Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: ozXeMFkqRPaVGep6FKFnDwzzjxv8ax4yb82WDR161R8=
Subject key identifier: BD:0F:5D:38:3D:DB:4E:0F:91:28:B7:7A:B6:46:1A:28:26:C8:50:4C
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019DA26546D010453E501E9C0E62C873DCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 36
Signing time: Sat 18 Apr 2026 21:00:39 +0000
Manifest this update: Sat 18 Apr 2026 21:00:39 +0000
Manifest next update: Sun 19 Apr 2026 21:00:39 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: 55xdHpm9yaYLU3rYdpDvMvVetF72zv5t/6XUTFJlZ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:65:46:d0:10:45:3e:50:1e:9c:0e:62:c8:73:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Apr 18 21:00:39 2026 GMT
Not After : Apr 19 21:00:39 2026 GMT
Subject: CN=bd0f5d383ddb4e0f9128b77ab6461a2826c8504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:7a:71:50:ee:d1:41:4b:72:c0:b9:e2:4b:
56:8b:1f:2b:58:c2:91:6e:bf:1e:0a:bf:95:2d:6e:
d0:97:97:da:34:73:a8:eb:26:c1:31:90:f9:85:13:
9d:21:1a:a7:c3:9a:33:05:12:1d:e3:04:6b:70:c9:
e6:4b:82:21:fb:8e:2f:be:0d:97:0e:b3:3d:83:e1:
9b:89:14:b1:44:6a:00:58:c3:37:c0:48:9f:34:4a:
db:37:c7:df:f9:8f:0b:5f:ad:a5:d9:39:41:16:4c:
91:60:23:5c:ac:2f:5d:a6:a4:8b:6c:c1:65:f0:76:
8e:7c:cf:ef:44:83:99:c6:fe:a6:b5:9b:59:a5:eb:
e9:eb:2d:9e:7b:85:d7:9b:72:01:41:eb:51:a5:1c:
51:15:6a:b4:0a:b6:21:e2:83:fe:4b:4a:d5:8b:05:
20:2e:48:2d:03:5b:56:f6:e6:1e:62:1d:7e:05:5e:
f1:5a:50:e6:f4:b9:46:7f:eb:dd:bc:03:e2:48:01:
6d:4c:c9:36:36:6e:f2:ba:c5:bf:38:51:1a:c3:3c:
87:2f:5a:c5:f6:0d:f5:de:ad:fe:6c:56:50:73:19:
7e:ef:b8:2a:1e:d0:2e:c4:5c:d1:ec:7a:e2:c2:e2:
e9:af:a8:f8:f3:47:34:0b:e3:16:9b:f7:55:04:32:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:5D:38:3D:DB:4E:0F:91:28:B7:7A:B6:46:1A:28:26:C8:50:4C
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:58:e3:86:83:7d:bd:c4:12:dc:90:cf:eb:67:ff:29:49:
76:24:36:c7:3d:3f:b9:8c:3e:19:9b:62:18:e8:2d:74:99:b8:
be:a3:0f:3e:1b:86:6e:28:55:85:e9:5f:73:fe:ae:db:13:06:
91:f8:d4:5e:1e:46:b7:c0:2c:32:d8:b9:7e:60:29:0d:20:b0:
2f:9f:fc:74:7e:3f:75:8f:72:17:74:3a:c0:71:08:7e:8a:7d:
19:83:53:e3:45:0a:d2:93:74:82:4e:38:3d:38:24:c6:67:4f:
ab:54:54:9b:2e:57:28:d1:76:d1:28:c9:34:4d:27:b4:9b:d2:
3a:ff:f2:d0:57:4f:86:da:33:aa:05:cf:e1:c1:b7:71:b3:cc:
b3:a6:d4:6d:4e:b1:78:44:bd:48:ae:72:2d:92:74:d2:b5:3d:
de:c5:36:2b:b9:1d:c5:e3:f6:cc:00:ef:07:96:00:9b:37:31:
53:15:81:e4:6e:4b:e8:57:94:af:0d:c1:ea:42:d1:6b:09:54:
1c:5c:91:f0:81:eb:df:70:e6:5b:3f:77:48:aa:d0:96:35:66:
37:69:04:94:5a:f4:76:b7:22:48:a3:50:ff:17:16:ba:6d:d5:
42:26:9d:a4:4e:c4:11:2e:c1:a5:7e:b3:bb:ae:c6:cd:ba:0d:
f7:e7:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:59:43 2026 by rpki-client