
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: XUqhIg9qYnPc6rqHX1Bq9vIVAE3ULj1dqfwN+ZZeh5c=
Subject key identifier: 02:0E:04:CC:54:01:9E:BA:78:B9:FF:4D:F3:B6:CB:93:99:3A:1D:5C
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019D992B3106F93D078B527932F9FB596125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 08F8
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: SNJBCFr+dLn4g72hVZGL8JFP5jaV2r+n9h1x2ZkZogs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:31:06:f9:3d:07:8b:52:79:32:f9:fb:59:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=020e04cc54019eba78b9ff4df3b6cb93993a1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:b1:ac:d7:2b:85:54:21:39:83:17:33:82:
47:ab:15:0f:0f:41:b6:57:24:f6:45:a1:52:3d:b6:
df:5b:08:22:19:46:3d:fc:6f:0e:34:00:91:f3:97:
bf:ab:48:08:1a:ad:95:3d:f6:ca:b3:4a:84:72:4e:
21:6a:0d:0a:00:c7:37:a1:51:ec:8e:2c:ef:8c:04:
56:7d:0c:af:f7:dd:59:f7:17:a1:73:96:aa:7b:07:
05:4f:b4:1d:73:e5:b8:3f:f3:d7:1e:75:9a:3e:84:
7f:01:85:14:aa:70:95:c2:d8:e8:56:f9:40:d2:50:
5d:03:b2:0d:7f:a3:50:e5:cb:f8:1f:4c:ff:eb:88:
65:84:1a:ab:ca:c4:39:b8:0f:21:69:0c:2d:8a:6c:
08:a7:ee:8b:51:91:44:88:32:e8:18:0c:30:c3:37:
aa:7d:6c:13:24:c4:2a:a9:21:e1:3f:26:e4:1a:11:
49:0c:8b:92:01:f9:2c:c0:f5:49:6f:74:42:00:f2:
bf:96:18:33:6d:e7:f3:61:28:fb:e7:e4:2c:55:34:
39:f2:e1:06:69:81:fe:fc:1f:5a:b9:35:40:1a:af:
db:b2:83:f5:25:e0:bf:8b:a7:ee:68:3c:49:63:48:
a1:86:d3:0b:53:3a:20:85:23:9a:a4:f6:7c:ae:79:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:04:CC:54:01:9E:BA:78:B9:FF:4D:F3:B6:CB:93:99:3A:1D:5C
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:de:b2:f3:52:84:9e:15:35:52:e3:43:04:4c:4a:2b:12:e7:
1a:45:01:15:ff:03:ac:5e:27:d9:f1:6f:3e:a4:99:1e:8c:79:
d7:a1:04:94:fe:9a:71:ad:49:a6:88:87:4f:ce:76:8a:dd:b5:
0e:7c:68:19:0d:9f:5d:f8:6c:5c:8f:12:54:4c:14:95:80:27:
e9:39:c8:86:e5:5d:ad:bd:99:07:3c:2a:bb:ce:9b:dc:2f:ef:
57:e8:63:75:21:fd:b0:bc:d7:37:af:73:a5:c0:f5:2d:52:b5:
c7:ac:f0:e3:f1:b8:87:9c:f1:5f:a7:ad:cc:1a:c4:ce:0d:0c:
af:32:d8:be:17:7a:68:32:39:20:d2:7d:5f:75:f3:af:e1:e9:
37:fa:4f:60:5d:49:df:97:6a:e2:dc:1f:44:4d:17:a1:5b:db:
cc:9a:d1:44:e7:a5:c1:dd:fd:1c:f0:ed:b8:00:98:ef:7b:7a:
28:e1:08:0f:2c:07:15:97:d1:be:8a:71:43:6c:6e:9c:10:db:
4d:89:08:46:a5:49:11:94:f7:02:2d:10:31:43:98:0f:1c:c0:
4d:6a:c8:de:c4:41:e6:bf:34:b4:89:77:21:07:2a:79:e1:9c:
8b:6e:c4:31:1f:8f:75:4f:11:1d:fd:26:5f:ba:f9:14:18:81:
d1:ad:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:20 2026 by rpki-client