
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: HVo5JpKDtIqJjEJ3KKeyTRri04rn2Bje2CRCzWS29nY=
Subject key identifier: 9E:6B:3C:EC:53:A8:86:26:D1:B7:B1:48:B9:F4:66:D6:6E:0D:7E:A0
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 019DC070ACD538DEA0CF9DBB32851C2C8759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 18DB
Signing time: Fri 24 Apr 2026 17:01:42 +0000
Manifest this update: Fri 24 Apr 2026 17:01:42 +0000
Manifest next update: Sat 25 Apr 2026 17:01:42 +0000
Files and hashes: 1: 1D6VdZ93vriFw0vJq3zsA_SVHYQ.roa (hash: wfcEJ94VdVBOXkIE/uYqWDRHCjqI3CAKjspAjKdc5FA=)
2: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=)
3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: D3l9Yy9otZdO8HkFgCAypCJiorJwF0aa3DtQ415xRgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:70:ac:d5:38:de:a0:cf:9d:bb:32:85:1c:2c:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Apr 24 17:01:42 2026 GMT
Not After : Apr 25 17:01:42 2026 GMT
Subject: CN=9e6b3cec53a88626d1b7b148b9f466d66e0d7ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:f3:22:d2:60:85:d8:ba:67:3e:05:9c:da:
6d:5f:c4:ca:e2:12:ab:3b:27:cf:45:59:de:60:57:
fc:8f:83:43:6e:06:46:3c:a5:8c:43:a0:d9:7e:f7:
ab:7f:0d:8b:57:1a:f8:f4:7c:f2:7e:e4:49:3b:ee:
b9:fb:05:65:c8:db:e4:6e:39:64:05:4d:d8:fe:f2:
8f:4f:13:b2:a0:b8:be:cc:52:31:12:bf:d9:49:48:
4a:93:7b:21:f5:f2:d0:24:6b:d1:30:ae:5e:22:4b:
cf:bd:11:2a:d9:aa:23:85:69:6b:62:ff:dd:e6:fb:
e5:ed:e0:94:8d:4c:82:02:e8:c6:c6:2f:11:1a:a9:
5b:03:9c:91:a2:7d:87:6e:66:19:89:27:20:75:16:
44:c5:c8:a5:1c:aa:71:44:c2:4d:1c:6d:94:54:95:
a8:a9:5a:56:96:e7:72:2d:3f:9c:7e:25:27:e0:a8:
31:e9:b8:a2:67:50:70:54:aa:d6:da:45:17:6f:20:
3c:d2:b4:b3:5f:d0:09:69:ef:b1:95:23:b6:17:52:
f1:a1:49:6c:54:df:6f:3e:21:dd:72:fc:4b:2e:e9:
ab:4f:f8:fb:67:dc:38:d4:6a:7f:61:ec:b5:5d:ec:
76:dc:50:14:da:e8:0d:55:fc:b1:70:9e:c1:44:a8:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:3C:EC:53:A8:86:26:D1:B7:B1:48:B9:F4:66:D6:6E:0D:7E:A0
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6b:10:3f:aa:b9:b2:e1:50:d1:06:1d:e4:34:70:82:33:eb:
3c:3b:68:2a:8c:fb:63:51:10:ec:8e:3d:26:f5:7c:aa:e6:c8:
2e:62:bb:25:04:c5:8a:66:27:e8:25:a9:b3:a2:63:e8:0b:d8:
ec:0c:17:f5:a0:6e:cd:d7:3f:07:37:d3:e4:12:87:31:95:d8:
4f:20:8e:45:35:c1:4c:03:6c:64:fa:1a:21:cb:ef:97:ec:f2:
d2:44:f3:61:8a:f7:28:38:5c:48:92:59:33:3f:f8:37:1c:8a:
db:5d:24:ac:7c:3e:ad:37:76:99:b8:fe:3e:03:db:af:f2:af:
2f:53:f5:e2:da:22:c0:c2:6c:b7:de:1d:17:03:a8:97:5c:ef:
5a:93:10:af:2b:87:f7:53:cf:28:6e:2c:c4:d0:bb:33:e3:0b:
11:a6:f1:17:e2:83:86:77:dd:c2:f1:2f:0d:23:56:a4:f3:37:
f0:9d:ec:1c:63:98:bd:26:19:22:81:9d:15:d7:3f:c2:b7:91:
67:42:19:28:31:27:eb:a8:f4:f6:d8:9e:b9:d5:42:4b:2a:fe:
23:95:1e:81:db:a0:3a:ec:38:b0:41:13:a0:bc:91:61:57:7d:
f6:a4:32:da:c5:9d:dc:1c:20:35:f6:77:2d:51:bf:b8:96:2e:
5c:80:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 00:37:07 2026 by rpki-client