Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: 3XgawDA/rxlL3/dLAwl5onyF20YIW03ucvcGAVROspo=
Subject key identifier: 3B:33:26:EF:AC:C8:C5:A2:A8:78:A9:1B:E1:C0:47:0C:2D:EB:8C:4E
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019DCAF35DB351E94FB9CD6EFC89B93BA283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 18ED
Signing time: Sun 26 Apr 2026 18:00:39 +0000
Manifest this update: Sun 26 Apr 2026 18:00:39 +0000
Manifest next update: Mon 27 Apr 2026 18:00:39 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: ZN+IhaXcCy/HvkdOPgmmAfMjaEXWM7Zl91DJYU1VLTo=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:f3:5d:b3:51:e9:4f:b9:cd:6e:fc:89:b9:3b:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Apr 26 18:00:39 2026 GMT
Not After : Apr 27 18:00:39 2026 GMT
Subject: CN=3b3326efacc8c5a2a878a91be1c0470c2deb8c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:76:db:1c:1a:9e:90:14:9a:a6:ce:41:02:
61:74:6e:25:e7:e2:9a:0c:8a:b9:4b:5a:5c:b9:60:
a7:25:07:8e:b4:4c:4e:c6:2f:6b:bb:7a:aa:ea:2d:
26:b1:a7:71:a1:38:5b:06:3b:d3:7f:08:9e:d1:9f:
51:a0:07:c3:44:d1:52:71:8e:c2:20:88:5d:ef:6e:
1a:9c:0c:18:9b:ee:b2:f9:97:7e:dc:00:9c:46:06:
6f:84:6e:f6:ad:8a:d9:5a:2b:bc:7d:87:0d:dd:bd:
0f:25:d8:d5:c5:e5:41:0a:f9:79:eb:7f:77:44:6e:
c7:f4:0b:49:e7:3f:ce:69:88:7e:5f:8f:d5:19:21:
54:cf:51:64:32:9b:e6:4c:2d:47:7f:de:b8:46:15:
e5:48:80:bf:24:0f:57:7a:f7:f8:a2:bd:ac:62:74:
c8:05:95:01:a0:ae:7a:28:2a:00:16:3f:a3:51:3e:
59:0b:af:c0:c6:64:c6:09:fb:cb:cf:02:63:38:fb:
d1:13:dc:77:1e:f6:07:5c:3b:d0:cd:95:07:65:23:
65:dd:34:a9:53:7f:88:ca:a6:8f:3d:86:b0:bf:d3:
05:0b:6c:57:0d:c4:f1:19:72:18:61:5c:e9:fb:65:
97:f4:6b:e2:13:9c:b0:04:61:77:1d:d3:37:bc:c8:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:26:EF:AC:C8:C5:A2:A8:78:A9:1B:E1:C0:47:0C:2D:EB:8C:4E
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:8f:28:24:0a:8c:02:f1:63:f3:fa:b3:bb:c4:89:e2:4d:
6b:78:58:73:76:9b:f6:d5:d7:ab:f6:bf:a6:0a:91:c1:40:cd:
8c:f2:f5:68:90:c1:fa:d7:e0:9b:37:a9:95:bf:08:28:7a:80:
23:96:4a:06:8f:c5:7f:e7:c4:24:5c:26:23:84:1d:e6:23:06:
bb:4e:84:4c:a3:d8:17:88:f6:4e:d7:76:0e:17:3a:0f:5a:3f:
35:d3:15:7e:81:db:af:42:a8:1f:82:b0:4e:c5:c2:c0:e1:5d:
e3:d2:75:0f:30:a2:21:f5:cf:d0:53:e5:ce:c5:a6:aa:34:0c:
ef:4e:d3:52:87:d3:0c:f5:a5:83:61:ea:18:c2:78:fb:5b:f4:
1a:be:f6:f8:dd:64:4b:0f:a5:54:a9:51:6f:42:35:5b:73:b3:
b7:6a:d2:74:ad:a7:be:c9:a3:0e:6a:6d:bf:af:b6:27:b3:75:
62:67:cf:cc:58:92:cd:73:f4:59:ef:19:5b:8d:d7:dc:89:8a:
a6:73:8a:2a:51:79:37:92:15:46:9e:33:73:4c:61:81:9e:0c:
cb:16:b6:f6:ec:0d:59:83:7c:bf:a9:09:4e:07:07:c4:cb:82:
28:cf:73:7d:05:2f:7c:f0:a7:65:54:b0:cb:04:41:21:10:ba:
87:ba:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:12:26 2026 by rpki-client