Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier: zUI6AQ0PO7it2Z6ysYbLO9+tAgmF356xeL0pafxTz8U=
Subject key identifier: 0B:49:55:2D:09:56:53:34:35:33:78:72:87:19:89:CF:92:43:6C:42
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer: /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial: 019DA97A2196DADD13F3D9ACF860AEE360E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number: 7B
Signing time: Mon 20 Apr 2026 06:00:46 +0000
Manifest this update: Mon 20 Apr 2026 06:00:46 +0000
Manifest next update: Tue 21 Apr 2026 06:00:46 +0000
Files and hashes: 1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: He8wWSqqqeMvhWT2xPmKOTgTqNwpTpskY8pbOmSIqxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:7a:21:96:da:dd:13:f3:d9:ac:f8:60:ae:e3:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Validity
Not Before: Apr 20 06:00:46 2026 GMT
Not After : Apr 21 06:00:46 2026 GMT
Subject: CN=0b49552d0956533435337872871989cf92436c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:f5:f7:3e:3e:78:78:53:a1:a8:1a:8e:d7:
ed:cc:99:90:e3:89:6a:40:33:24:54:49:0f:d8:f9:
2d:3e:ab:75:8e:fd:82:11:9e:23:9e:d7:31:fe:e5:
d6:2f:5f:2b:d1:05:ae:68:34:4b:bd:43:fc:87:5f:
63:fa:22:ed:08:e1:16:fb:65:5e:1c:c1:f4:d8:67:
43:0c:b3:36:38:0d:48:f4:fa:d9:b7:b6:99:e0:83:
24:65:82:e0:fd:12:a0:c5:1a:07:75:41:6b:94:81:
a4:de:4c:c8:e4:44:36:94:ba:d9:89:ea:e8:c8:00:
6b:fa:a3:a9:24:66:3b:4e:64:3f:07:4c:26:f8:cf:
61:06:3b:af:61:25:90:a0:e6:39:4d:5c:54:a3:a4:
bb:8d:f4:28:f8:0c:81:45:55:47:14:d0:16:97:1e:
72:0a:52:07:12:19:dc:ba:64:25:97:82:e9:04:93:
db:70:3a:7e:5d:90:9f:5a:2c:7e:83:c9:6d:d8:5f:
eb:2b:ac:e4:05:0e:e4:77:1c:dd:cd:63:7e:d7:49:
ac:c9:67:6b:73:c1:66:73:9a:e9:6d:d3:cc:a2:3e:
48:61:fc:8d:56:5e:30:12:a9:1d:dd:34:f7:d6:5d:
98:52:39:38:b1:06:22:93:f3:d6:24:b9:77:69:6f:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:55:2D:09:56:53:34:35:33:78:72:87:19:89:CF:92:43:6C:42
X509v3 Authority Key Identifier:
keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:d9:e2:a5:eb:3e:83:a6:81:84:3e:f6:8d:a3:78:18:88:
d0:d9:1d:22:5e:2f:66:2f:ee:69:34:97:06:8f:a3:82:0d:8c:
fc:27:86:73:0b:02:c0:8b:1e:98:d5:2c:1a:b7:44:2d:6d:c5:
62:6f:2e:2a:07:1b:5d:e4:87:b4:31:15:da:86:61:20:49:6d:
71:35:9b:7c:03:3b:cb:57:66:24:59:dc:fb:6e:a8:b9:6a:82:
23:32:5d:79:5c:9d:a6:63:6d:56:f0:b1:87:ff:a8:2b:bf:6c:
7b:b2:2f:1b:aa:ea:b9:a1:8b:93:be:47:15:c9:7a:5b:15:d7:
27:8f:b6:b1:43:38:ac:7f:04:ab:79:02:a8:1b:c7:e1:b3:75:
a1:e1:42:0a:cf:70:23:91:37:25:05:f7:47:4b:7d:95:de:b9:
06:82:5f:ad:3c:b8:f2:13:c0:b0:ef:a6:13:c0:99:24:7f:b8:
63:96:df:c5:66:e6:d7:ea:42:d6:77:c1:fb:46:89:20:bd:6e:
e2:da:5c:d1:ce:d3:71:a7:23:19:96:40:37:37:f5:42:b6:ad:
d3:cb:5e:92:20:99:8b:aa:71:2c:79:fc:0d:26:1d:99:4c:87:
44:9f:69:62:f9:30:f5:ea:7c:36:f3:96:66:b0:a2:4b:09:32:
77:39:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:40:40 2026 by rpki-client