Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: hiouv6Vx4xfopJQ4YQc7jf/Hq6+JH5SlnoUM98vzgOY=
Subject key identifier: 90:00:9F:56:21:FE:67:82:D5:E2:A5:27:0D:4B:E5:A1:46:3E:6C:DC
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019D98F52ABA03942CC41D1C30A791BFE52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0EE2
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: cVgol+nPvKjzSs1pzQnFfi3QW1iIom87n5SPdrYMIdQ=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2a:ba:03:94:2c:c4:1d:1c:30:a7:91:bf:e5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=90009f5621fe6782d5e2a5270d4be5a1463e6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:b8:2d:64:95:0c:20:76:86:11:98:1d:8f:
0b:21:3f:2a:58:c1:41:a0:0b:77:59:47:f4:dc:d8:
1b:4e:3b:51:7c:b0:d4:0b:37:ac:9a:68:51:6f:26:
86:ea:05:d5:ca:9e:cc:85:0e:95:9c:80:93:91:69:
58:da:7b:d0:f1:b2:f6:69:03:e8:cd:f4:7f:db:4c:
5f:03:af:4e:d6:9d:7d:b2:9f:d4:7b:9f:91:3e:b0:
d0:37:af:c2:8f:fa:70:4a:2d:3b:97:44:06:32:43:
36:b3:11:b4:26:81:30:5a:f2:f9:e3:a2:31:ab:9b:
f2:37:f7:f2:91:b6:62:71:ee:6a:94:a5:fd:38:01:
e7:0a:ab:f7:e2:0c:1c:35:b5:00:22:dc:c9:cf:59:
e0:d8:52:c8:40:91:c2:c9:64:c3:46:ff:c8:8d:4e:
1a:f8:5c:bb:c7:61:17:70:cf:36:8b:4b:0b:4f:ae:
a1:16:f2:ab:df:83:78:10:e3:82:3d:46:0a:39:79:
0b:8c:95:b7:95:08:0b:1e:c6:d3:6e:17:d2:e7:7d:
07:6e:f9:b3:43:f8:55:09:ab:d3:d4:2a:68:6c:0f:
74:20:63:7a:87:db:c9:88:66:8f:22:78:c4:ef:61:
69:d5:26:a8:7c:2e:cb:39:60:10:6a:28:3d:a4:1a:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:9F:56:21:FE:67:82:D5:E2:A5:27:0D:4B:E5:A1:46:3E:6C:DC
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e7:29:c5:91:89:fd:63:cf:1d:e4:7f:c9:89:1f:79:08:41:
45:f2:f2:be:5d:a2:14:d2:ec:96:2f:30:4b:91:bd:37:84:6b:
d8:a1:44:7d:56:08:db:72:49:dc:27:de:d1:19:f6:c1:9e:53:
c7:30:1e:f0:4f:96:64:61:f2:2d:23:94:e3:31:81:13:eb:6a:
91:a4:2f:10:05:90:05:28:02:b5:28:f8:08:e1:e7:d7:bc:9f:
76:ef:f2:9a:ca:2b:27:36:89:aa:43:d7:5d:6a:46:5d:3b:c0:
00:54:5a:6c:66:4a:30:fb:d9:46:51:98:14:87:11:45:94:a0:
e4:7e:8c:cc:f4:60:b9:7d:65:61:6b:b5:60:2d:ab:92:60:a7:
7b:25:17:86:6f:24:a4:9d:82:75:78:5d:4b:73:e4:b8:fc:bc:
d0:37:53:21:45:8e:a1:69:a3:c6:0e:5c:7d:77:74:38:33:53:
bc:d2:bd:90:07:37:75:ce:49:44:23:6a:a1:cd:8b:9f:91:9a:
f1:9b:da:04:eb:06:51:3e:0b:2f:93:5e:f3:f3:b7:79:27:4b:
ca:60:f7:b5:9d:f5:ae:12:a8:e3:be:99:69:2a:ab:00:33:2e:
e3:62:ad:b8:11:55:32:63:62:98:ae:3f:ae:0b:0e:3f:b9:9f:
aa:d1:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:58 2026 by rpki-client