Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: hZPxvLgILEobhUtbfnvr+ozRp11ZBNdNJaRerwAvAj0=
Subject key identifier: 84:56:AD:1B:E8:26:3E:B6:74:90:6B:AF:29:E9:7A:BA:B2:68:6B:51
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019DCE630976B66315E2A8A560C4FB8A5C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 10:01:29 +0000
Manifest this update: Mon 27 Apr 2026 10:01:29 +0000
Manifest next update: Tue 28 Apr 2026 10:01:29 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: j70WotnlUbo9lxRWSA+GMNZEySoITThSxXGgQZUOPbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:09:76:b6:63:15:e2:a8:a5:60:c4:fb:8a:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Apr 27 10:01:29 2026 GMT
Not After : Apr 28 10:01:29 2026 GMT
Subject: CN=8456ad1be8263eb674906baf29e97abab2686b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:0a:23:21:9a:3c:f1:c4:f5:2a:46:93:16:
26:23:8c:2f:77:bf:d2:b4:50:2f:76:f8:3b:ac:cb:
ad:93:af:c8:06:b1:0a:0e:77:ed:6c:33:a6:38:c9:
ae:3d:0d:e1:45:ec:23:64:0b:cd:cf:8c:ec:7c:2f:
d0:00:ad:45:04:71:95:0a:b2:7b:bf:d6:89:9f:2e:
41:74:09:6e:e6:3a:ad:7d:42:ef:97:fb:68:fb:03:
a1:a6:cc:1c:6c:b0:80:5f:7d:6b:32:e1:7a:bb:6b:
01:61:28:eb:e5:a0:78:fb:a7:08:f6:0d:e2:57:99:
90:c0:39:96:2a:87:de:c0:b0:3e:e6:c8:05:f6:0c:
7f:39:13:c9:7e:9e:30:5e:9a:bc:f8:b3:a2:8d:fe:
6b:12:7e:4b:cf:2a:0d:36:77:d2:2a:f5:2a:11:83:
7b:75:00:57:82:2b:2c:b3:2f:19:7b:1e:f2:c7:56:
ed:c2:8e:ae:54:86:04:2e:40:7f:49:7b:5f:39:b7:
5d:92:fd:98:48:50:e5:87:30:b6:2a:33:bf:e5:f9:
fb:0d:a1:0e:fe:4f:d7:f4:e3:f5:77:d7:7c:34:50:
bd:0d:c3:17:33:a8:5f:5c:71:1c:c0:b6:2a:ea:1f:
89:69:06:c2:d1:ec:5c:16:73:40:3e:c4:77:c5:04:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:AD:1B:E8:26:3E:B6:74:90:6B:AF:29:E9:7A:BA:B2:68:6B:51
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1a:92:70:80:f0:ce:e9:38:6c:29:55:a4:90:4d:88:c3:31:
27:2f:14:19:47:f5:28:50:42:96:20:51:c6:e7:1b:37:28:2a:
ae:80:de:cc:bb:b3:9f:ae:74:8a:29:e6:bf:77:d0:16:e9:1a:
ae:9d:4e:2f:0c:a1:67:c2:68:47:7c:58:a4:aa:3c:62:6d:0c:
1b:53:bd:3a:20:6c:64:6c:ff:eb:8b:88:43:54:21:71:99:0e:
f6:4a:22:fa:62:6f:a7:cc:57:96:9e:34:55:70:96:82:6d:6b:
d1:d8:02:22:f2:29:a0:de:da:0e:28:ee:17:85:77:6c:e5:43:
6b:90:8b:a3:07:a4:81:ee:87:7d:2a:8a:3e:e6:46:8b:4c:ae:
7d:4c:7a:6a:fb:7d:3e:ea:4b:62:85:a8:d4:2f:85:3e:3a:c2:
6d:bd:ae:e6:df:38:cf:b0:89:f9:e7:39:6a:5f:65:be:2e:21:
2a:10:6a:4f:74:fe:61:71:af:a4:04:c3:24:a9:c4:ef:34:75:
cc:36:e0:d4:25:2b:08:79:1f:b8:b1:b6:f4:3c:0b:4e:e3:3b:
6f:f1:48:a3:41:17:5c:ff:03:ab:8b:36:81:a6:3a:fc:8f:89:
1f:77:15:31:8c:0a:e1:4c:a8:2b:69:ab:03:cb:40:cb:84:d5:
0b:1f:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:39:59 2026 by rpki-client