Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: O6gTRuMaJqaxmJ35ionzhBeslOfx6Y9x8G8D3AxDwp4=
Subject key identifier: 01:82:FB:A1:A8:41:C5:A4:27:8A:D2:88:22:1B:50:45:53:2D:77:A8
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019D9B87E8418C49AD03D6E3562A4CF91B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 13:01:08 +0000
Manifest this update: Fri 17 Apr 2026 13:01:08 +0000
Manifest next update: Sat 18 Apr 2026 13:01:08 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: XUbMs4rGumJKfXH//kOQXUq0SwF5wPj6PFWn4okNRzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:e8:41:8c:49:ad:03:d6:e3:56:2a:4c:f9:1b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Apr 17 13:01:08 2026 GMT
Not After : Apr 18 13:01:08 2026 GMT
Subject: CN=0182fba1a841c5a4278ad288221b5045532d77a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:85:f4:0e:ec:98:77:85:a1:ad:ab:0b:11:
00:9a:6a:2c:dc:7b:02:ee:8e:67:07:4e:4d:44:c6:
58:5c:99:2b:b6:e6:4c:0d:2d:04:d1:a0:7e:0b:e4:
9b:66:b8:98:b2:e8:7e:a8:21:c4:ab:9e:c5:8c:8e:
df:ba:95:f5:56:b4:39:13:3f:92:01:8b:95:62:3f:
a8:26:e7:b3:69:5b:25:c8:39:13:17:a2:12:62:d3:
79:49:d8:6c:fd:1b:34:fb:20:44:a5:b6:40:67:a1:
a8:08:1a:06:9a:1b:11:ff:42:e3:02:ca:41:4b:b2:
44:8d:71:e0:0a:7f:c8:e0:b9:9a:f8:df:db:9f:99:
10:76:62:cc:30:2c:a9:b0:14:7c:86:4f:58:b1:c8:
0f:65:52:4b:88:09:52:6e:04:68:34:56:bf:7f:30:
8c:5f:25:a5:36:d5:51:8b:50:bc:e2:89:30:51:ef:
b5:95:59:01:88:56:73:6a:64:02:e8:fe:ac:3b:dc:
5f:c0:03:59:44:13:f0:34:98:3b:4d:c5:d8:92:f1:
9f:61:71:47:23:fe:4a:2c:9e:eb:95:bf:37:c9:e8:
af:bd:f3:d3:4c:4c:f0:d5:78:79:9c:d4:8b:a4:38:
b1:97:01:53:6f:6b:40:86:26:11:96:ee:8b:da:46:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:FB:A1:A8:41:C5:A4:27:8A:D2:88:22:1B:50:45:53:2D:77:A8
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:8f:85:d6:41:e8:73:80:20:d2:c9:15:74:9e:3d:cc:90:
df:69:13:d4:8c:35:48:c1:aa:2c:c8:90:b2:98:0a:2c:8e:0d:
8c:9f:26:36:03:60:05:25:71:39:dd:d9:4a:ed:1d:79:48:70:
72:24:65:a6:ab:2a:dc:38:83:f3:52:3d:57:99:47:a8:06:f1:
46:d7:91:a7:7a:35:00:79:5b:44:e6:3c:c3:21:d7:f9:e1:da:
79:da:5c:fc:93:3b:df:83:75:f8:66:29:85:42:2e:f2:73:5c:
3f:c3:fb:23:cf:3b:07:0e:f5:3c:32:9f:04:aa:c8:4b:49:34:
d0:a5:1a:18:7d:6d:e3:4e:4f:7e:05:cc:34:ef:0d:a9:ac:4a:
55:76:02:79:d4:e4:5a:38:9c:24:06:a1:25:8d:87:fc:8f:15:
6c:7d:08:a2:cb:91:56:46:08:d4:69:8b:81:e1:16:9a:7a:5f:
43:2c:0a:d2:3b:be:ab:44:ae:92:50:e4:33:6c:0e:c0:5e:45:
b4:f5:76:c7:cc:fb:48:29:db:6e:83:f8:91:7b:d6:aa:21:1e:
0e:1e:5c:46:1c:79:0d:14:e2:60:f7:1d:ab:c6:17:41:a0:cb:
8e:c0:29:61:b1:92:5b:d4:aa:91:11:c6:08:79:db:80:d4:78:
1b:8f:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:05 2026 by rpki-client