Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: SrpvBO15N6rJl/HZK4nMMXXd9fimN2quqz+fZQ7oCWE=
Subject key identifier: A6:0F:3B:A4:17:62:A2:94:E0:45:68:67:05:AF:4C:A9:EA:48:78:18
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 019DCD874373F6663FA66FA37E138ACC4FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 087B
Signing time: Mon 27 Apr 2026 06:01:26 +0000
Manifest this update: Mon 27 Apr 2026 06:01:26 +0000
Manifest next update: Tue 28 Apr 2026 06:01:26 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: sIDO+3F+YJLd0QSu6gvlLrSFO1yiCZFvNVCEiSFkqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:43:73:f6:66:3f:a6:6f:a3:7e:13:8a:cc:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Apr 27 06:01:26 2026 GMT
Not After : Apr 28 06:01:26 2026 GMT
Subject: CN=a60f3ba41762a294e045686705af4ca9ea487818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:de:98:14:28:6b:57:94:0b:c0:d9:64:5d:
4c:4b:72:2c:fa:b9:52:5d:a3:5d:fe:3f:ae:16:b6:
77:21:18:12:df:9d:d0:f1:eb:3d:45:e7:72:63:19:
9b:19:02:d1:53:46:7c:db:85:80:59:1d:ea:60:9e:
6c:e4:c9:3e:67:6a:a7:74:63:25:f1:d1:53:ca:05:
c3:83:23:00:c7:f7:d9:eb:ef:d0:81:79:99:fe:8d:
37:83:d5:52:99:50:b9:2a:9d:e8:3d:62:e3:7f:df:
fa:f5:db:c9:91:34:bd:59:3a:52:67:12:b8:73:63:
7b:16:87:04:de:39:8b:36:70:b9:04:38:72:ca:0f:
2f:fa:66:f2:55:5d:44:a2:3d:48:91:c5:65:96:d6:
fd:1c:3d:51:5c:97:77:9c:75:4e:d3:ed:62:2c:17:
51:d9:8f:df:25:9b:d0:43:51:95:67:61:20:0e:23:
ea:38:69:18:ce:77:67:9d:09:8f:15:2f:4a:64:d7:
98:2d:ce:d4:1f:67:30:cd:c5:b0:11:ab:9d:05:05:
0f:55:e7:44:f0:f4:c7:4c:d4:66:2c:f0:23:a4:97:
23:57:ba:2f:0c:aa:25:40:e3:45:71:6b:24:6c:5a:
75:53:a5:8b:16:ab:ef:e1:90:ee:7e:cd:9d:ca:39:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:3B:A4:17:62:A2:94:E0:45:68:67:05:AF:4C:A9:EA:48:78:18
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:4f:ac:d7:c2:bc:7b:d5:50:00:de:c0:6c:9b:d8:28:97:
15:a5:f7:76:9f:51:ce:71:94:e2:5a:61:ab:2f:3a:f1:e0:11:
d3:4a:23:34:11:52:66:da:b6:37:5b:fc:c3:9d:8f:d7:07:9b:
ad:87:26:cf:0d:1d:e5:8a:e1:09:52:58:57:7c:ca:12:32:22:
c7:5e:5f:fa:dc:d6:27:13:4f:d7:5a:8e:93:60:03:39:2b:dd:
b4:57:db:8b:cc:94:38:03:8d:20:04:3c:fb:a6:4f:23:77:37:
a0:b4:ef:08:90:a2:a7:72:bc:dc:8f:83:88:51:a7:0f:6c:dd:
8f:56:45:b1:01:e8:4c:7f:a1:c1:6c:01:a4:d3:e7:01:8c:2a:
66:0b:36:5a:f7:84:92:d9:f6:24:a7:cb:40:02:b6:67:06:ad:
d4:de:78:50:17:b6:51:df:7d:a4:c0:d0:63:f8:98:ca:0a:7d:
53:76:34:38:cc:b6:8f:5d:62:da:59:10:f4:d7:61:04:2c:e8:
cb:90:23:3d:24:73:a0:78:e6:5f:31:2f:79:13:25:25:5e:31:
6b:c0:0f:f4:a0:6f:cc:10:f6:b9:e9:53:c0:de:15:67:1c:bc:
c3:2d:ac:09:9f:c6:82:a4:53:68:0c:eb:df:0c:f5:a1:ee:7f:
ed:3e:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:30 2026 by rpki-client