Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: EixKSUDXFBnTCiy4fordccn6iiReKz/iAs2Vn3GRcc8=
Subject key identifier: 88:15:75:3D:7A:A9:1F:B5:27:23:0C:FD:B1:FD:C4:D4:F4:77:9C:3B
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019DCD4FF8E5E3A58F2F5AE9A251DBB414B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0913
Signing time: Mon 27 Apr 2026 05:01:03 +0000
Manifest this update: Mon 27 Apr 2026 05:01:03 +0000
Manifest next update: Tue 28 Apr 2026 05:01:03 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: 4Zx73Fuz7FsAzRMRv9/JS2oDVI96SoCaO3WbxwpspwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:f8:e5:e3:a5:8f:2f:5a:e9:a2:51:db:b4:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Apr 27 05:01:03 2026 GMT
Not After : Apr 28 05:01:03 2026 GMT
Subject: CN=8815753d7aa91fb527230cfdb1fdc4d4f4779c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:83:3e:98:28:e5:fb:b0:51:94:8b:62:5f:
b8:07:02:fe:1b:f9:14:f8:8e:21:3b:ba:b3:15:74:
03:41:6a:c9:02:06:4b:8f:33:3f:68:e9:b1:cc:a8:
85:9d:6e:6c:50:e0:19:3c:9d:e1:d0:9a:12:0f:69:
8a:da:6f:79:d2:01:e4:7d:df:00:ef:c0:e0:e0:c5:
11:cd:83:ba:79:02:4c:99:68:c5:e3:3a:e3:1c:0a:
00:dc:d4:a3:f9:1b:cd:25:20:56:e4:05:57:2b:72:
3d:df:b5:29:c8:37:11:7d:5d:4a:6d:6a:d0:88:9f:
38:ae:25:cf:ff:1f:80:e7:e6:00:0e:ce:8e:87:97:
2f:3d:33:90:54:5d:ee:25:9b:7a:d3:8c:7d:00:63:
dc:95:cd:cb:a2:bb:1e:54:8f:ef:dc:e3:68:f9:4c:
fa:47:e8:64:38:ec:7c:10:96:de:f5:47:f9:c9:2f:
e7:cd:ac:7f:68:a1:67:df:c8:fa:b5:63:4f:a6:cb:
e2:d6:07:7b:08:45:ab:f5:8d:75:89:ef:48:88:6d:
3d:8b:db:06:9c:46:09:93:70:fe:1e:03:25:d3:f8:
89:c6:0e:8d:6c:cb:60:6d:77:f6:a7:f2:c0:5e:2c:
82:3b:87:92:de:6b:6f:7a:72:34:26:2c:80:12:bb:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:75:3D:7A:A9:1F:B5:27:23:0C:FD:B1:FD:C4:D4:F4:77:9C:3B
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bf:71:f7:d7:da:38:f4:30:dc:ba:b1:87:56:c5:10:74:83:
c2:21:ba:57:5a:93:b5:8c:e8:04:e5:f5:06:0b:4b:65:97:29:
92:10:15:d5:9e:ca:e3:22:b2:df:f2:6d:f8:9e:b9:a9:5f:b8:
17:72:34:d7:85:05:56:45:cb:27:7a:79:db:e9:90:a7:ac:f8:
c0:84:03:5a:ad:d1:d3:53:07:86:b8:69:3f:4c:1f:d4:ee:ac:
9a:71:d5:76:51:5a:a5:70:b2:3e:7c:ba:25:6d:ec:79:7f:8b:
f9:0a:b9:e5:e6:ba:bb:76:07:57:6e:51:a9:d8:4c:1e:32:7c:
14:d7:62:95:3c:bf:b0:4b:bd:86:46:dc:24:b0:a3:6b:ad:f9:
99:8b:20:d8:be:54:64:ff:f9:16:5a:b8:a9:3f:09:33:75:11:
40:ce:bf:54:9b:ce:fb:be:f6:80:8f:38:de:ed:3c:32:d1:c8:
5e:c9:dc:f0:e8:c8:63:96:d7:be:c2:3f:7a:31:b9:da:8e:cb:
c6:e0:e7:0b:61:13:e0:9a:d3:0c:2b:6e:6d:41:f6:55:5a:9d:
f6:05:23:7d:e4:db:35:dc:2b:7e:35:c2:53:bd:24:8d:d1:1e:
98:ae:1f:68:01:39:e9:a8:5a:3f:bc:a8:9b:10:63:48:e7:22:
fb:a9:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:02:14 2026 by rpki-client