Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: TqcxztweT+QD54R0P9vs5A6mmGNPVFxwJ8LDqbxkBdg=
Subject key identifier: 3E:C9:2B:C3:E9:C1:E3:D7:8B:45:8B:57:2F:24:0E:7A:EC:84:21:50
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 019DCED0677F4B1BB21968D3558FE50DD83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 1D
Signing time: Mon 27 Apr 2026 12:00:57 +0000
Manifest this update: Mon 27 Apr 2026 12:00:57 +0000
Manifest next update: Tue 28 Apr 2026 12:00:57 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: xK1LrpAcVK3TrmNxVpcWPLpfOSJJo38xlvvqR1+KHHw=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:67:7f:4b:1b:b2:19:68:d3:55:8f:e5:0d:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Apr 27 12:00:57 2026 GMT
Not After : Apr 28 12:00:57 2026 GMT
Subject: CN=3ec92bc3e9c1e3d78b458b572f240e7aec842150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:98:7b:bf:e3:82:f0:ea:b3:6a:b7:1c:30:
6a:b1:99:6d:28:03:21:da:40:5e:be:81:d0:b9:90:
96:d7:a2:1c:8f:1f:8f:bd:0a:59:50:d5:36:86:4b:
eb:ed:b9:ea:b2:7c:10:21:5a:c9:fe:38:98:cf:e0:
d3:1b:ac:7e:87:57:8b:4a:46:be:db:2b:6e:ee:27:
88:07:8c:a2:e7:79:fc:db:26:f8:ae:4b:c9:74:32:
50:6d:1b:cd:b9:4a:74:d7:8a:00:a1:30:64:04:3c:
c5:e3:b3:0c:8c:1c:cb:37:27:66:ed:6f:74:fa:ac:
3e:08:a8:3c:e3:24:04:92:b3:de:21:9b:11:b1:48:
9f:5c:0a:2d:55:62:14:3f:b9:1b:c9:68:2e:1e:e4:
90:58:a1:12:6f:c7:0b:5e:90:d0:d8:0d:a4:88:fc:
70:31:ad:e3:96:8d:9f:79:ee:cf:54:6e:19:cf:50:
3a:17:c6:43:55:2c:70:3a:fd:65:bc:8f:63:82:06:
5c:99:15:64:0f:40:90:eb:63:b5:18:2d:cb:53:3b:
40:a5:31:cd:d9:6b:a4:e0:5e:d4:92:65:02:55:6b:
ce:86:2b:e8:30:85:8a:22:48:36:ff:3d:da:5c:7b:
f0:f7:47:12:5a:c2:9e:9f:95:87:65:34:68:5a:09:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:2B:C3:E9:C1:E3:D7:8B:45:8B:57:2F:24:0E:7A:EC:84:21:50
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:70:13:0e:9c:1a:37:5c:0c:ca:db:b7:1b:c8:62:13:8f:9b:
22:a7:bb:a4:e9:20:f0:81:90:35:36:32:8c:3d:35:b9:75:ef:
43:09:15:e6:c0:3d:d8:7c:33:cd:11:88:8c:08:42:d2:79:05:
55:7b:3b:79:e8:a3:54:1d:42:b4:b0:f9:65:96:da:b7:3a:90:
0d:8d:2c:9d:76:c4:a8:5f:35:e5:84:b0:7c:89:16:06:62:f5:
f9:dd:ca:87:f3:98:36:e2:c9:7a:a9:3d:43:23:ab:b5:74:7f:
29:7c:00:f6:49:6b:78:49:c7:f3:54:71:50:4a:77:92:51:4b:
a4:00:48:c3:1a:2b:05:e9:ff:24:9c:59:16:bc:0e:c3:9f:83:
e6:86:28:87:83:c9:f9:da:d5:a4:24:4c:a8:26:e3:9e:b8:93:
2a:2f:3c:f8:06:60:91:12:6a:0e:0b:1f:c8:37:99:f0:e9:38:
9e:22:1d:41:6b:75:46:d6:b0:17:98:6e:86:75:3f:51:05:d7:
e4:c8:47:94:b6:8d:ce:db:e6:61:90:c6:16:fe:6d:d5:f8:9b:
7f:e6:d4:99:8f:9f:77:3a:c6:fe:d2:cd:0f:a6:ca:2b:07:36:
3b:e0:7d:d8:c9:b4:57:03:15:d9:56:5d:81:9b:56:1f:1a:2f:
79:f6:c4:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0Gd/SxuyGWjTVY/lDdg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzJhMTczODBlOGUyNTg5OGRlYTljMjIzMzIxYTJhY2U1
MjM2ZjEwHhcNMjYwNDI3MTIwMDU3WhcNMjYwNDI4MTIwMDU3WjAzMTEwLwYDVQQD
EygzZWM5MmJjM2U5YzFlM2Q3OGI0NThiNTcyZjI0MGU3YWVjODQyMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6+Ye7/jgvDqs2q3HDBqsZltKAMh
2kBevoHQuZCW16Icjx+PvQpZUNU2hkvr7bnqsnwQIVrJ/jiYz+DTG6x+h1eLSka+
2ytu7ieIB4yi53n82yb4rkvJdDJQbRvNuUp014oAoTBkBDzF47MMjBzLNydm7W90
+qw+CKg84yQEkrPeIZsRsUifXAotVWIUP7kbyWguHuSQWKESb8cLXpDQ2A2kiPxw
Ma3jlo2fee7PVG4Zz1A6F8ZDVSxwOv1lvI9jggZcmRVkD0CQ62O1GC3LUztApTHN
2Wuk4F7UkmUCVWvOhivoMIWKIkg2/z3aXHvw90cSWsKen5WHZTRoWgktVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7JK8PpwePXi0WLVy8kDnrshCFQMB8GA1UdIwQY
MBaAFKIyoXOA6OJYmN6pwiMyGirOUjbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pLaGM0RG80bGlZM3FuQ0l6SWFLczVTTnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lNDE2M2ItYTJkMi00YTQ4LTg2NDgt
YTIzMGYyMDE3MzM4LzEvb2pLaGM0RG80bGlZM3FuQ0l6SWFLczVTTnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lNDE2M2ItYTJkMi00YTQ4LTg2NDgtYTIzMGYyMDE3MzM4
LzEvb2pLaGM0RG80bGlZM3FuQ0l6SWFLczVTTnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnATDpwa
N1wMytu3G8hiE4+bIqe7pOkg8IGQNTYyjD01uXXvQwkV5sA92HwzzRGIjAhC0nkF
VXs7eeijVB1CtLD5ZZbatzqQDY0snXbEqF815YSwfIkWBmL1+d3Kh/OYNuLJeqk9
QyOrtXR/KXwA9klreEnH81RxUEp3klFLpABIwxorBen/JJxZFrwOw5+D5oYoh4PJ
+drVpCRMqCbjnriTKi88+AZgkRJqDgsfyDeZ8Ok4niIdQWt1RtawF5huhnU/UQXX
5MhHlLaNztvmYZDGFv5t1fibf+bUmY+fdzrG/tLND6bKKwc2O+B92Mm0VwMV2VZd
gZtWHxovefbEew==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:57 2026 by rpki-client