Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: c1f7kXE7Qp3VScuJNWHQzqO/jXI0Vd5DRi2uEM+2XaQ=
Subject key identifier: 40:21:A8:15:81:0B:0D:47:58:93:A2:0B:75:CA:1C:1A:80:A7:66:CF
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019D9A06B1D63177CE2F3EBE626F918FF0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: 927DrBdZnw9D__84nL_ziFzE2-k.roa (hash: RgBqCsDQ9jzTYF1D+WmbsiffT+S6nFjM+//7MQvYIcM=)
2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: LLnZk0kycUFr6fn7gIXJSGr9d3vUaJWSjzNuiaxR8Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b1:d6:31:77:ce:2f:3e:be:62:6f:91:8f:f0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=4021a815810b0d475893a20b75ca1c1a80a766cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:2d:aa:bf:61:68:89:49:57:fe:59:6f:8f:
50:c2:3e:32:95:da:ff:72:ac:80:df:89:de:75:77:
50:82:3e:9f:15:22:d2:91:a2:25:76:f6:ea:d4:93:
8c:d1:9d:d4:99:bf:49:5e:89:23:27:6e:c9:ac:94:
e4:17:1a:b6:4f:50:6d:b6:df:c4:46:8d:9c:b4:09:
e8:1a:60:8b:4b:34:e1:84:5b:2b:e5:28:a4:84:20:
5b:4e:1f:f3:f2:7c:f0:d4:c4:09:8c:f9:11:3f:50:
0b:a3:fe:ba:bb:bf:87:9c:c8:15:9b:58:0e:f7:f7:
4f:68:03:f0:f0:2f:c1:17:da:3b:34:af:17:36:78:
72:e1:91:74:b4:4c:cb:60:52:7e:63:bf:32:1a:48:
2f:4d:21:2e:29:bc:c8:93:0d:da:1e:a1:49:bb:b7:
88:58:e5:08:e3:d1:9c:3f:55:a0:8a:e9:87:31:67:
36:c0:82:d7:d8:35:97:2e:ad:6b:1c:03:16:46:ae:
02:fb:9f:11:20:5c:37:21:3c:f0:42:4e:d9:e3:d1:
4a:48:ae:da:40:b6:aa:8b:56:b7:c2:b3:11:8d:06:
fc:fd:d6:88:60:7f:0d:cf:78:72:56:06:e3:bd:ab:
1c:d8:cc:c8:8a:d3:41:30:5e:11:ab:e0:b0:a9:fe:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:A8:15:81:0B:0D:47:58:93:A2:0B:75:CA:1C:1A:80:A7:66:CF
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:61:3a:5b:ff:af:68:6c:22:0d:1a:7e:00:8a:00:f2:ea:83:
f9:31:cf:7b:fa:59:51:9d:56:a5:9f:de:97:8b:05:1b:c4:72:
82:4d:54:2a:76:c8:ed:6f:0e:d9:db:3e:ba:d3:1e:63:05:ff:
31:a9:05:29:99:36:e3:65:42:69:62:5a:7d:2f:a4:20:d7:3a:
7e:48:08:a2:d8:85:f5:68:09:bf:9b:7d:7a:d0:47:b8:9a:1e:
fb:ff:ec:2f:b3:a8:08:b4:18:01:89:d0:01:90:7d:c0:88:73:
da:66:06:08:ca:80:e9:33:23:7f:db:db:14:78:ad:a1:b6:38:
86:ec:d7:e1:77:87:8b:1e:b6:f0:96:a5:de:05:07:f6:04:51:
c0:a2:bd:d4:93:e1:58:7e:3d:f8:87:b7:1e:ed:7d:57:a4:97:
aa:7f:06:e3:09:3b:3c:a7:72:d0:be:d6:cd:04:b7:f9:75:30:
e1:66:25:50:f0:88:da:69:06:7e:0f:8d:df:8c:e0:76:dc:66:
cb:d7:38:40:15:0f:f9:e3:32:35:f0:ce:c6:a8:c5:3e:70:1b:
e1:48:55:57:47:fa:8f:2b:1d:7a:ab:9f:dd:8f:06:52:be:c2:
5e:45:d4:fb:47:de:25:e8:62:db:d2:ae:41:a7:22:c2:42:16:
f1:ca:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:36 2026 by rpki-client