Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: eFUtKjGWHe80kixiPqajcGYFjg2MbO1M7uFpia7snv4=
Subject key identifier: F7:A2:E8:8F:78:26:B5:A7:39:08:8C:D4:C9:F4:7E:AB:39:41:21:6F
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019D9AABBAC36B5AFA1C2D3CA02BDC58EFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1841
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: yWR6sK6fepIrKOSN1g78EzEUDlToRNN5emyXNuFed08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ba:c3:6b:5a:fa:1c:2d:3c:a0:2b:dc:58:ef:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=f7a2e88f7826b5a739088cd4c9f47eab3941216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:40:b8:34:3d:c7:3a:26:44:5f:51:a4:36:
1b:ae:4d:73:9d:5b:38:b4:3c:42:b4:6a:10:33:ac:
9d:f7:f4:08:bc:4b:00:df:2f:bc:9a:d5:8d:82:fd:
b4:b0:f7:ca:a1:62:a2:de:cc:14:05:b0:c7:c2:32:
71:87:b8:19:25:f3:4b:fb:d4:f3:f2:ee:3f:cc:80:
84:e3:14:59:e9:3c:c4:74:9f:ca:1d:d1:20:ab:7c:
50:ea:32:bb:ff:7e:0f:0e:c8:e6:68:0d:d0:25:e5:
de:6d:7c:cb:c3:08:01:f9:b7:4e:71:23:17:50:05:
44:d6:62:93:10:80:ee:53:e0:b9:68:42:95:73:e3:
47:2a:63:f6:bd:59:bf:a3:58:12:d9:b9:a9:2d:49:
0b:f7:f6:15:c4:9d:5f:48:5e:12:16:50:26:07:c1:
0e:06:9f:42:b2:c5:cd:07:af:dc:64:20:1e:c1:a0:
41:4e:50:5b:da:66:6c:13:6a:b4:57:9e:20:52:2f:
40:d1:fd:41:b1:32:99:4a:2b:2c:73:68:bc:2c:f9:
1e:f9:b5:b1:50:72:77:16:0d:f5:77:40:4c:8e:53:
c9:70:93:93:64:71:05:6c:03:bb:9f:ec:1c:59:f6:
f6:67:9f:60:dc:09:ef:75:e8:0f:2d:b7:52:0f:55:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:E8:8F:78:26:B5:A7:39:08:8C:D4:C9:F4:7E:AB:39:41:21:6F
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3d:77:69:72:5f:63:52:f4:e0:01:31:9e:af:c0:b6:37:fa:
fd:eb:d8:e0:db:79:19:c4:f4:d1:7a:98:12:98:73:00:f6:fc:
07:3e:85:ae:10:e8:28:32:22:80:fa:ba:4b:70:76:ec:e1:36:
73:af:f8:86:2c:2a:eb:da:1e:5b:69:6f:01:24:10:9f:69:cb:
d8:49:5f:44:41:dd:d2:3a:a2:5b:8b:6f:5b:e9:e3:17:ca:7b:
0f:88:2d:c0:db:c8:8f:bb:81:91:1c:fd:e7:ce:a6:9a:de:af:
46:3c:9d:91:4e:5a:d9:33:cc:d2:b4:d0:d4:2b:7b:fd:f2:6f:
c9:ef:7a:d1:bc:00:3b:01:df:62:82:3e:d0:30:c3:d9:e3:0b:
6b:d7:60:96:e2:4c:9d:04:86:71:d4:29:82:fb:a7:f5:c9:45:
28:dc:38:bd:4a:97:75:f2:e1:4a:e2:8c:27:d4:d4:28:8d:cd:
60:4c:d3:da:8d:ee:2d:c2:f1:82:27:a3:8b:5d:d9:ff:f5:e1:
48:30:11:99:7c:20:e6:4f:cc:da:a4:a1:f8:e2:9f:ea:79:bd:
d7:8d:d1:f1:2d:7c:3d:5f:59:94:7a:bf:ca:00:26:ab:5d:9a:
c6:6f:ba:87:b0:6f:ba:f5:cb:6f:e3:43:df:8d:60:ab:37:40:
55:45:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:41 2026 by rpki-client