Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: Q7Ct3QqHnLnkmxAoSujdl3u6eGIeDuNwfiPaBjVjjvQ=
Subject key identifier: 7E:79:49:1D:24:D8:56:8C:B9:89:AD:7D:74:5A:CC:A9:DD:F9:16:31
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019DB27E2ABDD53045DFF574B146EDE2A43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1490
Signing time: Wed 22 Apr 2026 00:01:46 +0000
Manifest this update: Wed 22 Apr 2026 00:01:46 +0000
Manifest next update: Thu 23 Apr 2026 00:01:46 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: YMim6CIy0HHLvjrMO7bJ32zUGG10qnHWh0+n7ScxmL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7e:2a:bd:d5:30:45:df:f5:74:b1:46:ed:e2:a4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Apr 22 00:01:46 2026 GMT
Not After : Apr 23 00:01:46 2026 GMT
Subject: CN=7e79491d24d8568cb989ad7d745acca9ddf91631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:1b:ce:9c:dd:5f:7a:ac:d4:70:77:a8:bb:
ef:f5:8c:43:fd:2b:47:b5:aa:17:a9:76:bd:6d:ed:
4e:17:ce:63:e7:c1:5f:50:ec:0e:61:48:1c:4c:cf:
75:f9:81:0b:17:de:4d:be:d3:ed:6d:04:11:4f:8f:
67:c5:38:c0:0e:67:72:bc:50:cc:a2:a1:0c:43:99:
df:7e:6d:52:dd:35:02:f7:b1:39:6f:05:53:89:db:
d0:6b:c7:a3:16:8c:6d:87:1d:f5:3f:6a:57:fd:20:
4c:d3:81:7c:ca:b8:4d:35:cd:c3:f5:cd:f6:61:2d:
19:87:17:63:52:db:ab:41:1f:08:e9:ad:39:42:0f:
6d:cd:5d:ed:df:b0:65:13:5b:55:f6:0b:f3:21:4e:
1b:fd:35:88:c5:c2:fb:b3:2b:6f:99:14:07:9a:a8:
31:5e:9a:98:a5:e4:d7:2b:4c:f2:0c:a9:3b:2b:83:
6e:7a:99:81:f7:ca:29:c0:b8:03:b1:2e:91:c4:73:
c7:d3:c4:2c:b8:f7:f0:9f:dd:a3:b0:18:5d:85:d8:
9e:e3:b8:24:51:30:fd:9e:d4:aa:a5:35:53:b3:d7:
49:6d:6e:59:97:25:68:81:cb:fa:98:48:01:95:eb:
83:68:3c:a4:35:bf:cb:a3:bc:03:df:8c:12:7b:90:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:49:1D:24:D8:56:8C:B9:89:AD:7D:74:5A:CC:A9:DD:F9:16:31
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d8:ee:7b:f7:aa:73:f8:f4:fe:d4:ea:13:59:ca:1a:83:d7:
59:e8:77:a2:8f:25:dd:0e:d9:82:17:ff:e0:c2:c4:28:f6:d1:
92:a9:37:a2:4d:62:ff:16:73:e7:03:aa:7e:da:9b:9f:16:b9:
62:ca:b3:3e:a5:f6:b1:dc:e5:da:aa:cf:7f:35:cd:25:e3:ae:
41:c0:b9:f2:a9:d0:93:23:1a:1d:65:a8:9a:d2:fd:ce:db:0b:
00:7a:40:5c:1d:9c:82:84:d3:c0:78:c7:f6:58:ec:de:a2:df:
e0:28:26:1f:4e:d7:30:ba:eb:08:4b:55:21:4a:7d:09:78:b5:
c7:e7:b9:1d:85:01:d0:5a:e2:01:94:02:0e:02:a6:a7:7b:7f:
42:ba:6a:1a:07:2d:31:ee:4b:cf:26:21:c9:1b:00:6b:b8:ed:
99:10:67:1a:f3:e7:b4:d5:5c:bd:4d:15:d6:c2:75:e5:f5:81:
2a:00:8a:a2:05:dc:9a:15:f5:23:5b:aa:1f:5b:38:9d:67:1b:
e3:db:e8:e5:60:4a:f9:fa:a1:ca:9a:cb:4d:c0:7d:53:69:38:
85:39:9e:54:aa:63:39:f1:1e:d0:b3:3e:63:13:c6:8d:37:03:
9b:a6:cb:76:51:d3:5c:63:6e:36:ee:ae:d1:4a:a6:51:78:d8:
dd:b5:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:57:44 2026 by rpki-client