Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: tK5NcxngvisdVvvGD/+ghOPvGouRxbrNMtFnbvrp3m0=
Subject key identifier: 59:1B:3E:94:07:74:5C:3B:C9:DE:07:93:CB:E2:9D:DA:03:26:26:E5
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019DA7C317071F6201AFC6793435E6BF0327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 13E7
Signing time: Sun 19 Apr 2026 22:01:13 +0000
Manifest this update: Sun 19 Apr 2026 22:01:13 +0000
Manifest next update: Mon 20 Apr 2026 22:01:13 +0000
Files and hashes: 1: 4GPF89WAgnUGZriA9ptZSO-T4Cw.roa (hash: XFSu2XLv7vsDUbhfxd0ND/Cuvi1jJWGEcqXPPJPZ9So=)
2: 64rrEASv-BoNZyRK9yZ16W29oTQ.roa (hash: w8eD21Xmt1XkyLoIbHqWreG+9516iIJY6+/unbkEvgA=)
3: GouOZzqtvm5n6Mf6GERm7SmKJik.roa (hash: DnkVplXCGtIXUxBO+/VYhx1ClIvPTPEOEg8ff9BpzWI=)
4: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: IfXlMAWbF6lJ6jDO/eoA5bQOJ6hzAI1kGtg2XTErPAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:c3:17:07:1f:62:01:af:c6:79:34:35:e6:bf:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Apr 19 22:01:13 2026 GMT
Not After : Apr 20 22:01:13 2026 GMT
Subject: CN=591b3e9407745c3bc9de0793cbe29dda032626e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:b4:ce:d3:3c:d2:08:29:aa:d4:8b:7e:8a:
47:18:57:85:5e:67:95:66:c6:6f:e0:70:a4:cb:81:
7c:97:0b:17:ff:4e:29:e9:3d:b3:02:a4:61:70:4f:
dc:18:e2:ff:fc:7d:98:d8:07:51:4f:2d:54:c8:3d:
67:45:76:0f:95:c9:2e:f4:06:05:e5:67:ff:26:66:
d8:ae:fa:de:d0:53:44:4f:da:d5:6d:c5:18:16:46:
ca:ab:e1:2f:aa:14:00:6f:4a:a4:02:6e:1d:57:8a:
98:3a:b9:94:40:d3:d6:3b:00:a5:1a:76:49:fc:94:
d9:c1:fc:d0:37:e2:a9:bd:bd:9f:c8:7a:2f:80:55:
12:bb:ea:a9:b8:04:bc:a0:61:cf:16:d5:f2:db:ea:
32:95:48:cb:1a:f8:c8:4b:64:e5:6b:4c:8a:5c:2e:
e0:16:f5:75:59:ef:8e:2c:01:f2:38:a3:ff:10:76:
7b:df:5a:78:b3:13:7c:bf:65:7c:3c:50:74:48:a8:
b6:e7:c0:15:1c:f4:29:ad:4e:d7:1c:d6:94:de:7d:
4d:ac:64:82:43:01:1f:0e:9c:f1:12:8c:d0:69:df:
1a:cd:8a:b6:b5:27:3c:aa:00:68:e9:04:62:68:72:
4e:bd:56:2c:8c:a6:d8:56:97:90:6b:4e:0f:89:10:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1B:3E:94:07:74:5C:3B:C9:DE:07:93:CB:E2:9D:DA:03:26:26:E5
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c8:04:9e:65:fe:10:84:57:cb:dd:6d:74:09:53:1d:4a:56:
52:af:76:6c:55:6d:c7:83:16:3c:69:32:db:01:82:8e:dd:5d:
d7:ee:e5:c1:5b:32:95:72:2e:c0:1b:c8:43:a8:3d:7b:69:02:
db:6f:e6:89:b4:32:9c:27:50:31:b1:ab:6f:07:0b:bc:e7:56:
1a:02:d0:bd:f6:c0:21:47:1a:b9:6f:04:1a:3a:56:52:e7:34:
87:a4:10:c3:01:96:26:d2:2f:04:88:02:71:20:ad:48:48:bc:
4c:29:4a:f7:da:89:a9:e4:6d:6f:3e:d0:2c:a7:19:7d:94:80:
3e:10:af:30:23:21:5d:ce:8d:c4:b3:9a:8f:0e:f8:f4:06:c4:
a5:a7:4c:63:85:4e:73:71:dd:bb:4f:8b:b0:49:65:cd:47:dd:
56:0e:c9:07:53:2c:6f:9f:c0:59:32:9c:cf:ba:8d:db:df:e7:
57:78:92:e2:7a:38:be:ae:c7:79:97:5b:b0:db:81:2d:91:d0:
e1:ca:d2:0b:af:5d:93:30:a5:4f:84:e9:99:dc:35:97:08:11:
01:93:4c:7a:88:ed:73:3b:02:7e:b7:c5:c3:9d:85:43:58:1e:
7d:88:60:39:68:d2:f4:dd:c2:dc:65:b2:a1:2f:d0:5e:4c:42:
bc:ad:cf:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2nwxcHH2IBr8Z5NDXmvwMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjYwNDE5MjIwMTEzWhcNMjYwNDIwMjIwMTEzWjAzMTEwLwYDVQQD
Eyg1OTFiM2U5NDA3NzQ1YzNiYzlkZTA3OTNjYmUyOWRkYTAzMjYyNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj60ztM80ggpqtSLfopHGFeFXmeV
ZsZv4HCky4F8lwsX/04p6T2zAqRhcE/cGOL//H2Y2AdRTy1UyD1nRXYPlcku9AYF
5Wf/JmbYrvre0FNET9rVbcUYFkbKq+EvqhQAb0qkAm4dV4qYOrmUQNPWOwClGnZJ
/JTZwfzQN+Kpvb2fyHovgFUSu+qpuAS8oGHPFtXy2+oylUjLGvjIS2Tla0yKXC7g
FvV1We+OLAHyOKP/EHZ731p4sxN8v2V8PFB0SKi258AVHPQprU7XHNaU3n1NrGSC
QwEfDpzxEozQad8azYq2tSc8qgBo6QRiaHJOvVYsjKbYVpeQa04PiRCW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkbPpQHdFw7yd4Hk8vindoDJiblMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8gEnmX+
EIRXy91tdAlTHUpWUq92bFVtx4MWPGky2wGCjt1d1+7lwVsylXIuwBvIQ6g9e2kC
22/mibQynCdQMbGrbwcLvOdWGgLQvfbAIUcauW8EGjpWUuc0h6QQwwGWJtIvBIgC
cSCtSEi8TClK99qJqeRtbz7QLKcZfZSAPhCvMCMhXc6NxLOajw749AbEpadMY4VO
c3Hdu0+LsEllzUfdVg7JB1Msb5/AWTKcz7qN29/nV3iS4no4vq7HeZdbsNuBLZHQ
4crSC69dkzClT4Tpmdw1lwgRAZNMeojtczsCfrfFw52FQ1gefYhgOWjS9N3C3GWy
oS/QXkxCvK3P0w==
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:26:55 2026 by rpki-client