Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: 1Z+COk9B7ilqUaw8TNZ/ZPgN5M9pH9W1GXjkLTQ+qtg=
Subject key identifier: 1C:08:5C:99:02:32:A2:BE:C8:F5:91:B9:A4:4B:11:C2:5E:3E:29:FC
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019EC25BD3B37115A6DC3F34E6AB3A55940A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 19:00:58 +0000
Manifest this update: Sat 13 Jun 2026 19:00:58 +0000
Manifest next update: Sun 14 Jun 2026 19:00:58 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: Q2TXIXl24BFiu5hAgZZlt5vJ1DOL4r7xw55FMtCzfPk=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:d3:b3:71:15:a6:dc:3f:34:e6:ab:3a:55:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jun 13 19:00:58 2026 GMT
Not After : Jun 14 19:00:58 2026 GMT
Subject: CN=1c085c990232a2bec8f591b9a44b11c25e3e29fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:4c:37:52:55:3b:a1:c4:13:5c:70:a9:79:
81:06:27:46:a7:f6:74:48:85:28:45:e7:84:2c:64:
21:ae:67:02:44:3e:15:a3:c0:17:cf:36:4c:ee:43:
5a:bf:de:c4:28:68:11:57:30:db:d8:be:a3:0c:2b:
df:ca:f9:33:5f:13:6a:d6:e3:1d:59:fc:65:31:68:
b9:12:6c:d4:ee:97:b3:02:dc:e0:ed:05:da:15:c3:
e4:8a:fc:69:61:92:41:62:92:8c:1b:5c:8a:0b:d5:
d0:f0:45:63:fe:bc:f3:5a:f0:ab:fe:b0:06:1c:51:
1e:32:05:25:b8:7e:09:1f:80:d5:78:56:7f:33:ee:
b7:e5:c9:02:1d:c6:c3:63:09:50:00:79:9b:bd:11:
0c:33:c5:ff:91:e5:b7:fd:1a:75:9a:bd:ae:da:f5:
43:c6:b5:31:21:09:4e:bf:4a:bf:c0:09:dd:f3:08:
ab:f2:88:56:7d:e0:47:06:13:4f:dd:0d:b9:5b:37:
50:c7:5c:6f:88:17:b6:7f:c8:4c:e4:d6:c4:39:46:
64:35:6f:3c:83:97:e6:70:df:b9:7c:3a:d0:67:77:
bc:65:d1:e3:5d:30:f1:05:43:cf:ba:cf:33:3a:a9:
b0:1c:bc:fb:68:ba:83:97:9a:77:4d:71:f7:83:55:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:5C:99:02:32:A2:BE:C8:F5:91:B9:A4:4B:11:C2:5E:3E:29:FC
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:04:5d:3c:59:ac:ab:36:47:1a:71:e0:74:f6:43:90:06:
99:d2:4a:f7:13:0f:d7:60:41:59:91:ae:2c:30:5e:4d:77:83:
41:09:25:43:10:d4:d2:f2:53:8c:4d:7b:12:9a:c4:6a:dd:47:
e6:0b:a7:66:a0:f4:3e:82:9f:40:64:96:85:15:2e:d3:b2:02:
8b:60:54:9f:58:06:65:b9:8b:6b:b3:26:c4:a3:90:98:5a:d6:
13:17:08:85:0a:bc:e2:be:62:2c:3f:e7:cd:1e:23:75:5e:e7:
97:3d:60:14:0d:37:79:58:62:fd:17:5b:55:f7:ae:05:76:7a:
83:be:70:07:06:71:96:c9:8d:f6:23:55:de:19:66:9f:fb:d2:
74:1a:2c:be:9f:4e:4b:51:3a:2b:6c:e7:0c:85:c6:54:bc:5c:
82:c5:d4:e1:f0:5e:71:87:a0:8a:a6:67:c5:49:85:e2:0c:c6:
59:2d:12:47:c8:ba:53:52:07:d1:6e:dd:62:50:2c:5e:71:ab:
78:67:53:b9:7d:fd:34:cf:cd:c9:6f:a0:e1:62:6c:19:0d:9c:
2f:eb:46:87:36:bc:e9:f1:c6:52:76:3a:57:ce:a2:14:9f:86:
da:33:42:f0:2b:75:07:34:67:c4:17:7d:13:98:a2:5c:1d:c3:
70:5e:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:25 2026 by rpki-client