Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: VLMD/1k/QvWTDJqTqjxASUcRJECTghOzux8TPhR0t84=
Subject key identifier: 94:C6:6C:77:33:2A:20:CC:5C:85:EE:43:EA:42:56:CE:B2:A0:82:F8
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 019D99D02723E81B73D5F1C7374151CBA139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 15C6
Signing time: Fri 17 Apr 2026 05:00:48 +0000
Manifest this update: Fri 17 Apr 2026 05:00:48 +0000
Manifest next update: Sat 18 Apr 2026 05:00:48 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: UzwV697QgxgtD5nfSPb23RoyLLpcmpRZAR0wZcOGQ/k=)
2: TIBIPgd0Nln-DuzUf3r64T4_MDg.roa (hash: Wc4+19rN5KfObjYjXDD+w/Qt81kPFgbecT9pFJ34v+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:27:23:e8:1b:73:d5:f1:c7:37:41:51:cb:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Apr 17 05:00:48 2026 GMT
Not After : Apr 18 05:00:48 2026 GMT
Subject: CN=94c66c77332a20cc5c85ee43ea4256ceb2a082f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:03:77:9b:ec:93:0a:ca:51:4d:a4:49:32:
b7:26:6d:b3:1f:cd:9d:04:dc:a3:c7:34:81:57:02:
36:78:86:16:59:3e:e3:6d:e3:89:8d:48:a5:28:f7:
19:d7:bf:89:fc:90:bb:fb:1a:2e:3a:05:1c:d3:e8:
25:57:b2:bc:c7:fb:6e:af:9c:75:b5:b9:35:35:58:
81:be:eb:ee:8b:ab:c0:16:b2:f4:37:b6:6e:6a:fc:
69:18:80:6d:69:be:95:9b:ef:d4:eb:ec:2c:56:8d:
2a:89:4c:0b:e8:a9:fe:76:39:b9:d3:3f:4b:3a:70:
57:a4:7e:eb:50:96:bc:86:81:fe:75:5e:be:82:b9:
c6:d9:2d:9e:f3:de:fb:e3:1a:42:bb:7e:82:09:43:
3d:64:4e:49:96:f0:96:ee:ac:8f:0c:b9:6e:1d:93:
12:40:d2:ce:b9:fa:d7:15:01:d7:19:f5:92:85:41:
41:cc:9c:e0:20:6e:e8:c9:f0:0b:47:49:3c:35:a5:
6e:23:67:a5:e7:05:92:08:00:87:6e:22:52:db:cd:
f9:30:86:3f:36:d7:b7:4d:fa:57:35:12:4f:02:2a:
8a:57:81:92:ee:80:50:ee:7b:eb:e9:3a:75:56:f9:
78:a0:7e:dd:99:d9:d5:29:3e:ad:8e:16:80:a4:02:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:6C:77:33:2A:20:CC:5C:85:EE:43:EA:42:56:CE:B2:A0:82:F8
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:20:c9:0d:d1:b0:da:08:19:8d:fd:81:17:5c:85:43:e0:
37:4d:87:80:3b:9b:7d:dc:52:46:5f:60:38:4c:08:38:35:9c:
c0:00:84:58:0d:74:3c:76:3e:a3:4c:48:a2:3b:b5:2e:0a:56:
86:32:aa:7f:2f:81:af:09:7b:c0:63:24:7c:1f:78:db:2b:bf:
9d:5f:09:72:fa:a0:33:5a:27:31:47:38:c7:93:ce:26:d5:49:
c8:63:fc:7e:ae:92:de:83:42:cd:5c:de:74:e3:e7:b6:a4:cd:
37:ff:23:78:88:a1:c0:64:b8:d4:85:14:45:bb:ae:5e:bf:78:
e7:71:e5:38:1c:27:05:3d:23:74:58:f6:f7:fc:ef:71:52:ed:
c1:22:1d:50:ae:67:54:79:d9:11:d6:84:b2:5d:7e:11:25:d9:
f0:6f:1c:98:3c:d3:17:71:81:27:71:44:31:6d:6f:02:cb:72:
23:33:4c:f8:16:84:95:c3:67:3a:3e:d0:3a:34:bf:99:05:20:
b2:35:f0:9e:3c:54:d9:0d:4e:39:34:21:2b:19:13:65:1d:df:
32:80:18:c1:d2:54:60:ba:c0:16:a1:ca:8b:f8:66:d6:38:c7:
4f:1e:49:3e:03:70:a9:8e:97:52:13:97:f1:80:1c:d5:42:1c:
43:4a:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:16 2026 by rpki-client