Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: jgmsTctaaejtuMXixxJp/DLT7bYedsrvPWy9MBmTdYI=
Subject key identifier: 55:38:BB:C9:5C:42:BF:A4:96:EA:0E:A4:3B:7E:26:B8:33:93:18:06
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019D99D086CEC99F8883640FF79A953A60A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 0653
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: xhQ71eOzYm8AbqlSKyPkkdZtACmVio66EFbOq9HiLqU=)
4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:86:ce:c9:9f:88:83:64:0f:f7:9a:95:3a:60:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=5538bbc95c42bfa496ea0ea43b7e26b833931806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:27:af:f3:0a:27:d2:b5:22:91:1a:5a:6e:
e6:fa:d7:ab:b7:dd:9f:1e:7a:34:96:a0:bc:8e:85:
72:ca:de:ac:06:b3:e8:ab:78:c9:82:45:81:aa:a7:
42:45:03:13:b8:f0:ce:d7:b4:7b:5b:bb:38:01:7f:
a0:ee:36:3e:f6:30:d3:c3:c4:52:cc:00:2f:bc:84:
92:5a:31:3d:30:93:4e:72:8c:22:89:96:04:b0:af:
d1:d0:31:49:0e:67:76:d2:2e:b5:65:1b:4d:ad:10:
20:30:22:b7:a4:83:52:8c:31:1c:22:ed:18:68:38:
a6:ca:14:33:fb:ba:30:dd:2c:95:bf:30:2f:0f:bd:
98:d6:6d:67:aa:df:3b:a1:3a:0d:2f:98:fc:8d:96:
82:f6:13:a8:22:16:6a:e8:4f:45:e5:a1:9e:e9:58:
f8:e9:3d:0b:11:36:67:2b:25:d2:11:5b:8e:19:25:
70:3d:63:31:69:84:23:5c:0f:e9:87:94:c2:ea:30:
c9:34:01:2c:d7:7b:17:ab:b0:0e:d7:1f:98:3d:1c:
3e:0f:ce:01:1f:cc:d6:ea:5d:18:a9:bd:6b:50:ec:
ca:01:70:9a:e4:0c:49:ad:32:a0:63:95:b7:62:1f:
89:dd:aa:99:f3:2e:1a:c2:07:c4:1b:a2:38:a3:8a:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:BB:C9:5C:42:BF:A4:96:EA:0E:A4:3B:7E:26:B8:33:93:18:06
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:5d:64:5e:42:58:01:b6:a3:3e:92:69:7b:68:7f:81:73:
2b:74:b8:b3:91:f6:ad:90:37:9b:68:81:bc:a4:31:7c:d9:7c:
12:0d:e2:03:6c:5c:64:f6:15:80:6c:3d:41:ea:a6:b0:bd:63:
68:c2:a0:15:26:84:a6:c2:49:ae:55:26:f2:14:a0:d7:88:6d:
c0:81:fa:e5:34:5d:51:c3:57:0b:a1:aa:0a:43:80:23:f6:b2:
37:63:ca:07:b0:75:17:df:1d:93:d4:be:a9:cf:97:40:a0:40:
8c:21:c6:06:37:93:a2:ec:ef:ef:a9:77:75:4d:93:f7:a5:b8:
96:79:65:f9:1f:0f:1e:56:36:9c:82:66:41:2d:ef:fb:5f:c6:
5e:b9:78:8d:ce:9e:28:56:a1:39:f1:50:e5:03:66:b1:cf:b2:
59:11:1e:12:11:f2:5a:f2:32:71:57:db:8a:fd:bb:83:df:e5:
b8:aa:43:66:f2:d6:c1:a9:20:15:a4:1e:bd:d2:9d:31:f7:5f:
98:12:e7:e1:cb:3b:c1:c9:0a:6e:2e:9e:39:4d:29:66:80:20:
62:ca:98:5f:89:84:6d:7e:5a:0b:c8:20:d3:05:ae:bc:c7:de:
b8:7e:72:fe:f2:91:da:fd:e8:35:34:c3:bf:d6:ea:a0:68:c9:
c1:4b:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:11 2026 by rpki-client