Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: DO8HVuXrdquxgkSpEacYw3KQ1XvfzKDg9tje4TKhc9M=
Subject key identifier: 1E:98:B7:78:B6:B8:E1:A4:50:01:B8:B5:AB:39:26:68:D6:D7:92:76
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 019DCF753E917B967BB573A1E8AF5FC5AFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 15:01:00 +0000
Manifest this update: Mon 27 Apr 2026 15:01:00 +0000
Manifest next update: Tue 28 Apr 2026 15:01:00 +0000
Files and hashes: 1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: OlG6EvkP16ig+XhtOsmeEXhrUyDmxtfjpi8/t6BBMZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:3e:91:7b:96:7b:b5:73:a1:e8:af:5f:c5:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Apr 27 15:01:00 2026 GMT
Not After : Apr 28 15:01:00 2026 GMT
Subject: CN=1e98b778b6b8e1a45001b8b5ab392668d6d79276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:11:8b:fd:b9:11:73:31:1b:80:09:ec:be:
c7:c5:e5:84:eb:6e:e5:a3:5d:3e:45:d3:64:ed:98:
18:ac:8a:5f:71:54:c2:6e:37:8a:cb:24:fa:90:85:
29:10:c5:eb:f3:f4:24:a7:91:70:30:22:5e:af:57:
f8:d0:bf:b7:b7:68:e6:c4:24:0e:12:4b:0b:54:ff:
5e:52:62:63:5a:25:18:80:23:3a:56:f5:80:1e:5b:
7a:e7:a4:84:c7:8d:7d:cd:32:49:75:00:18:b4:6b:
8d:30:0c:79:db:4d:63:96:32:be:e8:58:b6:23:b3:
8e:bc:57:48:c1:0e:c8:d6:b9:15:e8:27:d9:9d:28:
4a:de:a5:98:1f:70:52:78:cf:2b:40:66:ac:fc:33:
de:50:7e:29:0c:a7:ac:4b:cb:a2:7e:78:5b:14:95:
d8:92:38:7d:1d:b6:ff:90:f8:71:10:33:c7:21:0a:
1f:ec:fa:f5:c7:cd:22:54:ef:fc:c6:36:a5:1c:2e:
d8:18:7c:18:bc:b6:ed:21:9c:ef:98:2b:43:f3:5e:
36:3d:b2:4d:57:5e:3f:dd:20:b1:a9:11:6f:fd:6b:
52:cf:9a:ef:d6:b0:75:d7:e4:c0:aa:93:e9:b2:36:
b2:26:88:3e:c1:83:3c:00:54:24:8b:ce:da:29:9b:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:98:B7:78:B6:B8:E1:A4:50:01:B8:B5:AB:39:26:68:D6:D7:92:76
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:8b:b5:10:2d:83:58:79:83:fa:22:47:a8:09:67:69:8c:56:
ce:c0:03:98:91:6b:e9:4b:2e:0c:70:a1:74:3f:0a:09:6d:9f:
77:01:4b:da:c9:21:2e:e6:bf:cb:4b:f5:26:d0:7d:03:ce:6a:
a7:ad:b0:b4:23:a7:ea:68:77:ea:f3:7b:c9:89:2c:fe:f4:8a:
a5:3e:df:bf:61:14:e1:4d:02:cc:02:46:01:ed:99:26:23:9a:
9e:70:ca:56:b1:0a:da:a5:eb:75:79:12:6a:df:e4:49:c7:b0:
75:6a:45:38:1c:f7:4e:ee:45:aa:98:1c:18:58:74:dd:65:e0:
fe:de:ef:e7:95:bd:55:3b:17:14:07:e9:df:fe:0d:09:92:94:
d1:c4:12:a5:3c:4d:7f:16:ce:08:90:34:8f:8d:78:cb:09:45:
43:6b:81:d6:4b:11:e6:87:7f:b9:5f:ba:02:c8:6f:74:b6:bc:
ee:9d:46:94:a2:a1:6b:ca:9c:71:29:8d:81:4f:cc:80:ed:ae:
cd:b1:ef:aa:f7:b8:33:00:b9:e0:f1:2a:67:4a:60:58:75:bd:
a1:1d:6e:a3:3e:35:3c:d2:7b:2a:e6:dd:4e:60:5c:73:d9:86:
aa:dc:cd:63:45:83:d0:08:fd:8d:60:e7:92:ea:4f:f1:7f:d4:
52:87:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:04 2026 by rpki-client