ec:be:49:03:84:1c:3b:02:e7:06:41:14:07:43:
8c:83:8a:67:0f:d6:49:4e:c8:05:8d:54:94:90:b8:
ec:46:86:bb:ce:79:ff:0d:d7:fd:f1:71:01:af:1e:
27:a2:3e:ff:08:aa:a2:2c:cd:68:fe:79:ad:9a:8f:
1b:33:14:3c:89:32:fe:1c:ca:c8:2a:36:74:35:b5:
96:0e:62:1e:1a:6d:b8:04:e2:03:b3:d2:dd:f6:72:
a2:02:f7:54:79:d3:fe:2e:d9:92:df:38:7f:cf:77:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:AC:71:88:52:E7:14:99:6F:BD:5E:D3:1C:D9:36:A0:C3:1A:67
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d8:70:2a:14:94:08:f6:60:92:4f:ed:bd:c7:a9:03:90:15:
c9:64:a9:46:72:f4:cd:6a:76:ff:d6:6c:30:6c:d6:34:a4:9a:
40:f8:2f:1f:c1:6a:29:16:22:fb:78:9a:c0:8a:45:13:3e:15:
10:59:4c:95:41:0c:96:c3:99:61:df:03:87:8a:7e:b9:e5:5c:
c1:1f:2d:18:53:37:13:7f:70:7b:56:67:dd:ef:89:37:14:bc:
41:b0:58:b1:09:d6:fb:0f:d9:b8:86:b9:29:58:18:2f:52:58:
27:2a:9e:1e:f4:c8:e6:f7:ea:f3:89:b4:d1:48:f3:56:ce:ce:
d3:57:fd:e7:1f:9f:a2:45:d2:8a:79:c9:d0:29:a6:7b:41:6d:
fe:ce:91:f1:00:1b:f6:1d:2d:35:b9:dd:78:49:c9:40:49:da:
00:61:b6:49:e7:4c:c2:a1:3b:e4:87:28:95:52:67:63:e8:7a:
c3:92:dc:df:06:24:a8:ff:d8:cd:79:a4:34:4c:2a:4d:3f:54:
62:43:6a:f8:d3:9c:0a:19:70:e0:06:25:c1:85:fb:bc:6f:79:
0f:ba:c6:f8:46:34:af:79:72:ec:85:ec:5a:da:3a:cf:a6:94:
36:2a:a9:9a:95:ee:3c:c1:64:53:68:36:fb:60:d2:35:89:71:
99:1e:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:12:10 2026 by rpki-client