Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: zEcoTKvL3H7dgrMD381PeggbHoJRqTSO0w+Q4Ua+Fa8=
Subject key identifier: 67:B1:22:80:83:E5:64:F3:16:A7:C2:14:70:E6:C1:52:3A:4D:16:ED
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019D98869BA074A69E314BEFB4CF0E067CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:51 +0000
Manifest this update: Thu 16 Apr 2026 23:00:51 +0000
Manifest next update: Fri 17 Apr 2026 23:00:51 +0000
Files and hashes: 1: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: Qgj7SYEknju8tLTZldPf/KHEaoVWHtzjXeUo98byslk=)
2: z0CueOCsUcgJjTlUBl8xuP0ejIo.roa (hash: OHQraT5vhktcGhKnSXjBbZgLeUySm12jN55KrjwZnfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:9b:a0:74:a6:9e:31:4b:ef:b4:cf:0e:06:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Apr 16 23:00:51 2026 GMT
Not After : Apr 17 23:00:51 2026 GMT
Subject: CN=67b1228083e564f316a7c21470e6c1523a4d16ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:03:a2:21:f8:c2:5a:35:e2:f2:53:18:96:
55:c8:aa:32:96:d8:27:d4:e6:97:eb:0c:ae:87:b5:
22:22:af:65:11:64:65:60:0d:c6:27:f4:78:ec:91:
fb:3d:1e:96:ef:59:b1:bf:1f:76:1f:25:26:0a:8b:
bb:fa:3b:7c:e7:c7:d1:6f:d0:45:4d:b8:63:11:ad:
3d:d9:9f:ed:cc:a7:56:2c:9b:98:86:eb:88:4f:3a:
54:4a:26:14:cd:f3:b5:60:27:2a:aa:e1:0b:83:3e:
47:b9:d8:a6:b2:ce:b1:08:79:b7:ab:7a:d0:83:78:
ac:32:47:5e:a2:af:28:82:52:c1:98:88:7e:4a:f5:
2c:31:86:fc:69:72:5c:bd:9b:e2:83:ae:5d:49:09:
da:23:0b:92:bc:67:2b:cd:df:c8:01:7d:b4:a1:ed:
3e:44:8b:fd:53:f1:2b:f6:8d:36:96:c5:a1:d5:26:
52:4b:af:1c:28:e8:7e:fb:d3:a4:64:6e:39:a2:50:
07:1a:e7:20:c1:f7:b0:fe:70:b1:16:ee:f2:71:f5:
e4:ef:f5:5f:7c:99:b0:95:f2:e7:4c:89:55:a8:02:
7b:cc:cd:17:10:6e:fe:90:31:3f:04:b4:61:63:c3:
eb:ef:c2:46:5e:17:41:4e:7f:b4:31:50:12:9b:85:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:22:80:83:E5:64:F3:16:A7:C2:14:70:E6:C1:52:3A:4D:16:ED
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4d:e0:ce:6d:23:93:4e:3b:c7:b9:28:41:84:00:01:e8:31:
15:0a:24:0e:93:be:cc:c4:81:fb:cb:fe:6e:20:b3:7c:18:38:
62:83:d1:e1:33:42:47:30:f1:fe:4e:e5:e3:6e:a1:c1:24:02:
01:a4:d1:a1:ed:1c:12:44:5a:eb:fa:6c:89:e9:23:ab:b0:06:
00:3f:20:89:44:ba:98:51:7a:d6:69:53:e1:2c:ed:d7:76:65:
f3:88:12:7a:73:c6:02:26:dc:a2:c7:91:4d:dc:77:7c:8c:7a:
0a:41:96:27:2e:ad:f8:ea:f1:d6:f5:3f:4b:4b:c9:ec:90:28:
17:f9:4d:df:24:89:64:99:5e:4e:c0:12:71:d7:1e:bd:f4:3b:
39:1d:fc:e6:fe:b7:a0:75:18:92:f4:4d:ae:4d:57:30:50:fd:
8d:94:97:9c:49:95:1c:10:fe:20:ff:f5:bd:29:5a:26:e0:ae:
d0:e9:30:77:1c:a1:99:02:ce:30:76:c2:f1:eb:e8:ed:2f:2b:
2c:96:b7:9e:e2:99:33:9a:57:ac:36:3d:df:2f:f5:8e:f7:47:
4a:f8:b3:c4:50:e2:ed:56:28:11:89:b6:9b:bb:24:94:2a:c4:
3b:1a:51:8a:2a:61:57:dd:3a:7f:9a:57:89:e1:83:c8:4a:58:
04:10:fc:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhpugdKaeMUvvtM8OBnzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOGNmY2ZlYjgzZTg4ZjM2YmEyYmYyNDQ1ZGI5ZWMxZTgy
ZjBkNTQwHhcNMjYwNDE2MjMwMDUxWhcNMjYwNDE3MjMwMDUxWjAzMTEwLwYDVQQD
Eyg2N2IxMjI4MDgzZTU2NGYzMTZhN2MyMTQ3MGU2YzE1MjNhNGQxNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbYDoiH4wlo14vJTGJZVyKoyltgn
1OaX6wyuh7UiIq9lEWRlYA3GJ/R47JH7PR6W71mxvx92HyUmCou7+jt858fRb9BF
TbhjEa092Z/tzKdWLJuYhuuITzpUSiYUzfO1YCcqquELgz5Hudimss6xCHm3q3rQ
g3isMkdeoq8oglLBmIh+SvUsMYb8aXJcvZvig65dSQnaIwuSvGcrzd/IAX20oe0+
RIv9U/Er9o02lsWh1SZSS68cKOh++9OkZG45olAHGucgwfew/nCxFu7ycfXk7/Vf
fJmwlfLnTIlVqAJ7zM0XEG7+kDE/BLRhY8Pr78JGXhdBTn+0MVASm4VqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGexIoCD5WTzFqfCFHDmwVI6TRbtMB8GA1UdIwQY
MBaAFDqM/P64Pojza6K/JEXbnsHoLw1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEt
NmE0ZWIzN2EzM2NjLzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEtNmE0ZWIzN2EzM2Nj
LzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXE3gzm0j
k047x7koQYQAAegxFQokDpO+zMSB+8v+biCzfBg4YoPR4TNCRzDx/k7l426hwSQC
AaTRoe0cEkRa6/psiekjq7AGAD8giUS6mFF61mlT4Szt13Zl84gSenPGAibcoseR
Tdx3fIx6CkGWJy6t+Orx1vU/S0vJ7JAoF/lN3ySJZJleTsAScdcevfQ7OR385v63
oHUYkvRNrk1XMFD9jZSXnEmVHBD+IP/1vSlaJuCu0OkwdxyhmQLOMHbC8evo7S8r
LJa3nuKZM5pXrDY93y/1jvdHSvizxFDi7VYoEYm2m7sklCrEOxpRiiphV906f5pX
ieGDyEpYBBD8wQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:24 2026 by rpki-client