Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: xF10v8XyWviE3trcogokGDD0A/lsN1LoA8SEcpQnhzo=
Subject key identifier: 43:3C:8B:DC:72:5B:C4:0C:96:BD:8E:37:A8:63:76:86:38:E4:46:DB
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019EC1B71B25FCEBDDDE2538ECD0F3BA76B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 16:01:03 +0000
Manifest this update: Sat 13 Jun 2026 16:01:03 +0000
Manifest next update: Sun 14 Jun 2026 16:01:03 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: nz25uuAZ0A04XA4osZVgljfkPvhxAnljo3KPVFdLt3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:1b:25:fc:eb:dd:de:25:38:ec:d0:f3:ba:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Jun 13 16:01:03 2026 GMT
Not After : Jun 14 16:01:03 2026 GMT
Subject: CN=433c8bdc725bc40c96bd8e37a863768638e446db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:e6:bf:4f:9b:4a:7f:9e:58:ce:2c:d2:25:
a6:14:9d:f9:7c:cf:65:68:33:2e:d0:fa:ad:8c:a7:
ca:81:83:a5:16:10:7a:8e:de:ba:5d:2c:62:94:6f:
d5:0e:ab:f9:32:b4:4d:ad:ca:cf:a9:6e:b2:90:e9:
91:35:33:0d:69:b8:97:00:83:15:99:69:2d:b1:a0:
10:10:41:61:5e:69:d5:25:f2:65:d2:2c:c3:40:23:
9f:09:3a:f0:e2:ee:0d:46:30:5d:bf:f5:52:40:00:
6d:22:d1:8c:17:b4:2e:d7:04:a2:db:39:53:d9:d1:
69:5d:ed:d5:36:d9:1f:e0:6f:25:09:7e:df:eb:d2:
c2:23:5e:d1:2b:d6:37:34:f4:86:83:4a:8c:85:d9:
42:c3:9f:38:55:d6:d1:e8:4c:57:44:24:29:49:e7:
29:ad:ae:7c:88:49:d4:1f:47:85:01:c3:17:e6:52:
dc:a9:ae:66:d1:9e:74:01:d2:0b:2e:84:0e:45:24:
fe:f7:cf:e2:46:a5:9f:45:a8:fa:85:cc:4f:90:16:
57:50:4d:cf:a5:9b:48:4e:18:a8:da:82:45:c3:18:
d7:61:9b:00:30:56:1b:fa:f0:a7:d8:42:86:bf:96:
65:37:d1:fc:cb:57:3e:0f:9e:52:9c:53:c8:99:5f:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:8B:DC:72:5B:C4:0C:96:BD:8E:37:A8:63:76:86:38:E4:46:DB
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:57:61:9b:e7:10:9f:9e:d8:1b:6f:57:06:c3:93:88:c4:
a8:c2:69:e9:21:cc:ec:bb:ed:70:e0:3e:6e:ba:d5:2b:76:b1:
a8:c1:00:f9:91:a7:17:47:b1:fe:a7:b0:6c:51:e7:ca:84:b1:
b3:47:6d:bc:8a:9b:2a:53:59:a8:fd:b2:92:3b:73:3d:d7:08:
5d:31:ea:e8:40:2c:57:7e:20:da:41:7a:5e:de:61:34:ef:79:
01:f0:16:ba:33:08:3d:1d:ba:bc:d0:5c:df:98:e0:3b:1f:eb:
15:13:dc:e0:f4:17:ac:30:b0:c5:96:5d:d7:5e:50:51:d6:23:
15:70:ed:55:6c:d6:c5:63:b3:f9:18:ef:53:6a:4a:4f:6f:86:
2a:c9:9c:a8:16:68:14:21:0c:01:95:d4:00:19:8e:2c:02:47:
ed:71:3c:19:d6:8d:72:8d:70:ff:2e:60:98:98:b2:e9:a5:b7:
f4:4f:ac:4f:22:0b:c3:3e:25:d4:67:4b:27:d0:b9:fc:76:8f:
7c:6b:05:e6:5b:cf:68:56:80:42:f0:93:7a:71:c5:70:66:2a:
c4:a3:f0:54:f0:57:ee:78:48:89:ec:87:5f:65:68:f3:2e:09:
e4:3d:e0:f2:ce:e6:5b:c2:cf:e4:5e:ca:84:ac:40:2a:50:22:
e0:6d:0d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:15:15 2026 by rpki-client