
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: SzjJcbI0VP/MyHrPOu/j0ZdSIqfO7+euOnKGdR7fhhw=
Subject key identifier: 81:D2:24:B5:EE:D3:15:35:24:50:DD:7D:9A:C0:51:EF:7E:7B:5C:EF
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 019EC1EE5802242DFA0591E46010EF649DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 145B
Signing time: Sat 13 Jun 2026 17:01:23 +0000
Manifest this update: Sat 13 Jun 2026 17:01:23 +0000
Manifest next update: Sun 14 Jun 2026 17:01:23 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: L4W61gQYEA6ijmRxUVE3GJrHjmKCBJO8O0oK02Sjk/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:58:02:24:2d:fa:05:91:e4:60:10:ef:64:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jun 13 17:01:23 2026 GMT
Not After : Jun 14 17:01:23 2026 GMT
Subject: CN=81d224b5eed315352450dd7d9ac051ef7e7b5cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:4c:2c:e7:fe:d0:11:bf:de:74:23:89:65:
77:d0:af:01:5a:7f:69:ea:ff:6b:19:b1:33:9f:6b:
cf:b8:d3:19:02:d5:cf:af:f8:dd:15:fb:55:27:7e:
b5:52:1a:98:3a:5e:02:2b:20:e9:6c:4e:57:0a:dc:
49:09:9d:ca:42:5f:bc:ae:4c:31:3a:db:f9:7c:e4:
42:46:6f:cf:03:4c:13:c1:80:6f:96:d5:70:90:7b:
ad:62:cf:35:98:65:e4:e5:c4:7e:97:ef:ee:49:fd:
9b:62:74:86:60:fe:a8:7c:d6:ce:4f:37:96:cb:46:
ba:94:57:af:09:0f:d7:dc:bb:9f:34:42:ff:c7:6b:
2e:16:ed:e4:7a:89:c4:4b:9f:b4:90:c1:0c:c7:58:
c6:ee:15:db:78:94:a1:5e:e5:0a:d6:a4:af:53:a1:
f3:eb:2f:66:e9:fa:9c:47:9f:8d:e9:4b:77:f5:2d:
36:02:a6:f0:cd:46:68:01:34:e6:d8:ea:38:09:06:
f7:ed:2f:f5:c9:56:de:47:31:8f:be:71:17:66:3b:
eb:12:ec:9c:72:27:86:58:9d:18:34:b8:8d:1c:ed:
af:49:61:94:82:58:8c:93:7b:47:fe:f2:a8:ce:b2:
87:26:f9:8d:24:a7:4e:59:13:17:7b:5d:b5:2c:51:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:24:B5:EE:D3:15:35:24:50:DD:7D:9A:C0:51:EF:7E:7B:5C:EF
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:58:d3:f4:71:4f:02:b7:ce:97:8b:de:93:5f:1a:7e:84:78:
9e:e1:35:9a:b3:c8:c5:ab:91:9b:f2:0a:81:f3:80:33:ef:cd:
22:a8:c0:cc:5d:9b:6d:94:c3:a3:a8:03:f3:c1:09:84:74:38:
8c:b6:15:0b:b8:8f:86:fc:3e:ac:92:3d:9f:41:2a:77:7e:5a:
68:b9:a6:cb:1a:79:bf:9e:32:a8:5c:e9:40:9c:a4:d8:b8:ed:
8e:5e:cd:5d:1c:bb:ed:61:2a:ad:e3:df:08:d8:49:84:c4:b0:
c9:9c:e6:11:e9:27:c3:7c:de:7f:25:00:bc:c4:d0:c1:7a:c3:
97:10:89:c6:51:ce:3e:62:23:ba:9f:60:4d:2e:dc:69:b8:e0:
ff:e7:7b:1e:c0:26:d2:5f:3c:b6:cb:3c:64:33:2e:e5:50:ec:
99:80:f4:5e:00:18:1d:a6:2e:42:fe:3b:88:01:3e:32:56:8b:
e3:9f:01:37:45:a5:d7:5d:76:37:34:36:24:19:a8:e0:d0:de:
fb:d4:4d:12:3d:3a:1c:98:85:31:d6:ab:94:7d:59:b0:0e:dd:
1e:b8:0c:ff:b1:a9:0d:ca:1a:68:bd:cd:89:80:f6:b4:be:3e:
d7:17:0a:bd:78:ef:87:1e:e4:83:de:af:e9:4c:3c:e6:d7:bc:
e0:ff:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:45 2026 by rpki-client