Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: NYAF+Q+ysEONG4MXUGfNRnnE/8mZ4wwNw5NceJ+2VXc=
Subject key identifier: 88:CC:EB:D3:C7:05:37:B5:23:C6:DA:81:58:9F:9A:E3:44:3C:66:C3
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019D9B876B6A9A05F77A942808D85F402CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1418
Signing time: Fri 17 Apr 2026 13:00:36 +0000
Manifest this update: Fri 17 Apr 2026 13:00:36 +0000
Manifest next update: Sat 18 Apr 2026 13:00:36 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: v0LDm/Vm+O/fJPfubPANyGds78oYHTJaIHR+t4M0p1w=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:6b:6a:9a:05:f7:7a:94:28:08:d8:5f:40:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Apr 17 13:00:36 2026 GMT
Not After : Apr 18 13:00:36 2026 GMT
Subject: CN=88ccebd3c70537b523c6da81589f9ae3443c66c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0b:fd:4c:01:0d:d4:ce:77:bc:ca:8f:17:f0:
fd:d5:b8:fa:22:7f:f2:48:5c:c0:90:89:79:98:16:
37:65:34:b8:fb:9f:6c:7a:3e:00:1a:25:da:fd:b4:
9a:4f:10:8e:a3:95:fd:e4:3a:16:65:de:83:b2:19:
a8:b4:e6:3c:b3:59:d3:30:69:e3:40:01:57:b7:81:
d6:86:45:ff:33:f7:28:c8:04:a4:2d:b9:2d:99:a5:
ab:fc:1f:6d:f1:5c:5d:cb:31:e4:b4:02:81:e8:f3:
e8:5b:40:8c:5d:f2:56:8d:d9:f4:63:3a:af:77:2b:
34:fb:b3:49:81:c8:e7:b3:ec:d6:ce:28:71:f9:6e:
68:17:01:0f:6d:d6:9f:01:41:f6:ca:ee:08:25:95:
d2:ca:5f:3c:7f:bd:b3:03:5a:f2:bf:98:74:3b:08:
b4:d8:fe:29:ae:34:42:6c:e4:43:13:b9:0d:ce:a4:
6d:54:58:7a:37:d2:3e:52:ea:81:b8:cd:e9:f6:4f:
23:eb:71:ba:5a:4e:20:38:b3:3d:fa:7d:a6:2b:b4:
c3:2d:16:ba:83:fe:08:97:fd:f6:b0:63:c9:fa:3a:
0b:a7:17:cd:8f:db:85:c7:5a:5f:fc:fb:0c:b7:b4:
6c:5d:c6:00:06:f5:b9:a1:58:95:41:59:6d:2c:e4:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:EB:D3:C7:05:37:B5:23:C6:DA:81:58:9F:9A:E3:44:3C:66:C3
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:d9:ee:5d:ba:c2:03:11:5f:cb:2b:c0:26:03:e4:8e:89:
d7:0c:64:db:31:23:98:fa:8d:22:94:95:39:5a:a6:50:0c:a5:
08:7a:96:2f:7b:e6:3b:39:e9:15:0d:01:ea:b3:f9:07:46:38:
f0:58:32:96:5a:18:99:ad:a9:05:8c:d2:2f:36:02:e8:b6:dc:
de:bb:5c:1e:cc:0d:f0:0b:d2:74:8e:3a:fd:5a:49:66:7d:e6:
00:51:5e:a6:fa:50:d4:48:c6:0c:b0:77:f8:9c:70:32:00:65:
1f:dc:1c:f0:a2:a9:01:45:3d:77:38:29:3b:e0:91:ce:ff:a1:
35:89:a1:76:96:e2:3f:b2:3e:53:c8:2a:d9:a9:46:28:63:f7:
5b:13:c2:f3:d2:98:02:55:5d:60:c1:e9:ee:28:fc:52:22:4e:
97:24:91:b1:37:b2:ba:2f:e7:21:c5:76:3f:c3:16:cd:e2:6e:
91:9c:ba:a9:6e:d2:0d:69:fa:ed:f3:2d:93:48:6b:36:eb:5c:
05:07:be:4f:af:9f:cd:5e:5b:17:31:c6:78:fd:f9:bf:97:7a:
75:94:1b:8a:a7:e9:25:7d:de:d2:b4:da:80:6f:c5:24:1b:33:
ea:68:85:6b:41:7d:df:e7:1d:af:d7:5d:d1:46:2a:9d:99:35:
1b:6c:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:23 2026 by rpki-client