Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: +zzn9aPRJgZ/BHMELOPmgFaovv0K9CBjKx3oUSriahk=
Subject key identifier: A5:5A:2B:5C:43:11:01:E6:DC:73:ED:93:B6:E9:18:48:DF:CE:38:FF
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019D9B512C0520310E8B74E218D3F7DDF633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0E26
Signing time: Fri 17 Apr 2026 12:01:21 +0000
Manifest this update: Fri 17 Apr 2026 12:01:21 +0000
Manifest next update: Sat 18 Apr 2026 12:01:21 +0000
Files and hashes: 1: VJaaCilXSaMFiDpDj2m9Nu8DP6E.roa (hash: /Vwcg31kt8NZSUPOXZXkCRASkot9oBzCBAi0+AvtL2w=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: ZqrFDpD8m7npRv7UyxAtwoVpcDAAVdBxs66leeeNmgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:2c:05:20:31:0e:8b:74:e2:18:d3:f7:dd:f6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Apr 17 12:01:21 2026 GMT
Not After : Apr 18 12:01:21 2026 GMT
Subject: CN=a55a2b5c431101e6dc73ed93b6e91848dfce38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:ff:f2:6b:18:26:67:90:59:3b:72:a3:2a:
f1:32:bc:9c:6d:ae:47:f0:9e:cd:d5:37:02:94:ce:
5b:76:65:f8:7e:0b:7f:f7:67:b5:3b:a6:f8:e3:9c:
d6:9e:e3:3e:7c:27:f8:96:b1:1a:3a:97:14:48:69:
df:69:2b:84:96:ea:1b:ad:2b:9b:a6:8e:02:c8:69:
d5:d0:cf:c7:ae:9c:79:e1:55:04:92:f0:ba:89:91:
c1:e8:2a:8d:41:7e:ed:bf:f5:ab:c9:be:f7:bc:7b:
a8:b4:6d:a6:31:bd:2a:15:77:3a:0e:da:2e:8a:93:
e0:01:f4:04:e1:e6:de:79:eb:c6:a4:49:a9:b2:9b:
03:b4:99:6b:a9:c8:de:c9:e6:3d:7e:93:ac:f7:98:
ed:4e:24:d5:10:b6:94:8c:ec:55:cb:1f:e9:ed:af:
41:3a:69:d3:f4:c7:01:86:ce:38:7d:66:e8:fd:f3:
5b:4f:a2:15:d7:a2:d3:50:63:b1:25:d1:7a:56:b7:
7e:8e:9b:4f:a2:2f:73:cb:f7:c2:ce:c7:e7:e6:be:
67:52:f0:03:0f:19:3d:52:cc:af:df:0d:51:fc:fc:
f4:f6:05:99:49:c4:89:f1:5f:34:5f:84:f6:4f:b9:
80:56:d4:4b:0b:aa:5b:0e:6a:8a:e8:0a:94:70:5e:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:2B:5C:43:11:01:E6:DC:73:ED:93:B6:E9:18:48:DF:CE:38:FF
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:ee:83:95:cb:cc:c5:d7:85:3e:7f:d4:16:d7:36:2b:82:
db:fe:e7:c1:5a:ec:1f:5e:36:21:b6:a5:b3:21:bb:05:2b:f6:
6b:3d:7a:76:05:a3:5d:85:5c:aa:6e:4c:33:4b:f2:ec:12:34:
d8:c3:69:f2:c9:22:68:fd:3d:55:86:90:38:0b:0a:76:85:0c:
c7:ef:96:25:88:70:72:64:60:35:68:e8:7f:63:c9:1a:93:4a:
53:ec:66:bc:4b:fe:55:ef:d3:8f:47:54:c1:ef:b8:bc:c8:9a:
c5:48:b1:d2:14:98:b4:cd:c1:6a:f0:c6:20:41:39:b5:44:c4:
a8:86:d7:2e:23:5c:38:d1:73:fe:5d:f8:41:ef:0a:d4:2c:5f:
70:53:d8:4b:8f:94:4f:25:63:21:aa:6e:75:44:33:78:ae:21:
71:ee:eb:e1:b0:4e:4d:0b:fa:bf:8a:a9:44:e9:85:62:41:70:
1e:18:f9:76:14:95:bc:76:89:b7:de:e4:13:4a:34:7f:2e:8a:
a5:3c:cd:cb:d6:cd:b1:de:09:21:21:98:4b:ec:81:b9:bc:9b:
2c:02:87:bf:b4:33:f5:22:f2:01:2e:59:1e:ae:b7:ad:3b:bc:
56:2f:eb:5a:79:a6:a8:2a:a9:ea:d1:f5:c3:08:1d:46:d1:a4:
90:b4:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:10 2026 by rpki-client