Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: 0VlTOg84WCc16jgfEgD4TxeYG0t7ulgSf5auqD5kIbg=
Subject key identifier: C2:4E:8F:9D:83:3E:E7:C9:EC:8F:74:BC:D8:8E:CE:DA:B6:34:75:09
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019DD19A123928BFB88EF125DA594F546822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 18E0
Signing time: Tue 28 Apr 2026 01:00:28 +0000
Manifest this update: Tue 28 Apr 2026 01:00:28 +0000
Manifest next update: Wed 29 Apr 2026 01:00:28 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 8f3pe4Xk1jlDAmFkmuyr+unN0fLCKGXsZKmnKFsjRuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:12:39:28:bf:b8:8e:f1:25:da:59:4f:54:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Apr 28 01:00:28 2026 GMT
Not After : Apr 29 01:00:28 2026 GMT
Subject: CN=c24e8f9d833ee7c9ec8f74bcd88ecedab6347509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:e0:1c:48:49:19:d0:fa:3f:ba:b9:ac:0b:
c2:6b:9e:b0:89:6e:a1:b9:83:c1:ea:6e:5c:93:12:
1a:6b:b3:06:12:ce:19:52:e8:5a:4d:b4:a6:00:32:
ed:d4:3a:57:96:63:f3:f0:c1:68:ab:ef:da:76:26:
96:8f:51:ac:bb:7a:cf:41:7f:ca:ca:35:98:61:e7:
d1:c1:bc:d2:35:a9:0c:cd:dd:ad:a8:ab:78:93:18:
03:9e:5d:47:47:45:c5:67:74:8a:cd:34:c2:46:e4:
c5:54:9d:a4:49:62:6c:ff:aa:cb:33:4f:d0:13:76:
e8:61:5d:14:f7:9e:4d:a4:70:a2:8e:d9:14:0b:1e:
f4:03:d5:aa:37:3a:fe:ab:1d:c9:3e:8d:bc:91:60:
d6:72:bf:1c:f0:e6:e0:b5:71:80:9b:b2:b4:88:69:
6a:dc:91:78:67:c2:3d:e0:c1:c0:c3:26:37:9c:7d:
bc:95:9a:c3:77:0f:1a:1e:bc:a6:ae:e8:b3:47:49:
f7:37:7b:e5:d5:f2:6f:66:a4:32:c0:22:16:02:ff:
aa:3b:9a:65:fe:d8:88:a7:bf:92:f4:89:3a:7c:34:
53:94:c6:59:fb:88:5b:45:5f:74:0f:72:d4:46:4d:
d8:da:ef:b6:76:5c:28:0c:9c:e2:ae:3a:b6:18:db:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:8F:9D:83:3E:E7:C9:EC:8F:74:BC:D8:8E:CE:DA:B6:34:75:09
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:b7:28:3d:82:17:22:13:1c:d8:ec:1b:9b:d7:c6:9c:63:
5e:13:78:75:ff:3e:96:c2:c4:bc:a3:13:b0:83:2c:1a:5c:8a:
4e:8f:82:be:83:5d:67:3a:d7:81:1a:8f:43:5d:5c:ea:c2:5e:
00:e1:a8:d2:7d:11:72:e7:61:0b:f7:6d:51:22:dc:30:94:29:
82:39:b2:6b:1b:d9:74:d4:25:9b:1a:2e:3e:34:4f:5a:62:89:
5d:91:35:fe:0a:fd:2a:89:90:9d:06:00:e7:c9:3b:ef:ae:3b:
d7:32:14:2b:14:8c:58:6a:47:c7:87:72:0e:12:1d:5b:cc:29:
cb:b9:f7:62:f5:88:ac:b0:90:62:81:69:0c:4e:d0:d0:0b:74:
b4:83:0c:92:e8:d2:8e:8a:87:9d:44:29:3c:e6:2c:ab:28:8a:
3f:f3:f9:06:5c:55:0a:d9:f4:7b:0e:df:e2:2b:a3:b8:81:06:
cb:65:4f:96:77:c4:e0:54:ca:dd:3d:29:82:09:af:1e:e0:73:
4a:c8:53:fd:09:b0:75:34:14:73:13:c2:49:59:3c:4e:24:01:
a6:08:c3:e0:d1:94:ee:d4:3e:79:8f:0e:08:24:9a:60:d5:d1:
85:56:29:cb:83:a9:f1:b2:13:ae:cb:6f:ad:6f:9c:be:34:d7:
10:72:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:08:03 2026 by rpki-client