Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier: y7rACSUmGTkWGto7fjgp2Rs6WBdbYFaTft2iePTqW9c=
Subject key identifier: F8:41:FF:98:EA:8E:55:A7:FF:E0:08:ED:4E:D9:E0:65:3C:E6:A8:39
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 019DCDF4E38FCB3859F608A76C39B2415516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number: 15A0
Signing time: Mon 27 Apr 2026 08:01:11 +0000
Manifest this update: Mon 27 Apr 2026 08:01:11 +0000
Manifest next update: Tue 28 Apr 2026 08:01:11 +0000
Files and hashes: 1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: lYOTGgTmvMtZcUkX7bE1PP/TlfPEk5QYJ3jQQ+7Ft2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:e3:8f:cb:38:59:f6:08:a7:6c:39:b2:41:55:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Apr 27 08:01:11 2026 GMT
Not After : Apr 28 08:01:11 2026 GMT
Subject: CN=f841ff98ea8e55a7ffe008ed4ed9e0653ce6a839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:b9:13:c5:93:a3:5b:a0:d3:11:8a:ec:4e:
60:94:b4:a9:9a:2e:c5:6f:79:af:c5:92:3c:46:9d:
cc:41:72:2c:3e:7c:02:5b:bd:6b:bd:07:58:31:dd:
29:af:e5:db:ae:76:69:8e:11:23:e1:11:2d:50:3c:
71:bf:58:36:26:b2:f8:56:fe:bc:63:74:80:9c:24:
8d:1e:a5:17:33:d3:00:3a:57:ba:6b:59:71:de:05:
24:d0:e6:a8:a2:d7:f6:03:5f:59:bf:c1:f4:fb:12:
56:ee:c1:96:c1:17:d7:aa:a2:42:2d:86:38:47:b1:
81:41:26:35:bb:d3:65:7f:aa:05:28:1c:04:b0:0e:
c5:6f:43:05:60:37:36:ab:36:5e:01:d0:47:ef:7c:
81:7a:3f:78:67:f0:d4:24:cd:76:1d:49:0a:06:0e:
a1:49:6c:77:70:10:3c:1c:1e:69:40:9e:09:ed:24:
fc:85:c1:d8:eb:e9:15:e5:b2:21:aa:2c:94:da:b5:
1a:a3:10:5c:e7:55:0a:ab:d1:66:c2:a6:73:2e:cc:
c2:2c:a9:65:45:98:8d:30:06:35:90:34:ef:14:19:
fc:38:69:41:08:3d:20:9c:22:6a:8a:ee:ec:2d:60:
8b:d7:0f:e4:63:6c:20:59:fd:6f:7d:c5:d4:0f:80:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:FF:98:EA:8E:55:A7:FF:E0:08:ED:4E:D9:E0:65:3C:E6:A8:39
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:81:61:35:46:c2:f3:4a:4e:3c:56:50:90:dc:e9:f5:f1:a2:
f2:f5:2d:96:f3:81:7f:ef:63:b2:73:d1:2a:92:30:82:0d:a0:
81:15:87:6b:9f:7b:06:d6:67:a4:18:d5:ab:c9:3e:41:d1:d7:
33:b4:7c:2f:57:5f:dc:5c:7f:3e:10:0e:ff:d0:58:5f:14:dd:
35:1d:b3:c1:ff:13:06:18:30:86:cb:c4:f1:b9:06:e0:9b:c0:
4c:14:af:f7:86:4e:fd:ba:23:72:6b:fd:87:d9:ee:f3:b6:3f:
59:5c:33:e5:0a:02:56:57:8d:21:7c:b4:18:86:d8:91:3b:c3:
e4:06:d4:7f:f9:de:fc:35:93:db:7b:64:42:9c:a5:5c:b5:2f:
a9:80:c8:52:af:71:12:f1:c3:6e:fd:b5:46:e9:86:c3:32:a9:
74:65:4f:20:6a:04:61:aa:ec:08:70:7a:e0:7d:f6:b7:c7:a5:
7e:85:61:24:1b:17:aa:87:ba:0a:6d:b0:6a:c8:56:4b:df:3b:
1b:57:b1:e8:2d:c0:44:02:a7:87:d2:f1:97:ce:2e:86:45:07:
d6:17:4b:86:66:e5:4d:3a:c6:f3:6b:eb:19:27:1c:1c:d6:7a:
c9:50:b0:7e:fd:17:01:df:15:a8:c2:9b:52:c9:c4:3b:9f:75:
94:35:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:49 2026 by rpki-client