Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: 5K/77wfB2lyTD+Nrltqu5z1+VfBsnuGBG70aOPypVGw=
Subject key identifier: 13:A2:A2:75:65:7C:A2:AB:CC:80:95:C0:BC:33:84:2A:30:A4:02:BF
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 019DB16B12F189936A4B6227555D48F7FCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 18D8
Signing time: Tue 21 Apr 2026 19:01:17 +0000
Manifest this update: Tue 21 Apr 2026 19:01:17 +0000
Manifest next update: Wed 22 Apr 2026 19:01:17 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: 09Oqw6/Az1NCSyX42eNiE66NegCuZ1P2VIS4Esrzegc=)
2: uypIIfN_gqEh3lmpScBuFQ0y2x0.roa (hash: qYsj/xVAas+VL1pl193+WdJRRlNb+wnpITbwyt+RIfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:12:f1:89:93:6a:4b:62:27:55:5d:48:f7:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Apr 21 19:01:17 2026 GMT
Not After : Apr 22 19:01:17 2026 GMT
Subject: CN=13a2a275657ca2abcc8095c0bc33842a30a402bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:b7:47:d6:5a:35:61:9e:da:2a:cf:fc:82:
4f:5f:ad:60:c6:fa:e9:a0:e0:de:56:67:1b:e3:de:
37:22:61:e7:52:6b:95:7b:e2:2b:9b:4a:77:6d:7f:
ad:a7:28:9d:45:a1:ae:d8:5b:b4:4c:43:03:40:83:
ae:32:ab:9e:e3:7d:49:99:23:c1:6b:aa:76:5a:fd:
0e:ff:41:42:f7:57:5f:cd:47:df:e2:15:bc:dd:b4:
0c:05:d9:93:c9:80:29:10:07:5f:43:37:95:d7:14:
c8:fe:d9:98:01:9a:c7:13:46:47:d6:77:2f:3c:a1:
1a:80:84:22:45:b9:44:54:7d:82:18:fc:71:d3:f5:
70:68:81:65:60:20:6e:f1:e4:6b:14:80:14:b7:e0:
f3:20:d3:9b:12:3e:72:9b:83:15:8c:53:8d:ea:f8:
e5:45:3c:d1:ab:22:0d:83:58:e4:35:83:dc:9e:49:
4e:8d:76:bc:2d:30:1e:3a:97:86:76:00:9a:c4:1e:
33:dc:69:8c:21:fe:b7:51:1d:b9:6d:ff:21:db:73:
01:00:af:2b:d8:48:de:cf:0e:a1:12:a2:00:51:9d:
e2:56:71:ff:97:08:b6:dd:da:71:24:ea:72:c1:2b:
f8:50:b7:f2:73:e5:3e:38:c4:5d:9b:ea:90:74:85:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:A2:75:65:7C:A2:AB:CC:80:95:C0:BC:33:84:2A:30:A4:02:BF
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:15:b2:76:e8:be:ca:4d:ae:0d:70:f8:7c:6a:7e:9a:84:
32:9c:fc:9d:d6:65:a6:43:57:7a:eb:f3:ec:d4:14:71:e3:da:
85:77:49:19:da:50:1a:61:7a:35:9c:22:db:04:9a:c9:40:7d:
01:91:74:e9:7c:7c:7a:11:3b:94:91:01:3e:d3:fb:11:a6:20:
b3:1a:14:b7:69:24:c9:02:c8:e2:48:bd:85:09:66:98:ee:2a:
02:51:5f:3b:75:c2:02:4e:bc:64:16:dd:da:08:5d:e1:5e:fa:
10:92:05:dc:f7:51:92:77:26:15:ef:2f:a3:8d:36:34:ce:7d:
8f:10:bb:b7:59:56:58:05:0e:38:c9:7f:77:88:89:de:55:23:
86:c9:b5:6a:26:4d:ef:5b:1a:85:2a:44:4c:a0:42:03:50:95:
67:7c:c3:b9:30:95:3b:3a:ff:1e:cd:17:5d:3e:9e:04:ef:5e:
f5:c9:cf:0b:98:c4:a8:59:8a:d6:44:2b:e6:42:a0:ce:c4:dd:
c9:bc:42:fb:65:a1:97:49:7a:f8:40:da:9e:ad:d9:5b:34:23:
2a:ac:78:bd:b4:e0:9d:51:18:88:29:65:bd:48:63:7c:34:d7:
fb:c2:41:b8:fd:66:50:37:b2:09:b6:3a:8c:3c:21:54:60:ed:
4e:4b:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:52 2026 by rpki-client