Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: KMmSAOmnEd3xsoxx7TxKuE4ap54Fc0xz9lNjtYDsYFs=
Subject key identifier: 05:C2:6D:78:3F:19:E2:1B:97:61:59:2A:D7:34:86:E1:CA:0C:9B:37
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019DC070A093BB624EEE50B5300D2B3403A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 17FA
Signing time: Fri 24 Apr 2026 17:01:39 +0000
Manifest this update: Fri 24 Apr 2026 17:01:39 +0000
Manifest next update: Sat 25 Apr 2026 17:01:39 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: 47wgAhXTrvK5FXUkkHFpCwnWYKPCL/5W7Gpvs5zsUZ8=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:70:a0:93:bb:62:4e:ee:50:b5:30:0d:2b:34:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Apr 24 17:01:39 2026 GMT
Not After : Apr 25 17:01:39 2026 GMT
Subject: CN=05c26d783f19e21b9761592ad73486e1ca0c9b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:1c:c3:7b:ab:e4:d6:aa:8a:31:af:9a:1b:
dc:7a:5c:d3:8d:00:ff:87:f5:46:19:ce:e4:01:8d:
82:2f:3c:d9:45:08:58:fa:31:e7:4f:92:57:2e:89:
04:f0:8a:90:5c:2e:b7:56:22:da:02:62:80:e8:c1:
fb:e7:d9:71:15:45:93:3f:e3:90:47:bf:fe:db:6b:
1f:2c:60:bb:ba:6f:21:ba:52:9d:5b:8c:0b:c0:9e:
20:51:a3:d8:29:7e:d2:cb:9f:07:41:b1:de:8d:fa:
77:89:2b:83:f0:71:23:b2:b5:b0:e9:3d:7c:6d:6a:
5a:a4:34:c9:03:26:32:c4:11:5a:b5:94:33:de:f2:
32:aa:10:52:50:e9:53:1c:13:d0:5c:bc:66:5e:d0:
82:2c:ee:a6:2d:9a:ef:f7:2b:08:60:09:4f:83:41:
4b:53:e6:a9:1f:f3:3b:65:f2:48:9f:ea:07:b1:cf:
8c:2a:fc:38:58:81:d8:63:58:58:82:fc:50:2f:3b:
d1:86:78:7d:04:a2:fc:47:64:2b:52:80:e2:54:cc:
7d:5c:90:2e:b8:63:32:9d:03:3b:79:2f:43:3c:94:
40:37:ae:da:c3:61:65:a9:98:14:c3:44:01:ee:fe:
f6:6e:87:7e:b2:44:cd:d7:53:6c:6c:68:36:3a:8f:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:6D:78:3F:19:E2:1B:97:61:59:2A:D7:34:86:E1:CA:0C:9B:37
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:94:1b:ab:14:7f:f7:aa:3b:e3:e8:63:8f:23:d6:73:bd:
91:70:55:1b:ed:a9:27:74:fa:42:3c:ea:54:6f:3f:7d:9a:37:
c7:af:28:59:41:a6:1b:35:99:50:a8:e1:8e:42:f6:48:f9:87:
61:bd:86:62:36:65:2c:87:56:d4:ec:71:9f:3e:2b:30:56:c8:
fc:0b:b8:b7:11:73:f9:72:7d:3f:b4:d6:cb:fe:aa:0e:dd:d5:
18:0f:c7:f0:b5:b9:80:42:3f:61:c2:a1:85:95:25:ad:64:83:
12:9e:43:36:ba:e7:bc:0e:cb:54:3d:29:4e:24:6a:a4:56:d3:
b7:45:02:e1:4e:eb:7a:69:1d:66:de:b8:7d:52:40:82:c2:0e:
04:e1:f2:ea:0f:c5:cf:d5:ae:63:d1:a5:0d:49:c9:13:31:84:
77:14:b0:26:a2:9d:71:cc:5b:63:9f:af:67:41:af:29:90:76:
e6:ce:b8:4f:12:a0:0e:4b:c6:c0:9c:d3:3d:b5:d9:5c:42:0c:
a6:f4:35:ad:ae:c7:fa:47:ec:27:dd:90:1f:bd:2a:1e:84:bb:
1b:40:0b:34:26:92:97:cb:54:d5:99:44:44:fe:58:02:f2:a7:
77:c0:a6:da:a1:2f:b4:fb:8b:1e:76:1e:b9:58:7e:4b:6b:6f:
a0:a7:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 01:52:12 2026 by rpki-client