Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: wSbyqxr0H4wEdEl/au180LgDTWR1HjrUMEk/HDmTOfo=
Subject key identifier: 39:2E:81:02:0E:54:CE:9B:22:64:52:CD:0F:80:C9:EE:AF:39:DC:8C
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019DCE2B9873838DA40D9CBC8B2AE811FFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 110B
Signing time: Mon 27 Apr 2026 09:00:56 +0000
Manifest this update: Mon 27 Apr 2026 09:00:56 +0000
Manifest next update: Tue 28 Apr 2026 09:00:56 +0000
Files and hashes: 1: GtRugG7rUNXwN8D-4_Fmv8xBbi4.roa (hash: /BvITM4S5y0rZ1AQGGceJ5QHF+EoXg6/6ygN/nHgl9Y=)
2: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: cWePZARfTxCHAsKFOjfXpiFqq44P99Wbmvq9leLnWro=)
3: _09CYID6_CGhAezIzwAbTFbsCi8.roa (hash: dZSTZUSxmSRc4nvVBTT8GAEBkxmPLHGJ4SuadjBnT94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:98:73:83:8d:a4:0d:9c:bc:8b:2a:e8:11:ff:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Apr 27 09:00:56 2026 GMT
Not After : Apr 28 09:00:56 2026 GMT
Subject: CN=392e81020e54ce9b226452cd0f80c9eeaf39dc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:f6:b5:c1:b5:f6:6b:77:3f:f3:0d:95:7b:
68:8f:c8:b6:70:0c:21:ca:cc:95:fc:4c:a1:54:32:
d8:0b:9e:af:de:23:74:3c:2a:30:3f:2b:44:07:46:
ab:67:6b:b8:80:05:8a:9a:b8:92:cf:ee:3d:54:7d:
fe:f9:ab:d1:ab:b3:42:43:f8:cd:6f:90:1f:fc:58:
0c:d1:e8:ad:5b:3c:ec:0a:5e:c3:8c:39:44:be:30:
6d:c9:a1:f5:bc:24:ce:60:5d:84:c9:a3:4b:66:95:
06:f7:45:2e:52:2e:17:c6:ff:24:4d:41:68:27:1a:
f0:c1:5e:3f:d7:0c:5e:e5:67:9c:da:b4:1c:99:09:
4f:09:4b:02:0c:f8:86:10:26:fa:32:0f:a7:e8:0f:
1f:58:53:e2:f9:bd:1f:66:95:46:0c:ec:9c:87:23:
28:52:82:00:c5:bd:0d:59:bd:72:8c:88:d8:16:a0:
a5:ed:d3:e2:db:3a:e7:0d:05:0c:08:8b:c0:f5:d9:
c0:64:5a:4e:55:ac:56:1f:1d:44:19:69:7f:e5:5f:
8f:69:f5:da:82:fc:f7:2b:62:c5:4b:92:91:22:a7:
89:11:79:17:cb:b8:91:ea:80:22:53:52:60:aa:4c:
81:64:83:ca:75:a4:eb:fe:c6:e1:95:8c:52:ae:88:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2E:81:02:0E:54:CE:9B:22:64:52:CD:0F:80:C9:EE:AF:39:DC:8C
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:4c:f1:3c:24:97:5e:2e:2a:3b:8c:d2:11:96:af:d9:b7:
14:5a:6f:cf:5a:9e:0b:14:5e:65:38:e1:9e:64:42:46:f1:49:
77:55:cb:34:02:36:3a:32:2b:d9:42:04:a8:c5:d8:2c:6b:36:
10:ec:b0:f6:73:71:db:95:15:7f:f9:44:2e:23:77:cf:4d:8a:
77:f7:98:74:b7:c5:52:1a:29:1e:46:c8:1e:2d:8e:b4:f4:f7:
7c:c1:aa:9a:16:10:a5:7b:c0:03:72:79:a9:17:f9:33:6a:7f:
46:3f:28:46:5c:28:1c:33:b7:2f:5a:8b:f1:e3:27:e2:8c:af:
47:50:88:bd:22:97:82:08:d7:07:64:bb:0a:09:a0:21:74:07:
66:c7:97:b5:3b:a1:b9:bc:7e:35:63:1c:29:df:57:1b:07:3f:
e0:98:a1:93:61:06:46:34:86:4f:be:41:1d:94:52:aa:de:54:
52:11:93:e3:c6:54:70:22:ad:44:00:28:a4:9c:3f:8d:9e:b1:
89:6e:64:9c:b5:83:ad:89:00:69:95:c6:60:c3:ca:af:54:b9:
18:8c:af:da:ad:1b:b9:a3:34:c5:85:e0:bb:29:9f:24:53:dd:
9f:d9:0d:79:3c:2b:5c:ec:83:64:67:af:7e:a0:aa:61:18:a0:
88:0e:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:12:26 2026 by rpki-client