Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: r/AA8lWa7nWzQp1mWocxTeY9KLNlQw8a91mvqFlQhzs=
Subject key identifier: 17:EC:F1:EC:41:59:0C:2D:AF:BC:58:66:E9:CF:57:55:66:35:A4:E1
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019D984FC5CFC49D3027F8CE773C4C15C2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:00:57 +0000
Manifest this update: Thu 16 Apr 2026 22:00:57 +0000
Manifest next update: Fri 17 Apr 2026 22:00:57 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: MDo1nDpgbjiCGX/mNLNi27Rlz5eJyh1UwDH8b3KA1GI=)
2: qlUMTY8f9xMZJf_wYNKsX0Jnm9o.roa (hash: 6TBYCzPo1M2XR2SlsB1vR5t4Ago4gsLphNAfezL8f1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c5:cf:c4:9d:30:27:f8:ce:77:3c:4c:15:c2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Apr 16 22:00:57 2026 GMT
Not After : Apr 17 22:00:57 2026 GMT
Subject: CN=17ecf1ec41590c2dafbc5866e9cf57556635a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:96:b6:48:18:03:19:bd:5e:1f:d9:05:54:
e4:27:7a:0a:63:d0:a7:59:88:67:b8:7c:c3:89:ca:
79:7c:37:1e:24:38:fa:7e:47:78:a1:fe:f5:d6:43:
93:e3:eb:87:38:a1:4e:26:f1:8f:0e:54:5c:b5:3d:
88:af:6e:77:9d:48:57:43:2c:b0:b0:50:a0:92:33:
3d:50:14:6c:8b:f9:4c:c2:00:44:3f:94:34:ff:a3:
b5:f8:d4:c9:46:33:23:36:2d:cd:30:eb:21:00:ce:
2d:7b:7b:92:3f:92:4b:37:6d:ec:67:a7:73:f0:18:
89:62:97:30:f5:d3:57:86:87:fd:28:ba:db:69:ea:
38:64:b1:74:10:88:09:78:63:02:f9:87:99:96:1f:
48:91:a7:e6:44:19:c7:45:91:e0:48:bf:8c:cf:ee:
f8:32:59:9c:01:f7:95:b9:8e:0f:5a:ed:bf:b2:9f:
1b:6c:fb:2e:c0:3b:3c:7b:d2:ce:30:2e:7d:8a:15:
2d:0a:37:e2:26:66:0e:f2:bf:c5:f8:ae:3f:c4:24:
16:e7:13:0c:61:24:df:e2:fc:d7:a9:2a:d1:9b:4f:
3b:a8:7b:ee:94:be:fa:d9:9e:66:1b:cb:6e:52:51:
ef:30:74:5d:58:fd:0c:71:47:3c:f5:15:a2:2c:12:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EC:F1:EC:41:59:0C:2D:AF:BC:58:66:E9:CF:57:55:66:35:A4:E1
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:05:73:a9:90:eb:b5:7c:38:2c:b9:54:7f:d7:e0:f9:cc:ca:
50:13:79:fe:73:50:f1:f0:c4:89:11:6c:33:3e:a1:58:16:dc:
8e:d4:42:12:f5:31:93:4d:ad:5c:44:5e:a1:7a:ef:b0:c5:1a:
50:57:04:25:fc:7e:04:b4:29:0e:e6:c6:f5:40:df:a8:bf:a4:
99:9f:f6:68:eb:c2:5a:17:ad:23:12:30:f3:87:a0:54:c4:3c:
7a:39:91:98:66:0d:83:f1:e5:00:c5:dc:12:d5:ad:76:cc:cd:
f4:14:cd:59:ff:c7:82:c2:9b:55:28:6c:6d:d9:af:80:b0:59:
3f:4a:b2:cd:62:01:8d:37:2f:4c:5c:ee:ae:57:17:22:bc:ea:
bd:3c:82:1b:f7:5e:04:ae:35:92:2f:1e:b1:4e:ef:74:6d:14:
98:ae:e3:da:93:38:2e:53:16:64:3e:f1:94:fd:c5:2d:c5:3e:
a1:2f:a4:fc:cb:00:fe:b7:32:f1:98:9d:2e:27:9b:c5:2d:8c:
f4:3d:38:06:f2:53:d4:49:36:8a:24:5d:b9:b4:b4:16:f2:8d:
01:15:3b:37:68:18:aa:4b:d5:2b:77:6f:c3:ca:02:fa:aa:4b:
36:e7:50:f7:5b:7b:27:37:da:68:0d:e4:1f:61:54:12:39:bc:
0f:7f:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:43 2026 by rpki-client