Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: WpmrSQ7gn5wPDT/hCp3kJoOHH6aXr+XromBJW5mL644=
Subject key identifier: 51:CC:D1:AB:34:C4:6D:17:33:1B:B1:B1:83:23:80:08:DC:93:1A:50
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 019DCDBDE068C045BA4B3D265071ED0B13BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 07:01:06 +0000
Manifest this update: Mon 27 Apr 2026 07:01:06 +0000
Manifest next update: Tue 28 Apr 2026 07:01:06 +0000
Files and hashes: 1: Dr3WDUpz6-xPqX9Onpmd9dBVP5Q.roa (hash: K0SdFptEazmOT46XEGng/FuWvVaWyGlgcNjhMXNpZ4c=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: ygLluagraLHSyR0sMwxKdNN8kRjw0uFb2QXXB1cl7g4=)
3: pMHI94DTtKKz8gzxhVKkHUjKag0.roa (hash: pFTxumvDB0SF9JNJ3IzVUzE5KL+TMh7qeatEKMQOnlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:e0:68:c0:45:ba:4b:3d:26:50:71:ed:0b:13:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Apr 27 07:01:06 2026 GMT
Not After : Apr 28 07:01:06 2026 GMT
Subject: CN=51ccd1ab34c46d17331bb1b183238008dc931a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:56:96:95:ed:91:54:f7:bc:23:2c:9f:6a:
33:61:1c:a5:67:0b:e4:20:c6:dc:96:ac:ce:c5:3d:
23:35:51:0d:07:51:11:4f:c6:af:4a:1b:f8:ba:26:
70:a3:95:23:66:5a:82:d7:5c:88:8f:6f:a3:dd:79:
ca:11:9a:19:d4:60:0b:54:f9:27:94:ac:d0:e3:6c:
35:5e:64:9e:f5:9b:a8:9a:0a:d2:95:e4:da:a4:94:
a7:52:6a:c1:94:88:a7:5c:61:08:45:5c:5e:f9:f4:
d9:78:92:bd:1f:fa:eb:dd:61:1d:a2:07:62:05:36:
6e:c2:fe:38:fe:69:d4:ba:23:75:66:90:7a:19:48:
ed:4f:12:7e:94:c7:12:36:76:a6:bb:2f:de:00:cc:
cf:d2:28:e4:0f:42:70:18:82:a4:99:f4:b6:0e:d5:
74:01:f8:95:18:43:89:9d:fc:ad:b6:d0:60:d1:69:
41:35:b4:41:5c:21:7f:2e:8b:a6:c8:64:75:e5:51:
e2:33:5b:2d:92:8d:9f:ca:04:1d:97:b5:1d:88:4a:
63:8b:61:44:ee:fd:4d:7f:4f:46:2e:0f:17:bf:d9:
5e:22:a6:68:3e:71:cb:05:72:ee:95:3e:f9:6a:43:
ca:b8:00:4d:f5:08:c8:08:5e:3a:eb:66:f4:0e:49:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CC:D1:AB:34:C4:6D:17:33:1B:B1:B1:83:23:80:08:DC:93:1A:50
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:76:3a:39:5e:70:02:22:25:b0:b7:9a:39:2b:40:4f:37:
55:65:6f:47:8f:74:e4:b1:aa:71:15:b7:b7:f2:a5:b1:27:87:
42:f6:0b:f8:1b:d6:d2:58:3a:02:bb:e1:4d:1c:f4:12:aa:c2:
cd:be:df:91:15:55:9d:eb:08:06:89:f4:2c:87:d3:79:32:76:
8a:8b:49:15:1c:42:32:5f:0d:7c:a9:6b:4e:3f:21:24:27:d6:
ee:54:81:d7:77:ec:52:14:2e:f9:bb:ee:2d:f8:4c:6a:7d:49:
52:89:ad:ab:98:41:1b:34:fc:f0:ba:c8:d3:e7:6d:3d:bb:5b:
77:e6:84:c2:f3:57:b3:28:14:57:dc:15:f1:16:b6:66:21:1c:
3a:23:75:00:45:bd:cf:64:f0:b6:3d:88:74:a6:7f:5b:43:04:
89:07:6c:f6:74:38:1a:21:ef:1d:9f:6d:36:ac:30:c0:e8:e0:
28:17:12:f1:36:48:81:e8:14:41:91:f0:fa:26:8f:e8:8d:b1:
ad:f1:51:8f:2d:3b:cd:d6:51:95:79:7f:99:54:ad:de:f5:74:
68:34:3a:35:82:64:a2:f1:4e:52:b9:be:e8:86:49:66:ea:2d:
bc:61:02:58:55:6d:98:17:f4:ce:d1:f5:01:06:f4:7b:62:25:
96:d7:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:51 2026 by rpki-client