Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: sMrY01EfTh18r/0LhAhUIfDHUA3ySWdggs245bbsOgw=
Subject key identifier: F5:DB:53:81:D4:9C:11:97:3A:7A:D0:7F:1D:38:9A:29:32:9B:E8:40
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019DCDF58B68B5C6F6C268CEC3C6475DDBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 12BB
Signing time: Mon 27 Apr 2026 08:01:54 +0000
Manifest this update: Mon 27 Apr 2026 08:01:54 +0000
Manifest next update: Tue 28 Apr 2026 08:01:54 +0000
Files and hashes: 1: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
4: 5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa (hash: 8+JveaHaKY6ky/eCt3iJNlrey5awmCheN1pKka0rBh8=)
5: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: v3zV0W7rcy0gwykISEXpnTppyVNlweygm7mTu9+td/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:8b:68:b5:c6:f6:c2:68:ce:c3:c6:47:5d:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Apr 27 08:01:54 2026 GMT
Not After : Apr 28 08:01:54 2026 GMT
Subject: CN=f5db5381d49c11973a7ad07f1d389a29329be840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:6e:c7:a1:4f:52:a9:25:7c:82:54:89:80:
8d:d2:0a:ae:02:50:1a:ab:05:e9:a2:bb:71:f1:02:
d7:f6:a9:55:cf:e3:58:c1:2a:23:35:04:bd:00:22:
8b:fe:63:47:a5:76:e2:6f:d3:5e:cf:d0:91:9b:2f:
25:a4:cb:ce:b2:f5:af:35:f0:e7:8e:7e:09:62:1f:
47:08:80:36:db:36:8d:53:07:96:61:49:5d:d4:d9:
74:00:b8:ca:13:5b:06:ba:90:04:fd:74:0b:8d:f5:
15:2b:b1:7d:cc:10:70:eb:27:4c:62:64:0b:87:d0:
cb:b5:88:39:ae:40:64:22:c1:c3:e4:08:57:14:79:
40:90:92:88:98:a9:54:8a:55:01:6d:ab:1a:5e:65:
a0:e2:24:23:99:54:6e:f0:be:33:dc:7a:b2:af:6d:
3b:6d:58:c0:3d:ed:2d:08:8d:7a:c5:b3:92:44:c3:
ba:c5:3b:2e:7b:47:5f:88:de:f0:f4:0d:ab:5d:e1:
c5:04:56:c4:77:8d:dc:fb:4e:75:80:17:42:51:7a:
43:0b:45:d6:e4:fb:05:24:13:37:68:bd:e2:b9:6f:
e9:28:5d:c4:97:6d:67:5c:40:2e:82:95:49:a0:97:
ed:15:71:ac:be:2d:1d:d8:dc:b0:b0:1c:29:bc:5d:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:53:81:D4:9C:11:97:3A:7A:D0:7F:1D:38:9A:29:32:9B:E8:40
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e2:4a:ca:47:a6:a3:ea:51:5a:b4:b1:98:5e:9f:90:8e:ba:
10:25:01:4e:aa:62:6e:c4:e6:8d:f9:c0:2d:8a:05:b3:99:1c:
6c:a4:15:ba:4b:30:a7:5b:ed:92:a2:4e:ef:a8:3c:09:50:fe:
e0:fa:6e:c5:14:13:e1:ca:6a:51:22:0d:c4:7b:b1:0d:3f:42:
c5:d1:d4:10:c4:02:db:ae:8b:c4:19:07:53:7e:38:5a:1f:b8:
47:52:0f:c1:d0:19:79:2d:f0:e4:e6:c3:b9:1c:6c:91:0b:62:
01:57:0d:19:8d:38:d5:f0:e2:e0:25:30:a6:83:6c:d0:5c:e4:
26:18:23:db:35:92:cd:57:d3:77:3a:70:37:2b:41:fb:f3:3b:
f6:f2:6f:11:ee:32:2f:03:3d:9d:19:a0:60:2e:4b:e0:e4:cc:
80:59:93:13:d6:e4:b6:a0:23:3d:ac:d2:2d:d2:32:43:19:af:
ce:3b:24:f2:47:90:2f:95:22:00:36:f7:4c:8d:7e:42:ee:c9:
ec:e2:44:b5:0d:e5:40:03:cf:d7:22:81:2d:59:30:3c:bf:d3:
ec:f8:2f:00:0d:23:5e:3e:00:1e:05:57:23:d5:6a:f4:a5:52:
5c:7d:86:c7:aa:aa:5f:e5:9b:49:85:92:7e:27:37:7e:2d:cd:
60:cb:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:25:25 2026 by rpki-client