Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: GbMxyrz6d+NUlo5fTI0MkJfVJ+gvFah9NWxBZ4a0lhY=
Subject key identifier: 26:CF:BB:F3:44:C6:A1:13:0B:23:49:72:BC:95:0C:FE:74:E6:23:FC
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019DCF3E6BB3F61804FEFFA7F68D22A5B5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: AC
Signing time: Mon 27 Apr 2026 14:01:07 +0000
Manifest this update: Mon 27 Apr 2026 14:01:07 +0000
Manifest next update: Tue 28 Apr 2026 14:01:07 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: v/pX3jVL3ztTbwvgOOk8VuqTh6v2UMcYfbzfOU7Q6ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:6b:b3:f6:18:04:fe:ff:a7:f6:8d:22:a5:b5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Apr 27 14:01:07 2026 GMT
Not After : Apr 28 14:01:07 2026 GMT
Subject: CN=26cfbbf344c6a1130b234972bc950cfe74e623fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:fd:3b:ec:3f:c6:15:69:28:89:93:21:02:
8f:68:7a:4f:3e:e9:5e:45:cf:ba:8d:b1:b2:bd:f9:
ad:4f:c7:15:da:f3:de:75:30:ed:a6:b8:cd:c6:21:
9e:af:49:ee:67:d1:ee:22:4f:60:e7:2d:12:76:22:
95:30:3f:5d:ac:f2:57:81:f4:c4:0a:e4:3b:e2:e3:
17:98:87:2e:f6:6d:68:62:3f:5e:43:00:81:d0:48:
04:09:2a:8e:2e:88:c8:70:5a:30:ed:6e:33:8c:c4:
23:b7:6f:4f:ca:5a:10:71:e3:41:0e:eb:f9:af:f7:
51:f4:d4:f9:b8:d3:29:30:8e:7e:ba:e3:aa:86:3e:
56:71:c6:5f:ce:a6:34:fd:9c:bc:85:ef:d4:34:56:
7e:0e:35:1e:90:a5:6c:e5:f8:cc:54:c4:3e:cc:90:
08:10:37:f5:b1:ce:ce:4b:aa:9c:a8:40:64:06:18:
2b:7f:52:e3:df:80:ab:1a:bb:27:3f:ed:21:fc:41:
18:c5:92:55:30:8c:8a:66:3e:0f:b6:dd:ae:4c:e3:
a0:3e:c4:e5:8b:40:e1:a9:0d:23:45:ec:41:ff:cf:
46:6f:6c:cb:e9:ce:86:d1:34:36:e2:a3:35:0e:87:
f8:58:af:20:e4:6c:a4:fc:cc:36:64:2b:a2:8a:0f:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CF:BB:F3:44:C6:A1:13:0B:23:49:72:BC:95:0C:FE:74:E6:23:FC
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:2b:9e:f1:b0:ac:dc:ae:ea:f0:1e:bc:4d:bf:76:52:69:
bc:12:71:67:ad:ec:13:2a:18:66:3a:bc:ba:ef:38:ce:9c:51:
03:7f:39:da:31:40:4e:90:f9:72:bf:99:c0:4a:a0:5c:14:11:
88:65:64:f4:c9:ba:64:fb:1e:c9:14:0d:5b:50:9c:6a:f7:5c:
a5:ca:a2:01:82:2a:68:7a:b1:62:2c:7c:01:b6:ba:09:8e:20:
0c:57:71:3d:d0:2d:71:44:22:05:64:e0:b4:cc:85:52:ac:37:
e6:75:2b:a8:69:dd:60:fb:da:89:cf:b9:61:87:e9:6a:8d:38:
34:43:52:a8:bd:1a:6b:b5:b9:f1:2c:07:6a:af:25:1a:71:32:
ae:0b:25:b7:65:7c:d7:61:1b:ca:7f:53:fe:df:14:69:e6:15:
e5:cb:2e:39:41:9a:b5:f6:bc:fc:cb:ae:10:a9:17:2d:c5:f8:
3d:38:b7:dd:a8:42:ff:c1:0e:c8:0f:01:d6:68:62:6c:cb:74:
c7:08:72:d4:fa:b9:0a:6a:62:2b:52:3d:7e:07:af:ac:39:e1:
ff:41:e1:06:df:9b:e7:54:48:4c:06:3a:9f:44:fe:36:9d:c5:
aa:c4:95:c9:a3:fc:ab:44:c3:87:e9:d4:ab:22:ee:f2:9c:86:
45:41:53:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PPmuz9hgE/v+n9o0ipbXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMmUyNDE0M2NjYWM2ZmU3NTkzNWNjMTE3NDIyNTllN2Zm
ODU5OGIwHhcNMjYwNDI3MTQwMTA3WhcNMjYwNDI4MTQwMTA3WjAzMTEwLwYDVQQD
EygyNmNmYmJmMzQ0YzZhMTEzMGIyMzQ5NzJiYzk1MGNmZTc0ZTYyM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2D9O+w/xhVpKImTIQKPaHpPPule
Rc+6jbGyvfmtT8cV2vPedTDtprjNxiGer0nuZ9HuIk9g5y0SdiKVMD9drPJXgfTE
CuQ74uMXmIcu9m1oYj9eQwCB0EgECSqOLojIcFow7W4zjMQjt29PyloQceNBDuv5
r/dR9NT5uNMpMI5+uuOqhj5WccZfzqY0/Zy8he/UNFZ+DjUekKVs5fjMVMQ+zJAI
EDf1sc7OS6qcqEBkBhgrf1Lj34CrGrsnP+0h/EEYxZJVMIyKZj4Ptt2uTOOgPsTl
i0DhqQ0jRexB/89Gb2zL6c6G0TQ24qM1Dof4WK8g5Gyk/Mw2ZCuiig9qNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbPu/NExqETCyNJcryVDP505iP8MB8GA1UdIwQY
MBaAFKEuJBQ8ysb+dZNcwRdCJZ5/+FmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hN2Q5ODEtYzYyZC00MWY5LTg5ODYt
ZjQ2ZDI0MzY0M2Y0LzEvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hN2Q5ODEtYzYyZC00MWY5LTg5ODYtZjQ2ZDI0MzY0M2Y0
LzEvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhIrnvGw
rNyu6vAevE2/dlJpvBJxZ63sEyoYZjq8uu84zpxRA3852jFATpD5cr+ZwEqgXBQR
iGVk9Mm6ZPseyRQNW1CcavdcpcqiAYIqaHqxYix8Aba6CY4gDFdxPdAtcUQiBWTg
tMyFUqw35nUrqGndYPvaic+5YYfpao04NENSqL0aa7W58SwHaq8lGnEyrgslt2V8
12Ebyn9T/t8UaeYV5csuOUGatfa8/MuuEKkXLcX4PTi33ahC/8EOyA8B1mhibMt0
xwhy1Pq5CmpiK1I9fgevrDnh/0HhBt+b51RITAY6n0T+Np3FqsSVyaP8q0TDh+nU
qyLu8pyGRUFTRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:19:47 2026 by rpki-client