Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: vlPbE3xLY/Fn+GojneCGQPmF1D6ySaMMXcwgVJeHF/4=
Subject key identifier: C6:DB:EC:ED:A6:B9:5C:3F:43:97:C6:DB:5C:40:9D:43:C5:F9:C9:1B
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019DD163B77B1410AFAE489782387A46AD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 18E7
Signing time: Tue 28 Apr 2026 00:01:06 +0000
Manifest this update: Tue 28 Apr 2026 00:01:06 +0000
Manifest next update: Wed 29 Apr 2026 00:01:06 +0000
Files and hashes: 1: 1-gPKYrkboHkA5jyn7VCFjqwwrd4.roa (hash: kidu4lOLKqvGV02gy25d0uI1CUme+b+dZBhX/K3RSeg=)
2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: WlRKErBLXskGhhSgv7ErX6Y7ESmKOIAuNvmPUHBXmkY=)
3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:b7:7b:14:10:af:ae:48:97:82:38:7a:46:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Apr 28 00:01:06 2026 GMT
Not After : Apr 29 00:01:06 2026 GMT
Subject: CN=c6dbeceda6b95c3f4397c6db5c409d43c5f9c91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:97:61:74:46:ab:49:27:61:bb:cb:10:85:
c4:c2:1e:d3:c8:08:bc:a5:cc:c7:d9:c2:8d:c0:6c:
56:8f:d7:ac:f7:40:16:f1:8c:57:33:23:ff:f1:c5:
a4:e5:f4:9e:b1:4e:7b:22:bb:7b:5b:2a:5a:e7:e5:
b8:d6:b5:35:f0:97:1e:41:24:d8:0a:38:82:0e:b1:
d3:e1:b6:b5:68:d9:99:97:83:25:3e:e9:cc:24:be:
b4:8f:33:93:80:f3:c7:e3:4c:32:7a:b0:d4:15:af:
c0:fe:5c:0e:b8:ce:28:ac:b4:d3:0d:aa:6a:bc:60:
92:11:bb:7a:bf:2b:b9:71:93:9b:37:1d:e7:2f:fa:
69:88:13:27:63:cd:fa:d9:16:97:36:de:51:55:3f:
89:56:d8:68:5f:50:c6:09:63:64:0d:1b:fd:d4:e9:
89:cb:24:d7:ac:a5:ee:e7:1a:b5:e7:c5:a7:70:68:
9d:eb:39:12:55:95:4c:80:25:d9:8b:0d:a2:db:9e:
e3:60:66:71:8a:13:b5:25:16:32:c4:55:c1:a2:c3:
27:c9:58:a4:66:ff:bd:ae:77:d7:84:3a:92:09:15:
81:db:40:ab:0b:01:52:5d:d4:68:b0:aa:d0:17:6b:
b6:8f:9f:63:89:b5:30:10:1e:10:d1:02:fe:e0:8e:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:EC:ED:A6:B9:5C:3F:43:97:C6:DB:5C:40:9D:43:C5:F9:C9:1B
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e9:b7:c0:4d:12:6e:f9:7a:a3:08:9f:ea:66:36:d2:e7:94:
8c:37:96:69:d9:60:d9:68:e0:93:11:39:0d:89:0b:a8:f6:e0:
fb:86:4f:80:8b:fb:75:8b:6a:45:3f:6b:cf:41:b1:15:8e:a2:
9b:f6:56:b2:6e:8a:9c:48:f0:7f:aa:7c:53:8c:46:7c:78:b1:
ff:c0:c7:a7:e3:8f:61:24:86:ec:3d:4f:b5:67:d0:17:5f:31:
c0:4e:fb:da:4e:99:a3:cc:3f:72:88:95:4c:c3:ac:06:dc:63:
c9:85:7c:c0:c4:73:9c:ff:04:25:81:9f:45:8a:00:54:4b:c5:
27:6c:02:bb:58:11:ad:33:72:b7:e6:df:af:01:c2:49:a9:08:
af:7a:72:36:c7:52:c0:00:64:30:23:2d:3d:46:f2:de:9d:96:
e6:df:19:bb:09:c0:b7:85:16:3c:4a:5d:a8:55:c8:25:61:a4:
4a:5e:ac:fd:79:a6:0f:aa:ed:55:a8:e3:d8:61:71:ad:93:cd:
c3:b8:7f:29:2d:12:9c:ba:23:50:3a:49:f2:cc:fd:f4:00:cd:
f7:5b:a7:91:42:95:b2:1b:8e:3b:f0:04:df:51:45:90:0b:e9:
98:31:28:a8:14:3c:78:bd:5c:2e:79:2c:69:33:71:a9:e8:db:
4c:19:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:34 2026 by rpki-client