Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: hvkwQQvdHcbGZ0VfoJKcF/G5r5LAZhg8IQ/5ByfBuYw=
Subject key identifier: 46:DC:36:2D:8A:7C:71:F8:9A:77:AE:28:89:E1:CF:CD:86:3C:76:CE
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019DA942EB2BC1B2377BCEBEE0F1AE05C0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 18CC
Signing time: Mon 20 Apr 2026 05:00:28 +0000
Manifest this update: Mon 20 Apr 2026 05:00:28 +0000
Manifest next update: Tue 21 Apr 2026 05:00:28 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: 2w/nYp4vgSK7D00fGAXQK9oFOY0cSMaDBFNFX9G50Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:42:eb:2b:c1:b2:37:7b:ce:be:e0:f1:ae:05:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Apr 20 05:00:28 2026 GMT
Not After : Apr 21 05:00:28 2026 GMT
Subject: CN=46dc362d8a7c71f89a77ae2889e1cfcd863c76ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:50:fd:fe:5e:b3:2e:01:7f:aa:c5:09:65:
43:d1:26:0d:2a:cc:00:82:1b:61:72:cd:88:7e:76:
e0:d7:93:a3:ff:87:9b:5a:eb:99:39:99:a2:1b:e2:
91:4b:31:11:14:dd:17:05:3b:ff:3b:db:3a:42:dc:
c6:1b:7a:9f:57:dc:a1:13:02:40:80:7c:92:e5:a6:
a1:a3:d6:3f:1b:16:95:a4:97:44:b2:44:4f:93:68:
f2:45:2a:1a:fe:c5:b8:96:7c:71:b9:9b:58:c3:13:
9e:7c:f6:50:ec:b8:8c:e0:70:33:eb:12:a7:2f:70:
27:68:74:e1:0b:66:e3:07:5f:75:38:19:de:c1:c3:
b3:c6:41:e0:e0:54:66:fe:6d:cd:f1:b2:24:dc:c6:
ae:04:9f:17:5e:9c:7e:2f:30:c6:2b:67:ca:d5:c9:
d9:06:99:ad:82:5b:01:a6:3b:30:b3:2e:59:1f:cf:
7f:a6:18:2b:40:a3:bd:0b:56:c6:25:1d:7a:80:de:
30:d1:e8:9d:7c:3a:ee:51:73:09:ad:6e:b7:87:56:
91:38:c0:45:09:b9:5e:5a:8c:9f:51:64:08:4a:f2:
8b:fc:fb:d1:40:b7:b6:5f:39:58:64:06:eb:15:41:
1f:f1:cd:99:14:f4:88:24:7f:29:53:df:ce:39:df:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:36:2D:8A:7C:71:F8:9A:77:AE:28:89:E1:CF:CD:86:3C:76:CE
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4b:37:c1:12:34:e8:3b:b0:02:2d:88:6d:da:b8:ed:27:af:
d1:5e:47:12:59:62:0a:8d:e7:9b:49:41:20:0a:c9:cd:88:fc:
42:c4:28:da:82:92:3f:f8:46:f3:14:91:60:39:6c:96:0a:17:
01:bf:d9:cf:45:83:e1:2b:f8:7f:f3:14:fd:ce:36:31:32:e4:
be:59:63:78:ce:c7:8d:b8:ac:8b:e4:91:f6:4a:70:4e:f6:03:
14:91:c3:1c:20:28:e8:46:45:a0:88:1f:27:6b:5b:c9:ae:25:
a5:bd:de:f0:cb:ad:b1:96:e7:f1:c7:6f:23:20:29:71:8e:24:
fd:d8:a6:d6:18:02:65:4a:57:e9:ab:af:db:a4:d1:3f:7e:c4:
53:df:0a:43:86:77:26:ba:f1:0f:1f:67:9e:3f:4c:93:d0:d2:
50:9a:56:63:65:83:b2:51:63:78:f6:ff:32:67:2d:13:4e:e2:
3a:41:ed:c0:64:02:80:4b:04:9f:1e:71:28:2a:8b:51:77:76:
30:0e:76:6e:ee:43:59:0c:a2:03:3d:63:96:37:70:aa:50:8d:
1d:47:8c:ce:0c:53:ff:d8:01:2a:e7:1c:bc:45:e0:71:32:38:
83:d1:90:e8:2a:e4:00:39:f7:af:f7:1b:de:91:14:72:06:51:
53:8f:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:33:04 2026 by rpki-client