Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: WCUMmI3NUXpRPLCYo5Ss/TRV29gXWLhCQoefFilDssM=
Subject key identifier: 53:40:99:8C:7F:C6:70:8F:0F:F2:5C:85:03:C9:AA:40:93:38:04:86
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019DA6AFC21A303D073A5BCB852AFDBED2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 08A0
Signing time: Sun 19 Apr 2026 17:00:29 +0000
Manifest this update: Sun 19 Apr 2026 17:00:29 +0000
Manifest next update: Mon 20 Apr 2026 17:00:29 +0000
Files and hashes: 1: Uhw8Gytn0hJWRi7NKjX-Z1eWYkE.roa (hash: bi6COlnOAt1k7ksejrQR1lVQGMOwNvJTZxLb2OzctTw=)
2: dCfhouV-L6NBX1Zdltg4CTcqsVY.roa (hash: q66wLSt9qJ4QLsmrcoF6I4u4fYrxEp3xLBONHaR17ko=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: jqEEYqiSRoM3lK6Y8inAmraBJy4eqCMfkbjgHiWR8og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:af:c2:1a:30:3d:07:3a:5b:cb:85:2a:fd:be:d2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Apr 19 17:00:29 2026 GMT
Not After : Apr 20 17:00:29 2026 GMT
Subject: CN=5340998c7fc6708f0ff25c8503c9aa4093380486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:b2:09:c5:53:6d:fc:15:00:19:91:9d:9c:
26:6c:f1:e7:3f:12:f1:2a:10:be:01:4e:91:11:b4:
2c:fa:7c:5d:b6:fb:85:53:0e:8d:52:61:19:5e:1b:
21:6e:da:a1:f6:d2:94:30:5a:88:51:89:63:fb:09:
bc:3c:39:5e:bb:98:7f:d4:b6:73:e9:50:60:68:15:
fe:19:80:d0:52:2a:80:b6:06:2a:4b:70:fe:42:0d:
45:5a:25:11:15:d9:2b:3e:da:ea:5a:e8:c3:7b:e1:
ff:1f:83:31:c0:90:a5:d7:23:b1:4b:d5:d3:83:d6:
d2:2a:42:1c:1b:10:41:a2:c5:8e:59:e4:58:54:53:
41:d0:09:be:35:45:22:76:68:94:11:f7:a8:dc:85:
4d:64:4e:7f:97:71:3c:ed:fc:11:84:bc:e9:20:44:
97:ef:9b:f0:c7:66:e4:78:bc:46:5c:60:6f:26:aa:
75:10:de:5f:f2:a8:56:32:d7:c7:e3:cb:bd:1d:ba:
05:74:ce:ac:11:84:cc:55:ea:42:19:36:65:0a:b1:
90:82:26:fa:cc:09:4d:95:a9:72:af:4e:cf:d7:af:
f4:81:06:c1:37:3d:dd:24:30:26:33:2f:81:04:19:
a4:f3:ed:f3:e6:81:b6:7b:29:3e:9b:c9:15:23:d4:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:40:99:8C:7F:C6:70:8F:0F:F2:5C:85:03:C9:AA:40:93:38:04:86
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d3:7e:5a:d0:8f:f7:d3:b5:81:d5:6e:25:cd:b0:38:c9:f6:
8d:8e:3b:82:9b:4f:b9:26:88:40:83:fc:99:d6:9f:c5:ca:e7:
20:43:46:56:fd:4e:1d:ac:ce:4c:1a:3b:5f:33:51:50:07:f1:
29:47:b4:ea:fe:1e:39:36:fa:99:2f:d1:c7:5e:23:0d:15:da:
bd:ea:97:a2:9e:55:9b:fe:09:bc:d2:a2:48:81:4f:73:f7:1b:
1b:ec:06:36:8f:1f:84:75:f0:14:7a:27:fa:42:78:d4:51:e8:
54:6f:d5:95:00:ac:72:5a:5e:44:e5:9a:8c:27:6b:f6:1c:de:
85:e1:48:79:61:2b:7f:d3:8d:16:18:a4:b7:ce:a1:40:c1:1b:
21:66:3b:4c:7f:c9:b0:af:f2:8a:3c:05:1e:ec:b6:73:48:39:
a7:b7:ca:43:e1:04:14:a9:e9:cd:2b:c0:f2:bc:8c:4d:12:01:
0b:e6:9d:b5:2c:a2:e8:b3:30:c2:79:f3:7a:95:12:8a:4f:0e:
63:01:53:f7:94:84:a4:87:05:bb:5f:13:3f:93:c6:42:2d:6c:
98:00:78:f8:70:a0:2e:ee:26:09:51:d4:df:ab:5e:f5:a6:32:
3c:ce:f5:c6:78:35:e7:00:39:15:73:d0:27:90:83:00:05:1e:
06:a0:a7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2mr8IaMD0HOlvLhSr9vtK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjc0ZTgyMmYzODc2ZDI3ZGVhZWQ1ZjY2ZGJlOWMxYTQy
MmViMTYwHhcNMjYwNDE5MTcwMDI5WhcNMjYwNDIwMTcwMDI5WjAzMTEwLwYDVQQD
Eyg1MzQwOTk4YzdmYzY3MDhmMGZmMjVjODUwM2M5YWE0MDkzMzgwNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubCyCcVTbfwVABmRnZwmbPHnPxLx
KhC+AU6REbQs+nxdtvuFUw6NUmEZXhshbtqh9tKUMFqIUYlj+wm8PDleu5h/1LZz
6VBgaBX+GYDQUiqAtgYqS3D+Qg1FWiURFdkrPtrqWujDe+H/H4MxwJCl1yOxS9XT
g9bSKkIcGxBBosWOWeRYVFNB0Am+NUUidmiUEfeo3IVNZE5/l3E87fwRhLzpIESX
75vwx2bkeLxGXGBvJqp1EN5f8qhWMtfH48u9HboFdM6sEYTMVepCGTZlCrGQgib6
zAlNlalyr07P16/0gQbBNz3dJDAmMy+BBBmk8+3z5oG2eyk+m8kVI9RoLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNAmYx/xnCPD/JchQPJqkCTOASGMB8GA1UdIwQY
MBaAFLNnToIvOHbSfertX2bb6cGkIusWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzkt
ZjhmMDhmZTY0ODM4LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzktZjhmMDhmZTY0ODM4
LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNN+WtCP
99O1gdVuJc2wOMn2jY47gptPuSaIQIP8mdafxcrnIENGVv1OHazOTBo7XzNRUAfx
KUe06v4eOTb6mS/Rx14jDRXaveqXop5Vm/4JvNKiSIFPc/cbG+wGNo8fhHXwFHon
+kJ41FHoVG/VlQCsclpeROWajCdr9hzeheFIeWErf9ONFhikt86hQMEbIWY7TH/J
sK/yijwFHuy2c0g5p7fKQ+EEFKnpzSvA8ryMTRIBC+adtSyi6LMwwnnzepUSik8O
YwFT95SEpIcFu18TP5PGQi1smAB4+HCgLu4mCVHU36te9aYyPM71xng15wA5FXPQ
J5CDAAUeBqCnwg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:30:20 2026 by rpki-client