Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: Fx8Od7eazbAFzmIKSCjQ9aUhDBi4vb6vtim2Hirzh2A=
Subject key identifier: 33:D9:D0:AA:F4:61:F7:FB:56:C8:C3:AD:57:22:87:11:04:82:F2:10
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 019EC224DF0519FBAC6C3600C41AC4F11519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 9E
Signing time: Sat 13 Jun 2026 18:00:56 +0000
Manifest this update: Sat 13 Jun 2026 18:00:56 +0000
Manifest next update: Sun 14 Jun 2026 18:00:56 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: MeYjs4z7ELcZRFZNDENJeopacODPAOLIE73df4ZzWT8=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:df:05:19:fb:ac:6c:36:00:c4:1a:c4:f1:15:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Jun 13 18:00:56 2026 GMT
Not After : Jun 14 18:00:56 2026 GMT
Subject: CN=33d9d0aaf461f7fb56c8c3ad572287110482f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:1e:48:f0:0e:23:ad:66:29:4a:08:47:9d:
b5:fe:df:16:0f:67:aa:7d:e7:b4:20:00:4a:f7:8d:
b5:6e:98:86:a1:5f:23:a1:64:b7:9c:e5:18:b5:4a:
1f:17:04:b0:16:f1:c3:92:82:f0:35:e7:79:44:89:
e0:26:0a:4e:62:fe:d1:5d:22:5f:6e:3e:41:07:4b:
57:49:ba:17:72:d8:40:ca:9e:e2:b5:5e:34:6a:0a:
a3:98:90:18:37:9c:ca:1e:e7:f5:b8:9d:19:fd:0a:
22:3a:08:8a:c3:6c:47:25:a3:3e:38:e6:7d:84:38:
35:34:08:34:32:ae:5e:4e:63:10:b7:29:46:bb:e6:
89:8e:12:58:73:5a:a0:29:9d:3b:8d:63:76:4e:5d:
8f:85:7e:d1:2d:37:c0:b1:bb:7f:6b:7b:ae:b2:97:
1e:6b:8d:59:8b:9c:d3:5f:b1:d4:3b:db:d7:2f:f6:
41:95:ab:34:3b:39:37:71:b2:96:84:78:a7:82:72:
b0:4d:93:4f:83:3e:dd:9f:a8:8c:1c:c0:0d:68:3a:
93:4e:68:04:20:7a:e7:48:56:f9:05:4f:d0:55:24:
81:39:16:c7:45:2c:f6:70:0a:b7:93:23:74:31:14:
ee:04:e6:78:42:d5:4b:b4:ff:e8:1a:91:2b:d5:bf:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:D0:AA:F4:61:F7:FB:56:C8:C3:AD:57:22:87:11:04:82:F2:10
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:0c:70:b3:78:17:53:a3:e3:e2:3c:34:14:3c:65:4f:e2:
21:a1:8b:23:da:bb:c8:f7:c7:dc:f6:fc:11:42:82:bc:87:3e:
af:9a:3e:41:45:6b:d5:e8:52:9a:f4:67:6c:f2:df:18:00:01:
56:55:f1:4f:63:0c:83:4c:c6:e8:b5:de:3e:31:81:8c:8f:82:
c8:d3:af:e8:52:7f:d3:bc:4d:2d:ac:35:57:3d:4e:47:74:5f:
23:9a:37:6b:51:9f:fa:41:c8:9f:d8:1d:ab:14:c7:6b:10:ab:
36:94:ce:51:d3:82:f9:67:8a:70:1c:58:df:38:89:ce:1f:5c:
c7:d9:26:eb:04:c1:1b:b1:62:36:da:c1:c9:d9:c1:fb:d9:74:
63:e4:91:7a:c2:6d:d1:42:28:27:c5:c3:89:bc:c8:2d:96:b8:
04:d4:3b:56:24:fc:11:9b:04:57:46:70:9f:c8:70:47:69:96:
a2:07:bb:a8:9a:77:2c:cd:d0:13:09:7a:59:ae:cf:39:24:9b:
8a:92:dd:c0:76:45:c8:43:26:18:9f:67:f3:96:fd:f8:12:f5:
a2:89:57:85:75:9d:b7:9b:5a:bd:b1:9e:7c:c3:55:f8:22:d1:
bb:b3:db:17:3d:49:0e:78:a5:80:ba:13:dc:a8:eb:3e:69:61:
ad:3d:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:16 2026 by rpki-client