Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: MZWXBOGIdNJkJVWrG491vxpCT32z706yFKitsqPEHkk=
Subject key identifier: 5D:BB:AA:B6:DA:0D:EB:68:97:3A:F1:D3:7F:C2:0C:D7:C2:08:97:0B
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 019D98BE087987EB9C09FC1DDF416E47311E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 163A
Signing time: Fri 17 Apr 2026 00:01:23 +0000
Manifest this update: Fri 17 Apr 2026 00:01:23 +0000
Manifest next update: Sat 18 Apr 2026 00:01:23 +0000
Files and hashes: 1: 6NIaTUJDouCrOz0JAuSF_NduOwA.roa (hash: hDytd6duXPNmzRp/8kY+LISu/ZM6ohz2sTIHpo5hKjg=)
2: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: UJ4neGoO+Ykyv7fOAVb/aP91xCp40q1Srg4gxhlSipE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:08:79:87:eb:9c:09:fc:1d:df:41:6e:47:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Apr 17 00:01:23 2026 GMT
Not After : Apr 18 00:01:23 2026 GMT
Subject: CN=5dbbaab6da0deb68973af1d37fc20cd7c208970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:a1:7a:27:e5:67:d8:93:12:82:35:01:18:
1e:7a:c8:fd:59:fb:77:d2:1a:be:77:4d:8c:1f:b6:
2c:14:80:4b:5d:46:7b:4f:cb:a8:55:87:49:92:34:
7e:57:55:dd:7f:0c:c8:50:0d:f5:1c:d6:2b:70:57:
ec:75:2d:7a:65:ee:b9:84:d0:7f:4f:84:c9:f3:cb:
94:4a:33:90:5d:d6:fe:89:67:a1:78:bc:ed:52:75:
41:16:4d:49:30:69:1e:4a:a3:59:73:8a:96:5d:47:
eb:e9:8a:76:77:4e:43:dd:7f:70:88:38:72:9d:cf:
f4:fc:27:d0:ba:51:68:3e:4b:97:29:1d:e1:d9:6e:
15:70:2c:6b:50:53:02:fb:3c:5d:63:9f:dc:0f:64:
c0:6f:e8:b9:f6:4c:1e:64:6a:73:2b:60:f4:51:80:
ae:74:cc:e0:12:89:4b:a1:f9:4b:4a:1a:31:b0:62:
a3:b0:e6:ea:a6:96:1d:bb:72:5e:91:9e:53:c8:07:
6d:68:f5:9c:ab:a3:81:af:de:7d:ae:ec:45:1c:7f:
66:08:87:c2:3f:4d:33:21:0f:31:34:70:5c:01:df:
68:c4:2f:58:aa:63:60:c6:2c:aa:aa:87:42:df:b7:
06:5c:10:ee:73:60:59:e3:42:2d:c2:ad:92:35:cf:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:AA:B6:DA:0D:EB:68:97:3A:F1:D3:7F:C2:0C:D7:C2:08:97:0B
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:bd:e8:58:7a:63:6d:fd:ba:f6:64:52:51:8f:56:0b:ca:
2a:23:de:ed:6f:ef:a9:f8:e9:e7:69:cc:c6:e9:90:38:5a:76:
86:4b:3e:4e:ff:14:de:86:05:2e:ef:02:7c:33:f7:a0:56:8a:
55:13:a8:70:8c:9a:9d:d2:eb:9f:52:71:4d:33:da:ae:59:ce:
91:ef:0e:65:61:9d:78:7d:36:a9:43:2c:48:bb:ea:ac:e2:f9:
fb:c0:cf:a5:dd:97:8a:5e:79:31:6a:0d:b8:de:98:ba:e7:66:
78:4c:04:f0:26:92:6d:03:8e:b3:ae:a0:d7:1a:3c:b2:e0:b3:
ad:e0:14:41:60:8b:c2:2e:02:0e:3f:2b:0d:d1:fe:b4:70:2b:
4a:09:af:8d:7d:bc:06:be:8d:a0:67:08:9e:8f:19:85:91:18:
ff:3d:f1:18:99:63:f0:58:98:f7:07:e3:7f:43:13:4c:d4:3c:
f5:cd:e6:01:cc:68:45:43:dd:a9:d9:f2:09:2a:41:51:ba:0d:
13:7d:cd:5d:98:dc:08:95:cb:76:8f:f3:82:67:4a:df:ee:af:
60:78:76:5c:a7:0a:e8:e6:8b:f3:ab:eb:83:3b:51:c5:99:5a:
ff:0c:33:3f:09:37:30:0e:29:79:97:7e:a2:3d:9c:23:1c:0d:
d5:c3:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:32 2026 by rpki-client