
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier: 4wiEeyF/Ud6tkQ9ROokoUWC58A8GxYAVP9j6HY717XU=
Subject key identifier: 75:26:67:13:A9:F4:41:70:CA:98:DD:14:34:EB:2C:10:94:0E:7C:A5
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer: /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial: 019DA78C394FF7E690FE6FD8901CAE2199C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number: 7A
Signing time: Sun 19 Apr 2026 21:01:17 +0000
Manifest this update: Sun 19 Apr 2026 21:01:17 +0000
Manifest next update: Mon 20 Apr 2026 21:01:17 +0000
Files and hashes: 1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: GKemxMo5852Rs3PwIdvH71XXNiIEmz28J1g4p3UgP2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:8c:39:4f:f7:e6:90:fe:6f:d8:90:1c:ae:21:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Validity
Not Before: Apr 19 21:01:17 2026 GMT
Not After : Apr 20 21:01:17 2026 GMT
Subject: CN=75266713a9f44170ca98dd1434eb2c10940e7ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:e3:12:81:c1:e1:7e:fb:56:da:0a:40:8c:
96:12:45:5c:b3:4e:51:dd:be:be:fa:80:82:02:3f:
74:eb:e9:de:25:6a:ad:0e:48:a9:9b:31:c7:62:8d:
8a:b3:a5:c1:61:c9:0f:7d:7f:e8:69:56:99:b2:7e:
12:07:47:33:cb:72:a7:8e:9b:04:d0:f1:66:7c:74:
57:82:8c:7c:39:dd:dc:08:fe:1a:50:b1:04:2c:c7:
d9:51:89:d4:2b:22:82:64:90:14:94:91:00:1e:97:
42:70:f4:59:e1:17:fd:6d:95:49:eb:b3:c4:fe:c4:
52:e1:29:e1:55:37:c7:06:ca:02:74:26:63:98:99:
74:2e:cb:69:27:38:68:aa:b0:d3:85:f9:6c:41:82:
bd:a6:14:6c:76:b0:dd:08:26:24:75:ad:ab:62:76:
46:81:a5:df:43:a1:e1:31:48:de:81:72:1e:9f:91:
0c:c7:d3:6e:04:b0:72:0d:b1:d1:c3:fe:ef:a2:c4:
d8:2d:a1:17:7a:fb:1c:ab:6d:a8:11:09:6e:a8:91:
cd:5a:1b:a7:94:95:bb:a1:be:42:76:39:fc:ec:85:
f2:90:bb:24:e2:dd:37:82:b9:d6:85:31:9e:10:f2:
bd:8e:11:9d:50:de:af:34:5c:27:ee:17:eb:89:d8:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:67:13:A9:F4:41:70:CA:98:DD:14:34:EB:2C:10:94:0E:7C:A5
X509v3 Authority Key Identifier:
keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:f7:ee:1b:87:b7:c7:35:cb:9f:29:35:58:64:19:a6:17:
62:8a:91:28:f1:5c:f2:0e:de:e6:04:a3:ad:2f:66:c3:19:be:
a4:60:27:1b:b7:53:be:a1:33:90:6c:b6:c5:55:87:ee:85:a8:
eb:2c:26:51:6f:af:0d:98:9b:68:63:e7:87:bb:8b:1b:f9:47:
4e:2e:b8:0d:a1:af:cd:e9:8f:fc:e3:1e:53:45:a3:1b:c6:b4:
1d:5f:4f:b4:ba:ab:3e:11:b4:eb:59:a7:ce:66:8a:fb:d4:08:
0e:6c:ca:8b:c4:5e:f9:d5:26:94:c5:f7:49:b9:e7:b3:e5:b6:
d8:15:93:84:d7:61:b2:79:71:a5:33:de:f1:cf:6e:15:88:03:
53:4e:4d:fe:bb:86:5d:30:84:7b:97:42:dc:af:20:f1:c9:82:
9c:88:cc:ca:7f:f2:08:f6:f6:bd:0d:c0:e7:fb:c1:ee:84:6b:
b0:48:eb:b2:ad:1d:17:12:a3:e8:82:57:30:ab:f6:90:e9:a0:
d0:d9:41:18:cc:17:4d:e4:73:a1:85:03:38:30:3b:68:8e:ca:
be:f3:96:b5:d6:a1:a2:53:13:ba:88:e4:ba:c5:44:6f:ba:cb:
4e:08:1b:3b:7a:0e:58:e0:d9:83:6f:86:18:c1:8c:a0:0c:b7:
20:c9:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:35:21 2026 by rpki-client