Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: yk43g3p3KxaRKxnAhxeThdU7FcyefMfUPJHuLPgN6cA=
Subject key identifier: 53:7A:0C:E9:54:38:42:AE:40:52:1E:53:64:95:E8:0F:B4:D9:29:F5
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019EBF5B2E431B20CE56D16BA7EF3384D518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 04C9
Signing time: Sat 13 Jun 2026 05:01:24 +0000
Manifest this update: Sat 13 Jun 2026 05:01:24 +0000
Manifest next update: Sun 14 Jun 2026 05:01:24 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: Nt/N9mszCQ3lomB84SNfFPNXPB6Dw/eOrPp738OwBSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:2e:43:1b:20:ce:56:d1:6b:a7:ef:33:84:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Jun 13 05:01:24 2026 GMT
Not After : Jun 14 05:01:24 2026 GMT
Subject: CN=537a0ce9543842ae40521e536495e80fb4d929f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:85:87:f0:e0:85:a8:14:0f:94:f2:de:21:
3c:32:aa:a8:ee:a4:f4:e1:98:d9:c3:59:59:ca:1e:
50:26:24:22:ae:6e:a1:e6:68:86:4a:a8:70:71:41:
f9:75:24:98:5c:71:04:88:ef:73:f2:d9:74:eb:61:
83:2c:48:65:ec:46:2f:ac:f7:8c:05:c9:e4:b0:96:
13:5f:42:0c:a0:3b:09:f5:3e:5c:b5:de:1d:7a:29:
3c:5b:77:53:e6:2c:31:97:37:02:08:bd:7d:f0:22:
a8:c3:46:71:8d:97:2d:2b:89:b0:25:b0:fd:d5:fa:
53:4d:8d:fa:26:b8:98:9e:8d:0b:4c:68:ff:cb:63:
c6:c2:7d:77:42:be:fc:e7:6c:e1:e8:b5:7f:e9:ee:
54:ac:24:86:72:66:ff:58:4b:5e:72:ec:6d:df:df:
8b:e8:80:f0:ec:70:31:97:c6:75:b5:e2:98:16:9e:
ca:d1:d2:81:c8:33:ea:10:14:a1:e9:e9:79:ef:df:
f8:25:bf:c2:f5:4d:0f:28:4e:62:b7:0b:94:cf:f0:
85:4c:68:d4:3b:0f:02:e0:a7:79:fb:e2:4c:41:bc:
fe:e2:db:b1:8b:43:79:d4:7f:30:9c:40:c7:3e:fc:
fe:b3:f4:0b:32:82:bc:fe:ee:e6:5d:05:17:7e:1d:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:0C:E9:54:38:42:AE:40:52:1E:53:64:95:E8:0F:B4:D9:29:F5
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:39:5d:06:f4:50:ac:ae:e2:ad:eb:8d:27:f4:ba:62:0a:
6c:90:32:c4:73:c1:dd:27:16:ae:e7:6d:55:54:1f:34:bf:70:
19:8c:04:a3:db:6f:54:69:c0:0f:de:a3:1c:13:cf:f3:7a:db:
f3:89:00:da:b3:c9:d7:db:41:40:e5:0b:66:d6:e0:b7:6d:78:
be:ce:fa:aa:7e:64:25:3c:69:41:0c:ee:89:16:f6:81:36:a4:
64:4a:d0:e1:bc:37:c6:66:64:d8:63:1a:68:5d:ab:6f:3b:df:
20:fd:f3:df:5e:5d:b0:72:91:9b:2b:76:ca:13:9a:8b:ca:c8:
40:9c:f1:41:13:33:61:e5:5a:d3:b4:cd:be:96:08:da:20:f6:
40:b2:aa:29:6b:3c:02:0d:eb:35:96:c5:ca:03:6c:9c:8d:fb:
cb:39:c0:57:7b:c7:f7:69:ff:fb:3a:05:1a:bc:63:b0:b7:e3:
e7:f9:0d:76:b3:a5:ac:34:4b:94:bb:56:60:ac:79:cd:d2:a1:
db:af:89:1c:fc:56:5b:ff:ee:df:1f:7d:83:d7:5b:d9:65:2d:
15:5c:e3:fe:dd:3e:20:e7:8b:ed:e2:45:8e:61:c4:97:14:bc:
76:d2:80:1b:4a:61:0c:99:dd:6e:b8:a6:09:97:54:ba:01:f8:
f3:d0:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:08 2026 by rpki-client