Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: rcnSc9kPyYLTpIGDVviOhKtK7mP9So/oiLHMrRSeNlw=
Subject key identifier: FE:64:1E:7B:B3:9A:79:92:52:51:AE:72:16:24:C2:93:04:C1:1F:6B
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 019DCF7535A442F1A9C3DC7F56F59A92C02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 0292
Signing time: Mon 27 Apr 2026 15:00:58 +0000
Manifest this update: Mon 27 Apr 2026 15:00:58 +0000
Manifest next update: Tue 28 Apr 2026 15:00:58 +0000
Files and hashes: 1: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (hash: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8=)
2: cXM4klbaacUguvuXRN4gU4Cio9A.roa (hash: TvSKvxbQqZ/2OHUvXcP+0jqJAZh3aKDn2NH8HHVBK/A=)
3: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: EM2C06E09rwQqagtGyJCkcif1/ZJHfMxWY9G0YuVw2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:35:a4:42:f1:a9:c3:dc:7f:56:f5:9a:92:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Apr 27 15:00:58 2026 GMT
Not After : Apr 28 15:00:58 2026 GMT
Subject: CN=fe641e7bb39a79925251ae721624c29304c11f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:5f:79:bc:67:8e:61:f1:2a:55:38:ac:6d:
40:7b:1c:a2:5d:98:91:76:bb:57:c1:4e:69:be:f7:
f3:d2:46:ef:49:49:38:2d:92:45:76:27:75:02:bc:
6c:2c:04:b8:ec:62:76:d7:76:12:6c:d5:c1:7d:74:
3f:e7:3f:bf:66:f2:13:08:48:3b:e8:4d:ea:b8:c2:
87:78:e7:0e:3f:22:50:d7:db:12:81:64:74:c8:27:
02:7a:40:55:c4:e1:fb:95:79:07:62:8c:fe:69:64:
d5:f1:bb:a9:aa:d1:56:4f:19:3b:49:0e:1c:e5:4e:
e7:b1:d1:3e:32:82:56:f8:69:97:a1:c7:03:ba:b8:
3b:35:88:eb:c4:1c:af:6c:48:f1:a6:5f:d4:62:f3:
0e:46:e1:5b:68:4f:8c:86:f2:f2:6f:6b:30:18:40:
a5:11:54:46:73:cd:b4:b0:17:6a:8d:94:76:49:e0:
8b:3e:46:56:d0:79:08:29:32:1d:f1:63:cf:14:d3:
80:32:17:7b:2e:0c:b0:d6:65:2e:d9:89:9a:fb:68:
b2:3e:5e:32:6f:81:c1:fe:32:3f:31:89:00:27:dc:
63:e1:ac:b2:f7:2c:9b:6c:cb:bc:da:03:27:28:5b:
52:9d:12:23:58:32:a0:11:67:a8:76:65:ee:cf:56:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:1E:7B:B3:9A:79:92:52:51:AE:72:16:24:C2:93:04:C1:1F:6B
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cd:5e:ff:f9:33:7c:50:46:a7:1b:92:92:2d:61:ba:a1:5f:
6d:be:c6:16:63:fe:9c:d9:ba:4b:a6:c7:34:fc:c5:26:bb:a8:
f4:0b:b1:65:4d:c4:5a:01:3c:5d:47:5b:83:ae:0d:5d:d4:fe:
72:7d:e7:97:c0:f6:fc:29:16:bc:8d:08:eb:f4:a6:09:4c:39:
b0:c7:81:3f:1e:d9:8e:d6:56:49:16:59:82:df:f7:ca:1e:02:
97:6b:c3:d1:85:54:e2:1d:df:1a:66:17:f5:6b:0f:cb:aa:da:
97:c6:76:40:be:db:13:92:6a:d8:19:32:a2:37:bd:a3:cb:b3:
15:e4:e7:69:ce:18:c3:58:7b:bf:0d:71:59:d1:40:b3:48:af:
3b:da:ef:61:fb:75:7f:01:02:a1:e8:f5:80:28:b9:82:df:86:
5c:41:59:7f:7c:41:69:37:0d:7a:69:66:da:bc:07:76:d3:72:
e4:6f:7d:7b:87:79:ac:5c:76:b9:d2:f0:a2:8f:c6:f5:6a:91:
ab:45:23:0c:9e:e3:f2:b5:1b:07:90:99:9f:b6:05:ac:2e:93:
75:44:83:1a:ff:24:55:99:89:3b:5c:f8:b1:c9:f7:61:6e:0c:
71:01:4e:5b:2a:98:89:79:e0:70:4d:28:95:93:2b:e5:35:5c:
c4:1f:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:29:34 2026 by rpki-client