Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: x6IsQrYQcj5kLINYL1mzp87+s1gzXrKWHtpkFKffKQs=
Subject key identifier: 03:49:4E:C2:A2:EA:CC:C5:9F:86:74:5C:DB:C7:FB:B9:49:89:A6:CB
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019DDC556EEC4A9B56E275128B274D534CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 18F1
Signing time: Thu 30 Apr 2026 03:01:19 +0000
Manifest this update: Thu 30 Apr 2026 03:01:19 +0000
Manifest next update: Fri 01 May 2026 03:01:19 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: 3RVcIb5WQhZ8R166u3FsRBbfRPEc7T9+BVxFTAcXTc4=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:6e:ec:4a:9b:56:e2:75:12:8b:27:4d:53:4c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Apr 30 03:01:19 2026 GMT
Not After : May 1 03:01:19 2026 GMT
Subject: CN=03494ec2a2eaccc59f86745cdbc7fbb94989a6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:d6:fb:aa:a0:e0:0d:43:69:16:a7:37:2b:
77:e4:80:99:f1:37:10:de:50:be:3d:b9:e4:93:eb:
78:86:9e:3d:64:90:37:05:86:2f:f1:d1:36:0b:b4:
72:d4:97:33:eb:f6:1d:40:21:1c:84:4c:63:80:96:
9b:51:e4:11:49:66:e5:d7:37:36:a1:67:2f:dd:bc:
5c:de:23:52:d6:29:ba:ae:bb:ee:4a:a8:d6:72:f9:
5f:41:43:ec:6f:e7:82:25:5b:96:1a:96:d3:5e:34:
d6:10:de:33:a8:0b:66:05:23:c3:3f:5f:4d:64:e0:
4e:16:12:53:fb:b8:8c:a0:3a:30:28:c2:f5:51:b4:
3b:8b:e0:74:7d:83:7e:42:04:b6:8e:37:04:84:0a:
99:e0:06:8d:4b:67:33:1f:3e:78:8e:5e:b3:b5:03:
ad:db:79:90:47:c1:eb:bc:9c:61:8e:61:4c:5e:af:
6f:07:12:a5:46:43:a8:23:9e:33:29:96:1f:b4:ce:
46:e9:18:d6:49:09:66:21:fa:c0:18:9a:6b:67:c2:
68:92:0c:4a:4f:aa:31:9f:c6:5b:1f:60:d2:81:a8:
f9:fa:83:12:8b:01:1a:7b:13:7a:0f:b4:59:33:94:
0b:05:35:90:8a:77:5f:9f:b8:99:a5:9a:b9:b8:98:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:4E:C2:A2:EA:CC:C5:9F:86:74:5C:DB:C7:FB:B9:49:89:A6:CB
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a7:b0:e5:c6:69:80:14:6e:9a:d8:14:55:73:5b:ee:96:c2:
13:a4:90:88:07:0d:46:1b:ea:51:a8:df:52:b3:d6:ed:63:5b:
c0:cb:c4:4b:32:fa:5d:b9:39:52:8c:89:0b:8f:94:ca:0a:54:
38:cb:b9:9b:b2:3c:63:d9:44:e9:06:6f:7f:5f:5c:9e:2f:01:
9d:68:4c:b2:ba:fb:59:e1:d5:99:86:75:a4:10:5b:01:57:79:
c3:76:c0:7f:24:c7:5d:0d:61:4b:86:2c:25:86:96:58:01:5d:
f3:cc:df:97:cd:f0:ae:51:d4:7f:fe:dc:d9:87:90:fa:8f:f8:
b4:63:9e:3c:39:9d:66:96:b5:44:77:c2:ed:09:dc:65:5f:c4:
d0:36:4b:04:cf:37:de:34:ba:ef:21:99:59:a4:90:d1:93:5f:
c4:1e:df:ed:13:2c:fb:87:ee:e1:6a:37:74:e7:95:30:dc:bd:
69:67:e1:cd:65:5c:56:55:76:1b:6a:5e:4f:94:29:20:4e:1b:
4c:b1:40:8b:43:35:ab:88:8b:a2:cd:8d:bf:bd:89:cc:55:f7:
1f:24:0a:d7:b0:b8:d0:4f:50:f1:8b:c0:c5:74:8d:5c:25:3c:
f2:bd:44:e7:8f:11:de:76:fd:fa:58:5d:b6:94:76:ce:91:96:
7b:db:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:38 2026 by rpki-client