Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json)
Hash identifier: 7849oBIJKSaKReUu3bxTyEwarf/S4ikZfOCDQu9ZgnU=
Subject key identifier: 3C:6F:55:A5:04:9C:89:43:CB:77:BD:00:39:73:36:53:E4:1B:9F:68
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 019DA453AB7DD9C1B78885EA9A6E5FA635EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
Manifest number: 1244
Signing time: Sun 19 Apr 2026 06:00:39 +0000
Manifest this update: Sun 19 Apr 2026 06:00:39 +0000
Manifest next update: Mon 20 Apr 2026 06:00:39 +0000
Files and hashes: 1: Ci7T1oVNHc8tbnfw-kXncqBB7cQ.roa (hash: Yv125oxquEywJASaTcgTVq9eUxE+9scmAg56tEvF/Ww=)
2: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: 0FVHdrE3T41UKeCJap1szLYpmZ4Pz4s9wedUE+6NiF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ab:7d:d9:c1:b7:88:85:ea:9a:6e:5f:a6:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Apr 19 06:00:39 2026 GMT
Not After : Apr 20 06:00:39 2026 GMT
Subject: CN=3c6f55a5049c8943cb77bd0039733653e41b9f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:af:cf:df:e8:5e:4c:71:8a:94:d6:7d:c8:
51:22:17:34:e7:42:88:85:a7:c8:95:9c:fe:50:6f:
86:4c:ed:2b:eb:cd:db:8d:2c:e6:a8:21:f6:50:75:
d2:7e:d8:41:d5:65:ec:56:15:61:a2:9c:93:e5:af:
ff:85:63:94:5b:02:4e:d2:4f:ca:6d:f7:da:c1:26:
cb:92:80:a7:3c:4e:b8:2c:aa:86:1a:84:9f:19:cd:
08:0e:44:56:2c:26:97:fa:b5:c6:d1:08:51:7a:84:
80:70:ef:62:31:0e:c2:1d:b5:81:74:a4:6c:a8:e5:
e1:30:20:9a:56:73:fc:c1:46:78:9a:e0:ac:9b:f2:
33:26:e0:31:e0:e5:4a:76:c9:27:dc:48:49:c7:3c:
49:c1:bc:c1:80:86:43:7b:48:3f:c7:6b:cc:e5:4b:
1f:d9:25:9b:61:41:7f:f7:8e:c1:bb:bb:ed:2b:c2:
bf:00:6b:c0:b2:a2:62:79:52:41:63:d2:94:ce:c1:
51:3c:a6:ff:e9:da:19:dc:4e:e0:92:4a:61:7b:68:
a9:05:af:12:69:92:18:d3:d8:a7:40:8e:75:ca:2f:
67:a9:a6:c6:e3:0d:f3:c9:23:fa:a6:c1:e6:e9:2c:
8e:2f:24:2c:bb:10:45:e3:31:dc:ab:26:be:df:2a:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:55:A5:04:9C:89:43:CB:77:BD:00:39:73:36:53:E4:1B:9F:68
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:cc:cd:d7:39:b5:45:18:a5:6b:9c:76:98:86:c8:2d:29:
eb:55:e5:cd:db:ee:19:2b:dd:bc:3d:c0:41:50:e0:e3:dd:5f:
cd:21:77:0e:6b:84:75:f1:6c:76:e0:26:22:ae:9d:81:cd:41:
f7:12:c9:7a:a9:fd:b1:08:3f:82:98:15:cc:ca:0e:70:20:ad:
4d:45:2f:aa:b3:21:a3:c2:61:d4:5f:69:a1:1b:19:b1:9e:0a:
ff:43:32:10:f0:a1:03:05:6c:72:33:94:2f:76:28:4e:16:fa:
93:f2:31:22:57:a6:ed:b5:2d:fc:6e:6c:2c:ac:b7:d5:e4:2b:
06:04:4e:3f:ed:6f:be:87:e7:1e:f3:fd:10:68:ad:89:c5:dc:
ce:e0:82:08:d7:69:eb:55:39:6e:a1:ca:d5:a9:fa:66:56:ba:
e2:ea:cd:8f:3b:06:6f:a8:2f:01:7c:d2:46:c6:e7:f4:07:ea:
8a:7f:bb:92:39:c3:a6:f8:62:1a:af:4e:25:d1:31:f8:66:e1:
ee:51:d3:92:f2:17:3b:41:e8:ba:82:10:de:44:a8:05:da:85:
50:26:1a:ae:4b:36:28:58:69:51:e8:0a:38:a4:ec:13:f5:2f:
51:31:2f:80:40:6e:4c:3b:c5:46:c4:a4:5b:57:3b:58:c8:51:
86:e7:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:28:40 2026 by rpki-client