Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: w3g+VRzvRGJaHmYcy5uXKldgI+vGflZ6iSXV20EcjjI=
Subject key identifier: 8C:DC:44:80:13:59:65:A3:74:E5:99:E2:24:5D:B1:19:AF:1D:A5:18
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019DCD5006D5C6878E4A449A153056D8C3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: 22
Signing time: Mon 27 Apr 2026 05:01:07 +0000
Manifest this update: Mon 27 Apr 2026 05:01:07 +0000
Manifest next update: Tue 28 Apr 2026 05:01:07 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: EFwWp/MY6IkWAi+M1KS25qeFhYoZ2eBAs4WkmOVfY6A=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:06:d5:c6:87:8e:4a:44:9a:15:30:56:d8:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Apr 27 05:01:07 2026 GMT
Not After : Apr 28 05:01:07 2026 GMT
Subject: CN=8cdc4480135965a374e599e2245db119af1da518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:c9:b2:2d:73:3b:dd:89:7b:77:1d:d9:76:
53:f6:19:ad:04:17:29:16:c5:12:c6:3c:80:57:77:
1f:33:41:db:bc:42:46:fb:f3:82:4d:97:e5:9b:b6:
c6:95:82:f9:72:ea:4c:c8:77:3c:c0:b8:e0:5c:1a:
fb:ed:93:fa:38:fc:4c:8e:e3:53:0b:04:03:c0:43:
78:31:b6:19:92:dc:8c:b7:1d:14:1a:1c:19:63:61:
de:f5:e9:c1:05:34:4f:34:cf:00:51:92:74:ff:99:
c7:74:ae:c3:fb:82:d7:72:fd:59:a0:f7:70:6f:be:
24:dd:b6:fb:e1:ce:39:13:b0:f5:ac:b3:91:29:8c:
29:4e:e0:08:66:92:a9:ee:d2:eb:20:14:a8:d8:4d:
02:e5:19:72:cb:74:28:23:c2:b0:b4:07:32:e8:fc:
10:cb:4b:14:2d:82:74:d4:8c:29:b3:23:85:34:e2:
01:44:56:ee:16:aa:37:15:24:d6:a1:d6:16:0b:d9:
72:f7:eb:7c:2d:ae:f6:05:f0:6b:81:07:53:cb:d6:
4c:4d:69:02:b0:9a:d4:5b:9d:74:87:81:28:69:e1:
4a:cd:0c:7d:e9:44:cc:c6:cc:e0:2f:03:46:31:cd:
0d:c3:09:db:79:a6:ac:09:f7:6e:ef:29:62:c1:7d:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DC:44:80:13:59:65:A3:74:E5:99:E2:24:5D:B1:19:AF:1D:A5:18
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:04:df:2b:01:20:ed:94:e0:ce:ee:4d:c3:f4:a9:46:50:69:
96:1a:aa:4a:62:6d:47:fe:10:15:a9:75:1b:71:72:8f:14:7f:
c7:bc:ea:bf:af:c9:bf:43:06:31:1c:e0:a4:78:05:18:49:a9:
8c:83:1b:46:fe:09:fa:29:c0:df:d7:a9:59:d7:9d:eb:2a:e8:
b4:2a:36:42:18:32:52:b5:4e:ab:b8:7b:49:5f:5e:ab:0d:f5:
2c:94:ce:83:43:9e:54:12:5b:24:af:92:cb:4b:bc:98:e8:3c:
36:aa:0d:ba:75:bd:88:dc:9e:7a:e9:cb:3b:6d:30:42:d0:35:
e7:56:f4:44:a9:78:04:43:9f:41:f2:aa:44:48:c5:b6:69:4a:
8c:33:63:48:4c:1b:ad:7c:cb:8c:cb:f7:41:da:65:95:74:70:
09:0d:1c:5f:0f:e2:f5:82:fa:8b:b8:52:96:b8:04:7e:44:c9:
33:f9:aa:8f:12:a0:59:34:cf:91:0f:95:89:f1:2f:e3:b5:b8:
ab:d4:cf:e6:52:56:23:30:f0:b6:25:72:b8:b7:3d:1a:ba:10:
de:3a:8e:10:0a:2a:75:52:84:92:90:11:77:f5:bf:f1:55:ef:
2c:3b:03:d5:4d:98:38:8e:f1:a7:12:18:0f:47:35:7f:22:ac:
c7:24:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:08:28 2026 by rpki-client