Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: jpS6qVTl48o9IA+4tu530gAr5U/0Rjs67bzbQWhR8J8=
Subject key identifier: 92:6E:20:CE:B2:C4:A5:C0:B3:91:AB:93:D8:DD:C6:4A:D9:A2:3E:ED
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019DCF7585FE1FC5890A9FEDAF402D6E4873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 18EA
Signing time: Mon 27 Apr 2026 15:01:18 +0000
Manifest this update: Mon 27 Apr 2026 15:01:18 +0000
Manifest next update: Tue 28 Apr 2026 15:01:18 +0000
Files and hashes: 1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: olLxdFpMtXE2QwWKgYAQBNRspp36KolDS3GDBjznwvk=)
4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=)
7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=)
8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:85:fe:1f:c5:89:0a:9f:ed:af:40:2d:6e:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Apr 27 15:01:18 2026 GMT
Not After : Apr 28 15:01:18 2026 GMT
Subject: CN=926e20ceb2c4a5c0b391ab93d8ddc64ad9a23eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:0b:1e:58:72:3f:67:d8:96:42:b7:7f:3c:
c2:34:50:3f:1e:4f:3d:32:59:1a:54:67:3d:04:58:
84:a1:19:ec:f2:db:33:b1:e6:88:47:e6:c3:fc:98:
ff:e2:90:db:03:f0:a7:dc:8d:89:bd:f1:28:53:b2:
fe:3e:f0:fb:1b:4b:92:4e:a8:f0:08:84:f5:eb:ef:
e1:8e:9f:aa:2a:74:3c:a8:9d:71:b0:d6:e4:a9:47:
1f:27:20:1c:30:b8:2d:bc:0d:aa:15:ea:86:d3:e9:
e0:7d:d1:1e:8e:8e:0f:6a:75:40:cb:7b:83:a1:d3:
16:6c:96:76:52:f7:f8:50:0d:8d:b7:6b:a2:30:0d:
4c:85:cc:ef:fd:72:a6:7d:2a:f0:0b:0a:cc:0c:98:
20:cc:86:af:c5:75:40:1c:97:69:c8:07:38:8f:4b:
31:cc:23:27:14:34:52:03:05:bc:60:05:c9:18:dc:
f2:57:a0:55:16:1a:73:44:b4:9b:0c:f0:c4:c3:bb:
8f:80:0e:ea:ad:e8:30:07:cf:65:02:0e:55:44:35:
c4:b1:9c:48:39:ec:b1:c8:57:86:04:09:c7:38:b1:
32:79:47:25:87:8e:fa:85:c6:36:68:e3:cc:3c:44:
d6:8a:a0:f5:e0:bc:cd:28:d5:a2:4e:1b:5c:5e:82:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:20:CE:B2:C4:A5:C0:B3:91:AB:93:D8:DD:C6:4A:D9:A2:3E:ED
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a6:2a:c6:2e:a5:7f:d7:a8:ad:9d:df:f7:ad:90:82:bb:5c:
cf:a0:b6:11:c8:89:b9:b7:ca:dc:c5:2a:96:ac:b6:41:1c:6b:
5a:1d:d0:16:6c:f2:16:39:75:ed:ad:1c:ff:16:3d:96:48:03:
a2:4e:da:bd:9a:a2:3f:9c:e8:50:ae:12:60:af:b6:01:3a:65:
c5:f1:3e:99:da:17:75:65:83:18:7d:36:0e:7f:81:30:47:7d:
71:9a:59:0e:31:38:02:20:82:1a:64:57:51:78:2d:e6:35:0d:
1c:49:e4:00:75:2e:9f:bc:22:49:43:ef:39:7e:4e:6d:8f:60:
7f:bb:5c:b0:07:fb:8f:75:74:83:23:75:7c:61:2d:a4:4c:9d:
cd:4c:82:cb:92:8e:db:c4:7d:20:8f:de:79:c5:83:72:d5:a8:
93:c3:2c:c5:bd:b4:30:bf:90:e5:0b:5d:99:43:7d:14:92:67:
d8:ed:1d:49:ad:a1:c2:5a:63:a9:30:da:de:78:bc:90:63:a9:
52:05:ca:60:d4:b1:1b:04:92:57:df:e4:19:99:9f:9a:aa:59:
13:e2:00:cc:83:40:ac:25:76:e1:cf:68:88:d3:c7:5f:4b:dd:
3f:a2:af:97:b6:1a:a3:60:9f:08:53:6c:67:5a:ea:5d:99:a2:
8c:ed:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:28:28 2026 by rpki-client