Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: qfl+0GEN3qx90XYdJYHssxXlhq+fivdFdK3ybKDgLlI=
Subject key identifier: D1:2F:11:83:C4:99:89:A4:37:D9:81:DA:3A:DF:A6:64:F7:21:3D:07
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019DCFE32EA5A84D1A0B2D5A4F76B56D4ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1836
Signing time: Mon 27 Apr 2026 17:01:05 +0000
Manifest this update: Mon 27 Apr 2026 17:01:05 +0000
Manifest next update: Tue 28 Apr 2026 17:01:05 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: LNyy7gH0xxv3Fr9lG/5xoxsc9XoWTRgD12tzXNnWmOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:2e:a5:a8:4d:1a:0b:2d:5a:4f:76:b5:6d:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Apr 27 17:01:05 2026 GMT
Not After : Apr 28 17:01:05 2026 GMT
Subject: CN=d12f1183c49989a437d981da3adfa664f7213d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:ae:2f:76:53:6a:4a:de:06:cb:be:8e:df:
73:cc:52:9b:b3:02:04:fa:6a:92:95:82:2b:4e:df:
11:30:77:31:1e:79:7f:09:32:43:db:fa:81:08:cb:
da:24:fe:2a:31:89:3f:ab:93:42:f3:b3:38:99:81:
3d:90:4f:ec:0d:e2:e1:c2:bf:74:23:07:2c:c5:c3:
60:ee:33:e5:69:ef:40:02:01:cd:fc:92:75:b7:94:
22:b7:f6:3e:5a:d0:e9:a7:2b:00:5a:07:0b:94:a4:
aa:64:57:06:15:50:8a:f0:b7:d7:df:5f:ff:4e:36:
01:a9:bb:98:33:92:97:2e:65:79:72:67:50:07:64:
8c:dd:73:37:e7:6c:08:48:e1:64:34:d4:27:ba:fd:
d3:c7:6f:54:d3:f5:06:52:cf:bf:07:cc:e9:00:ae:
82:66:5a:49:28:2e:55:0d:59:b9:07:e8:65:a4:cb:
e0:2c:74:e4:b3:4d:67:9a:16:9f:88:b4:f4:53:ec:
95:b7:f4:7b:53:ff:33:de:a2:1b:6c:0a:09:af:f0:
d8:c3:eb:51:30:ba:7b:68:d7:78:0d:fd:fd:f1:68:
ea:4b:20:2b:5f:6a:6b:ab:5c:b3:fb:69:34:e8:39:
dd:30:e6:b6:f3:a4:96:e3:28:a3:fb:11:cf:6e:15:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:11:83:C4:99:89:A4:37:D9:81:DA:3A:DF:A6:64:F7:21:3D:07
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:db:23:d6:bb:62:ce:29:8c:f9:40:e1:ec:65:19:a0:6f:
be:5c:be:9f:17:92:b1:20:52:c7:ac:35:31:36:a2:8e:7f:63:
95:0a:b3:f9:49:19:67:ed:c1:32:63:a0:de:9c:c1:24:21:ae:
8f:a9:87:4e:a7:f7:9a:5b:1c:81:6a:91:1a:43:8e:2f:b7:93:
f6:de:bf:83:87:a0:01:f1:6c:02:6b:92:a4:4d:2e:44:05:b4:
86:f7:33:fb:3f:02:24:39:27:c5:a8:6f:69:82:51:d3:6d:06:
2f:d8:26:cd:ab:83:1e:1f:44:3b:9d:c1:a5:29:61:e5:bd:df:
05:49:49:28:cb:48:38:1e:41:ca:9f:9d:6c:39:de:84:bc:28:
0c:38:99:27:75:40:df:94:f2:d0:eb:f6:21:b1:74:0c:96:88:
ec:a8:35:a4:10:ea:51:ea:71:06:c7:bc:d2:51:37:81:14:9b:
f4:ba:50:b7:2e:25:81:1b:fa:8f:f8:f6:be:94:8d:6d:80:3a:
0b:03:7a:60:ba:da:69:04:2b:86:8e:8a:cc:b2:9a:09:84:e7:
1d:22:7e:3e:15:7c:75:2c:41:22:18:a2:12:94:3a:4f:fc:81:
5c:22:4d:f5:83:09:e4:96:95:5f:8b:9d:60:a2:ca:79:99:75:
a3:73:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:32 2026 by rpki-client