Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: 1Die9QiDkkWdEveb7ak7KmRLThuL4Y1xsvwMeBeCxQ0=
Subject key identifier: C9:4A:5F:2A:71:5A:58:16:A9:E7:5A:03:82:11:4E:62:6B:75:30:30
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019DCF06E80FDDD10B9AAB2DEA024650459C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1626
Signing time: Mon 27 Apr 2026 13:00:29 +0000
Manifest this update: Mon 27 Apr 2026 13:00:29 +0000
Manifest next update: Tue 28 Apr 2026 13:00:29 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: bFoonep2v0bHnJoaLAqgpRiar+j/++qOTx+9tjHLxG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:06:e8:0f:dd:d1:0b:9a:ab:2d:ea:02:46:50:45:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Apr 27 13:00:29 2026 GMT
Not After : Apr 28 13:00:29 2026 GMT
Subject: CN=c94a5f2a715a5816a9e75a0382114e626b753030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:3f:bd:6c:7c:e9:b2:02:05:71:4f:35:67:
cb:27:df:07:b2:86:3d:51:26:ee:51:18:b8:1a:d9:
0a:7a:1a:7f:51:b0:08:4e:2d:9c:62:fd:0b:7f:e8:
08:77:b6:e8:6b:a6:d3:9d:55:f8:64:43:94:1c:eb:
eb:c3:69:e8:c9:ca:18:6e:8d:c9:0a:31:e9:0b:6e:
23:75:34:be:96:88:1b:ba:3a:6d:e8:ce:b5:1e:87:
84:1d:f4:bf:09:26:0d:28:79:e0:c5:a9:e9:3d:5f:
b8:07:40:bb:69:1d:50:b8:d2:01:02:55:f8:41:aa:
7a:62:16:5f:45:46:01:35:86:45:00:47:d2:94:e5:
ff:c7:00:ef:5f:c2:cb:1d:6b:89:b0:c3:c5:09:21:
51:41:65:56:9e:1a:43:07:47:5a:11:14:7e:ad:f4:
11:4a:96:e7:e9:56:ed:73:e3:9e:a1:bb:c0:2d:6a:
09:05:eb:76:43:44:e0:b5:07:c8:bd:b8:f8:07:43:
a8:a1:fa:25:40:4c:e0:a1:32:ad:0d:f3:5e:81:8c:
24:5f:c7:f9:9e:27:ba:b7:51:53:e8:7e:f1:d5:67:
a0:dd:0e:75:7e:c3:95:b6:ee:07:28:3c:04:27:ed:
39:1d:3d:bb:1a:5a:9f:ee:ef:5e:4f:72:c5:bc:43:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:5F:2A:71:5A:58:16:A9:E7:5A:03:82:11:4E:62:6B:75:30:30
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2e:40:37:cf:01:36:ac:1f:d1:f0:cc:cf:c9:44:0f:a1:74:
e2:43:86:91:6c:9f:5f:b9:cd:73:90:c8:33:88:88:19:5a:46:
83:75:0a:10:60:68:58:9a:c2:01:77:8e:db:b5:22:69:1d:e4:
e0:d5:21:72:46:00:56:bb:43:79:92:a0:df:ee:f3:14:7e:08:
12:1c:8b:1b:5c:62:8b:72:47:cd:97:d1:76:89:68:5f:2f:79:
8a:2c:10:f2:56:9b:41:35:fc:7a:28:bc:ff:27:55:9e:64:35:
10:91:94:fa:86:5d:a1:ca:6e:23:4c:9e:72:1e:21:83:14:87:
45:4a:9b:d9:0f:c6:f4:0e:c4:b1:52:90:98:22:50:e2:03:d4:
0c:c4:34:5b:8e:41:37:d0:d3:45:75:d4:a0:95:59:54:bd:58:
26:49:90:86:c0:01:6c:fb:fa:35:ec:59:43:a5:93:87:ee:41:
9a:d8:d2:58:ea:d3:0b:79:3b:ea:63:f5:ee:85:e5:7d:43:04:
42:f7:b7:10:e9:56:9b:5a:18:21:ac:05:91:76:ff:ef:b8:36:
8c:2e:67:17:ae:79:a7:ad:0d:39:74:e8:52:0b:77:59:bb:c2:
66:e5:87:9d:22:29:32:ab:89:bd:f2:79:19:d3:a5:48:b2:d8:
07:ec:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:06:18 2026 by rpki-client