Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
File: OAonDZR7c0BD17LSUhTx3DDwEd8.mft (raw, json)
Hash identifier: OGVSBvg4FkyFfftJrCGWWZs0nCq2AptQA4poazdQe+w=
Subject key identifier: DF:00:78:81:C5:3F:F1:DA:E1:AD:DF:9A:01:6A:CC:CD:2D:F8:E4:54
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019D9C2CE23BF005BBCE7A5C72C38AEB4ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
Manifest number: C4
Signing time: Fri 17 Apr 2026 16:01:20 +0000
Manifest this update: Fri 17 Apr 2026 16:01:20 +0000
Manifest next update: Sat 18 Apr 2026 16:01:20 +0000
Files and hashes: 1: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (hash: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=)
2: OAonDZR7c0BD17LSUhTx3DDwEd8.crl (hash: uQmff+uvPE5UBfFaeaytdFZb+oakpSGowodtHTM0SLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:e2:3b:f0:05:bb:ce:7a:5c:72:c3:8a:eb:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: Apr 17 16:01:20 2026 GMT
Not After : Apr 18 16:01:20 2026 GMT
Subject: CN=df007881c53ff1dae1addf9a016acccd2df8e454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:41:0e:5b:11:e8:aa:4d:9d:b4:62:d6:bb:
3b:ab:ee:7c:3a:44:09:53:72:9c:5d:28:d5:e9:b8:
81:11:83:92:23:a2:28:8c:d6:c0:73:7a:e4:f9:c4:
b4:d1:f8:a2:7e:b2:87:93:73:01:18:46:6e:a6:ac:
11:a8:7b:b5:1b:75:91:f9:08:d8:8a:d3:2b:86:a7:
10:30:7b:99:7d:cd:2e:45:b7:20:73:e4:fa:42:07:
91:49:7c:b4:fa:2c:36:3f:ed:d8:98:55:72:39:db:
c4:b9:88:a5:6f:78:11:a5:ee:76:4b:09:1a:4a:d2:
64:de:ec:46:19:83:05:20:00:67:dd:26:b7:b2:76:
4c:0e:b0:29:36:9d:d7:53:80:ba:b5:17:01:c9:24:
ca:c6:cd:b4:32:b4:2a:91:b8:59:80:ea:0f:9f:42:
2a:9e:ad:b7:50:04:e0:67:42:16:bb:c4:ea:40:e3:
5e:6e:45:be:fe:84:77:cd:7b:9d:21:00:2a:db:47:
b7:7b:d0:e2:3d:af:f1:d5:a8:50:df:7d:19:16:9e:
52:e3:9b:1a:f7:9a:da:d0:4a:08:73:81:e1:a2:a5:
8f:4c:db:d7:7e:5b:a3:82:a7:44:46:66:4b:da:8e:
b3:f9:85:cf:ab:9f:6f:ce:e9:b4:b3:8c:29:d3:aa:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:78:81:C5:3F:F1:DA:E1:AD:DF:9A:01:6A:CC:CD:2D:F8:E4:54
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:76:ca:11:81:ba:7f:92:14:e4:00:99:c5:42:e0:02:60:9d:
3f:90:72:3a:29:17:99:58:1e:fe:bb:3b:87:92:9c:f3:41:59:
3d:a0:e6:7a:00:b6:ca:49:7e:cf:ce:e9:a7:a7:74:5c:0e:55:
f8:b6:9b:31:ab:d1:fd:80:b2:c7:8d:4c:34:c0:d9:89:65:88:
a3:44:f5:0a:30:6c:df:fe:14:18:df:7f:ae:df:d4:23:03:a3:
1a:b8:04:85:b9:41:86:b2:6f:6e:a3:52:63:0d:76:f8:ca:27:
65:3c:08:ad:a9:09:12:b1:28:ca:ad:de:d2:80:c6:8a:4e:ee:
6c:e2:b8:c3:a5:0d:b3:bf:9b:f9:06:18:95:58:50:a1:6e:8a:
e5:d0:4d:4d:fa:2a:37:d0:f7:56:1e:d7:5a:e3:9a:8b:09:f2:
79:47:de:8d:8e:b3:45:a0:15:d8:62:0f:2f:19:3c:cd:4f:d3:
17:43:fc:8c:e4:93:70:4d:2a:3d:71:dc:f8:d0:db:2b:46:8b:
82:f9:e0:1e:48:b8:2e:29:a3:df:30:de:ca:7c:fb:47:cc:79:
45:ba:21:f4:af:d2:1e:a3:59:36:2b:a9:0d:b2:b4:b3:b8:f3:
68:86:42:9d:0e:34:d8:38:60:aa:1b:e8:b3:1c:43:78:0a:5f:
86:09:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:54 2026 by rpki-client