Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: A5pxTNp/Ir0stdM5qkr32bbiKI4rCRa6jamMefZDFS4=
Subject key identifier: D1:92:5D:FD:5C:D6:D1:CB:AB:95:6A:BB:5E:10:03:5A:21:1E:49:13
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019DD01A0ED4E13C26CF10F7AD2C8C08F9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0825
Signing time: Mon 27 Apr 2026 18:01:01 +0000
Manifest this update: Mon 27 Apr 2026 18:01:01 +0000
Manifest next update: Tue 28 Apr 2026 18:01:01 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: qVU2W/xF9oiyoyRUfM+35FPlX25eZ1QVpUCCTGGRvGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:0e:d4:e1:3c:26:cf:10:f7:ad:2c:8c:08:f9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Apr 27 18:01:01 2026 GMT
Not After : Apr 28 18:01:01 2026 GMT
Subject: CN=d1925dfd5cd6d1cbab956abb5e10035a211e4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:39:f9:8f:99:0f:42:2e:c8:34:20:df:e5:
08:37:08:6c:f0:3a:34:fe:f0:ba:f9:e1:c6:a1:c9:
9f:14:7c:00:57:ee:b3:d0:a2:0a:51:52:80:ea:10:
f5:6d:c4:3f:e4:ba:51:58:a7:60:01:0c:63:3c:91:
83:ff:38:37:f6:b1:14:f3:51:22:69:86:09:54:2f:
c0:89:9d:1d:37:82:5e:2d:45:b7:36:f5:3a:8e:67:
ad:84:21:74:8e:aa:2d:d8:ed:05:d7:01:c1:7b:00:
b8:83:a8:a2:82:77:0b:74:95:41:db:ca:5e:3c:28:
93:ee:d7:24:4f:63:06:f6:49:9d:da:6a:83:94:a1:
e2:fc:7b:b9:d0:c7:25:d2:5f:8b:ca:e1:3e:b0:92:
64:6f:50:52:54:08:75:40:32:ac:61:ce:f4:aa:b2:
12:79:69:c3:8b:1a:43:ae:f2:b4:5b:b7:45:27:18:
f9:42:45:2f:0c:23:e6:40:4b:9a:84:df:38:ca:83:
a5:dc:8e:89:3c:10:27:4d:59:67:76:d9:4c:dd:fe:
54:76:32:70:77:3d:f8:90:29:d0:ce:e5:1a:98:88:
b4:bb:df:04:b5:f1:cf:6d:49:a9:16:23:c9:23:3c:
ed:8e:1d:cb:53:7a:8b:f5:6a:bc:58:76:b4:e8:1b:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:5D:FD:5C:D6:D1:CB:AB:95:6A:BB:5E:10:03:5A:21:1E:49:13
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:fc:0a:fb:16:4a:b7:2c:ad:da:75:2d:e0:57:2f:64:84:
16:fb:b2:01:7d:b1:08:2a:21:73:fb:ba:fb:63:5d:0c:d1:1a:
75:bb:54:55:a3:d1:c5:3d:bd:92:05:5f:3d:26:95:a7:46:65:
74:a8:47:d9:89:12:c1:ad:42:84:76:be:9f:31:6d:d6:4b:7e:
dd:78:c5:1f:c0:41:ae:0b:47:fc:50:9d:45:57:2e:c6:19:79:
8e:99:26:b5:36:e6:99:cf:54:64:70:a4:e9:73:02:89:67:5d:
f0:98:d5:a6:c6:7a:b5:b3:2d:8c:65:74:8d:df:2b:eb:76:b2:
e9:02:f0:3c:79:b4:29:28:29:ba:ce:74:83:aa:06:0f:43:35:
7a:93:28:61:f3:58:ba:83:43:5b:35:b9:7c:00:9c:09:f7:2e:
91:b5:3b:93:20:48:c1:3f:8e:b9:98:95:29:c8:0a:d4:5e:85:
7a:c0:8d:d6:3c:98:e3:e4:06:d2:62:db:41:6e:c6:4a:28:58:
e3:33:40:98:9b:df:6a:40:80:9c:0a:c4:5a:cc:23:37:a1:74:
66:90:3a:d7:66:ce:c0:7a:d6:b1:16:cf:30:8e:62:db:ed:aa:
5c:cf:cc:40:06:56:a9:f6:2b:22:26:33:37:53:77:51:15:9e:
f7:2d:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:48:12 2026 by rpki-client