Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: u6HXBkBELXDL9v+W6D1QhMEPbffyDfMX7Tgi6XvhXHo=
Subject key identifier: 9D:7A:86:EC:45:47:C9:DE:18:93:32:F2:DF:40:F5:70:90:AE:AA:AE
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 019D9962EF7F5E6298777EB02BA5BD05C50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0860
Signing time: Fri 17 Apr 2026 03:01:30 +0000
Manifest this update: Fri 17 Apr 2026 03:01:30 +0000
Manifest next update: Sat 18 Apr 2026 03:01:30 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: UXgL6QD1zbIKPxfVWaxTUPONLF0lEk38cR+B2WnC3As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ef:7f:5e:62:98:77:7e:b0:2b:a5:bd:05:c5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Apr 17 03:01:30 2026 GMT
Not After : Apr 18 03:01:30 2026 GMT
Subject: CN=9d7a86ec4547c9de189332f2df40f57090aeaaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:df:cf:c8:1c:6c:fb:5a:b7:81:4b:7a:7f:
59:50:d3:22:30:fb:de:17:7e:c5:f2:9c:e4:76:4e:
17:79:45:f5:c4:21:3b:6b:f7:8f:23:2b:9f:7b:bc:
f1:64:4c:fa:ba:a2:32:60:78:be:0e:da:38:9b:d0:
58:63:f8:e7:64:6c:e3:9b:67:94:99:a0:10:3b:7f:
fb:be:98:a9:e4:4f:d0:42:bb:f1:39:2a:e9:cf:68:
16:7b:b9:01:07:fe:02:5e:02:9a:34:9c:79:3d:88:
2f:df:af:24:56:9c:3c:e9:eb:71:21:f1:c8:69:90:
00:24:b6:7b:75:47:ca:7e:8e:ae:f4:81:fe:b7:8a:
a9:c9:ba:b2:6c:79:43:e8:8b:e5:49:05:5d:58:7f:
54:7a:91:89:44:20:fc:0d:f1:36:fa:d0:ab:3d:95:
0a:75:a0:33:fc:5f:f5:ef:42:0a:86:a0:bf:12:44:
89:47:20:91:a7:ac:6d:2f:1a:a7:48:34:5d:b1:5d:
19:82:7b:40:53:04:20:b5:c0:20:1e:ee:d0:cf:51:
c8:fb:23:59:b1:d6:16:57:e3:67:1b:19:f1:03:f6:
52:35:bc:df:02:7a:1b:1e:2a:be:50:b5:fa:0a:d0:
da:e1:9f:60:c2:84:6a:7b:f4:15:fd:3a:d3:f4:5a:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:86:EC:45:47:C9:DE:18:93:32:F2:DF:40:F5:70:90:AE:AA:AE
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:7a:68:cc:e3:4c:cc:bb:99:03:18:01:ab:43:8e:bf:b3:
b0:8d:07:15:d2:d8:14:37:92:cc:3e:8e:9d:77:71:62:fe:31:
94:57:fb:41:2a:4f:a4:d5:e9:28:4e:b6:5c:a3:cc:2e:36:f6:
0d:85:01:73:e6:a1:cc:2d:57:4e:8c:8d:75:51:27:93:d0:dd:
81:57:b6:e6:a1:a8:33:a1:a3:1a:5a:0f:00:1c:70:84:65:98:
c4:d6:95:31:14:4c:7d:1f:21:a8:d6:c7:eb:4a:e7:f3:6b:71:
c2:b7:8d:df:8a:dd:b0:c3:52:45:99:cd:22:9a:b3:8d:ad:3b:
0b:72:b7:63:32:0f:1f:36:1f:e5:b1:e8:5b:4a:12:68:01:3a:
e2:36:9c:4c:e6:96:bb:ce:59:4f:06:37:88:43:a1:5e:14:63:
c5:3f:71:3d:ec:c0:ab:0c:1a:37:3c:e2:c9:f0:80:19:26:e7:
48:96:e5:92:3b:0f:f4:22:2c:4d:2a:fe:1c:68:cc:14:c6:1b:
d5:df:27:54:52:5c:a6:ed:e1:63:41:8c:8c:9d:bb:68:bc:2e:
4d:4d:bf:68:94:69:37:07:56:c3:eb:25:ee:7e:96:96:e3:b4:
d7:c5:21:fa:f5:b7:3c:db:d5:ae:94:fa:c8:8e:05:54:5a:62:
b3:17:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:44 2026 by rpki-client