Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: DzzLKUfTcXTy5BPHGNTlWJGJFQWMlCiRTtC6j4lirok=
Subject key identifier: 37:4B:CE:81:6E:81:1A:02:C2:16:05:5B:D6:3A:12:1F:4F:F1:2E:4D
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 019DD765B852615F41EEFCA536177CFE74C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0A54
Signing time: Wed 29 Apr 2026 04:01:00 +0000
Manifest this update: Wed 29 Apr 2026 04:01:00 +0000
Manifest next update: Thu 30 Apr 2026 04:01:00 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: oG2YkOirxjsvK5cw7KtZTzdf8flW9HbGFfwmlrQVDm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:65:b8:52:61:5f:41:ee:fc:a5:36:17:7c:fe:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Apr 29 04:01:00 2026 GMT
Not After : Apr 30 04:01:00 2026 GMT
Subject: CN=374bce816e811a02c216055bd63a121f4ff12e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:a4:23:68:99:40:76:0f:60:33:c3:8d:ea:
74:7b:af:18:56:46:f4:83:84:66:71:67:5d:e2:0e:
c1:a7:78:b6:12:0e:fc:c4:e6:17:a5:37:8d:83:b2:
1d:af:bd:8e:f6:47:2c:c1:51:42:3d:49:9f:d6:fc:
1f:2a:f4:2d:d3:ea:e9:91:53:c4:a5:84:9e:de:79:
62:09:5c:5d:64:95:e6:d2:10:57:53:3a:0c:dc:80:
bb:1f:d7:45:3b:d6:1a:db:e0:b8:fe:58:a2:de:a9:
9b:56:e5:e0:a9:7c:4d:eb:42:f5:f2:64:eb:59:4f:
aa:03:1d:84:e9:d1:9f:56:b8:2d:c8:93:e2:3f:44:
83:99:df:f1:51:9a:3d:c3:ea:b3:89:c6:2a:6d:b5:
08:68:db:5c:4f:03:0a:91:5c:84:93:b4:ac:b9:52:
62:54:5f:96:1e:e8:02:d8:9b:23:6c:6f:8d:06:9e:
5f:3f:9b:3a:23:f3:05:3f:5a:2a:a6:b0:41:12:80:
4c:52:f7:1a:13:60:ca:fe:a8:2b:51:46:b5:1e:d2:
21:35:d8:63:6a:13:aa:ff:11:c2:40:5d:f0:f3:12:
a2:63:99:79:7a:88:cc:d1:cc:2a:89:8d:23:96:86:
19:9e:fc:da:50:e7:f6:4e:d3:eb:03:cb:f3:79:80:
9a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:CE:81:6E:81:1A:02:C2:16:05:5B:D6:3A:12:1F:4F:F1:2E:4D
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:60:a3:18:d9:ec:f9:88:d2:c1:cb:a3:c6:ce:31:ef:b0:88:
78:d6:65:7b:cf:a4:ab:c6:b4:bb:62:c2:74:3c:0c:9a:c8:a2:
17:bb:0e:5a:dd:3c:ee:05:45:40:f8:c2:0f:17:30:b6:71:96:
3d:d0:a6:28:ff:b4:fe:ba:88:14:0e:cf:f2:92:32:6f:c3:ba:
63:de:2e:41:08:f1:ef:c8:21:da:f7:77:c4:87:24:ef:4a:27:
ef:b5:fa:61:e5:ca:cd:98:49:d2:32:52:f1:19:b4:78:a1:96:
e7:99:b0:d6:17:e2:09:12:31:dd:c0:84:44:37:4d:89:32:e9:
fa:9c:57:0a:9b:9e:a1:8c:cb:1f:e5:6b:c5:f5:ca:1a:8c:b8:
60:b5:4b:cf:a5:02:77:00:62:87:f1:36:0b:96:f3:f1:21:67:
2b:5e:7a:69:71:21:4f:9a:f9:ac:a9:16:df:a2:d1:d3:57:ee:
b4:07:54:d9:61:20:80:f3:cb:c0:bb:0e:7b:bc:5f:3f:08:7e:
23:70:23:70:16:02:e7:86:06:df:5b:d4:2c:a1:96:97:dc:1f:
f3:b0:57:4e:ea:2d:4a:56:32:c1:1a:40:60:31:a6:3d:e6:55:
ad:af:98:44:1d:16:9b:1f:4a:1e:ba:18:c6:68:4b:18:dc:27:
e4:c1:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 09:04:06 2026 by rpki-client