Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: dOeDHvzwCWUtWazWps4dXCez61SFKm6oNHRQWZA1x7k=
Subject key identifier: C1:1F:AE:56:E2:6C:18:1A:64:0F:47:AF:B2:FE:BE:8D:C0:6D:EA:4B
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019DCF75E03D5A168F99802B381BBE7D2846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 0185
Signing time: Mon 27 Apr 2026 15:01:41 +0000
Manifest this update: Mon 27 Apr 2026 15:01:41 +0000
Manifest next update: Tue 28 Apr 2026 15:01:41 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: 0BuFIfR9AfsQsEcasQSHCX8A+lx/LGVdCtvOnlOzpJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:e0:3d:5a:16:8f:99:80:2b:38:1b:be:7d:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Apr 27 15:01:41 2026 GMT
Not After : Apr 28 15:01:41 2026 GMT
Subject: CN=c11fae56e26c181a640f47afb2febe8dc06dea4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:b6:91:8c:a9:d0:4f:bc:ee:d1:33:ab:86:
e1:57:54:7d:ed:79:82:2a:b2:94:58:bc:07:ec:47:
03:a3:00:bd:df:25:dc:c5:5a:08:ae:40:66:ff:b7:
42:21:96:42:80:40:cb:6c:89:ef:90:7d:c5:56:fc:
62:12:b8:2f:77:88:4a:d6:9d:26:c7:c7:81:c2:87:
70:5f:92:70:3a:a8:58:02:b0:9e:d9:77:7b:ee:01:
43:7b:ff:51:e1:0e:ef:0b:0d:72:1d:65:5f:ba:1a:
d7:c3:21:2d:a0:97:cf:6f:f6:e7:94:ff:22:20:c3:
cd:7f:ac:a1:45:64:60:f1:d8:1f:8f:ad:3d:b4:38:
50:e9:d1:c7:83:88:31:f7:27:9d:1c:e0:03:78:3e:
10:1a:ae:e1:76:dd:76:51:8b:43:89:e8:bf:c0:dc:
96:3b:0c:12:cd:72:9a:72:2f:2b:d1:31:87:45:c5:
b4:47:38:ec:83:37:39:00:95:3c:58:34:2c:b7:30:
ac:e8:4e:5d:21:78:1f:2f:79:07:5e:80:cf:06:86:
95:99:82:e6:1d:5f:5f:da:e6:52:ac:01:dd:03:f0:
63:a1:76:18:9d:64:8b:0a:d8:fe:04:19:45:1c:d0:
7e:4a:04:0a:54:b2:1c:20:2b:bf:80:ad:14:ed:9f:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:AE:56:E2:6C:18:1A:64:0F:47:AF:B2:FE:BE:8D:C0:6D:EA:4B
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:a9:15:49:cb:4a:00:0a:91:a0:d8:2b:2b:2e:5a:77:7c:
35:2f:25:08:89:2e:64:97:64:ff:a1:38:12:d1:b7:c7:ac:ae:
7a:c8:42:a3:59:7f:d3:34:b4:62:26:f2:1d:d7:5a:47:e4:d1:
77:ee:b1:cc:24:09:0d:56:2f:4e:6a:38:22:27:36:2a:4c:5c:
88:31:ea:64:2c:16:0a:6e:63:5b:b3:16:84:45:56:93:74:c3:
52:c7:76:70:45:15:57:7c:c2:f1:b7:08:75:1c:66:e4:bf:2e:
14:64:f1:d2:41:73:3d:6d:47:ec:de:60:da:59:85:37:60:2f:
b3:2a:ea:7c:bb:77:86:43:de:fb:7f:c8:1d:0d:0a:14:d4:0d:
90:02:23:d4:99:10:46:38:7e:4d:d7:07:a9:7a:ea:29:fd:9d:
76:ff:be:94:70:f6:52:06:2e:2b:16:c9:b9:a9:da:59:f0:aa:
28:f9:ea:a5:fd:73:02:3c:a5:34:57:e7:5f:37:31:ef:73:c5:
ba:2f:a4:59:57:c4:c3:93:01:9f:73:ad:ba:a8:9f:ff:d1:98:
c2:28:28:b2:ce:af:04:a7:29:d6:c8:c6:da:4c:c1:18:c3:98:
5a:d7:cd:99:85:ff:d0:58:75:28:a2:77:13:38:81:4a:69:76:
28:a5:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:49 2026 by rpki-client