Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: ScUUMtdu2IPU//d05WPl4RGwtZ8NRaZ8vVPyAi4/bwo=
Subject key identifier: D8:BD:D8:91:7B:6E:11:43:CB:ED:9B:8C:94:2C:D8:A8:E2:2F:AF:C4
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019DA34170C14AEB719C29B9FD34366D70F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 01:01:08 +0000
Manifest this update: Sun 19 Apr 2026 01:01:08 +0000
Manifest next update: Mon 20 Apr 2026 01:01:08 +0000
Files and hashes: 1: DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa (hash: utTjxlZWKu9J3DkdZuLkviiFIN8/pSjqYt+kL5WYAx4=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: 8xYJS+Gb365ZmD728+Ipicjf2XzfondNAougT+etwWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:70:c1:4a:eb:71:9c:29:b9:fd:34:36:6d:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Apr 19 01:01:08 2026 GMT
Not After : Apr 20 01:01:08 2026 GMT
Subject: CN=d8bdd8917b6e1143cbed9b8c942cd8a8e22fafc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:14:72:07:d5:b8:24:d0:da:4f:da:39:d1:
0c:d6:9a:78:f9:86:70:da:36:b8:66:8e:56:fb:c1:
83:90:04:00:e2:86:3e:bd:f9:9a:65:73:0b:97:fc:
76:c0:a2:3c:c9:a5:84:e7:92:0a:e0:a9:99:b1:fe:
13:51:d1:b0:f0:91:46:eb:24:79:6f:b8:1a:7d:47:
0b:10:86:6f:04:d4:56:82:bb:7b:18:04:31:e3:1a:
17:b8:bc:d8:0b:a8:0e:40:e6:56:a2:d0:f6:e2:82:
10:b6:9a:87:7e:b7:01:b4:38:17:3e:ba:41:14:32:
b1:d5:85:6d:d9:78:8f:40:a6:f7:b4:3d:a1:b9:d5:
f1:ff:d4:dc:f5:13:1d:2b:12:f5:ec:cb:cb:34:e0:
c7:1b:ca:8a:ff:b4:12:33:54:d9:67:42:f5:62:8a:
09:4c:b8:93:ce:54:79:cd:70:ce:39:ab:a8:37:80:
32:d8:41:a7:cc:a5:3b:b5:98:7b:36:27:38:36:13:
4e:91:36:2b:2f:f1:cc:d9:8e:b0:0c:3e:5e:70:d4:
7c:78:51:f6:b8:99:7f:87:67:b2:24:86:aa:91:45:
9a:b5:67:89:c5:64:a4:41:8f:19:59:a2:2d:87:38:
a6:60:6d:a0:a4:3b:fa:8b:cf:c4:85:99:bc:49:28:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:D8:91:7B:6E:11:43:CB:ED:9B:8C:94:2C:D8:A8:E2:2F:AF:C4
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:09:f8:f1:85:68:ca:96:22:90:a2:a9:15:68:aa:17:7e:d5:
17:f9:65:d8:b4:93:eb:8f:f6:ec:d1:87:ff:8c:1d:7c:74:55:
7c:e8:e1:42:d3:72:f3:98:5e:56:61:0f:1a:c6:11:44:b2:7a:
4a:56:cc:3d:d3:e3:69:13:64:6e:c0:4c:e3:eb:4e:46:fe:96:
e3:05:47:40:5f:dc:f0:86:ff:55:00:0e:15:9c:9d:48:cc:a4:
61:45:8f:45:b5:da:a6:5a:66:b7:5e:cf:69:a3:cd:6e:1b:e8:
ed:ab:2d:f0:e7:43:f0:be:dd:6f:20:3e:c9:5c:1c:c6:9a:51:
c3:75:e6:56:01:87:ba:28:17:bd:95:54:10:dd:e8:43:6a:e6:
1f:80:c5:6a:47:5c:d5:5a:b7:6a:bf:8c:e4:e3:0c:1d:d0:4f:
26:3a:d9:2e:e9:59:86:72:a6:95:bd:12:48:b0:f1:6c:16:4d:
d0:1b:da:fd:ac:41:4d:35:a7:98:59:0d:f7:74:c3:39:af:30:
e4:d4:2f:37:91:2d:bd:a8:97:80:75:94:4a:e9:d3:1c:98:67:
52:c1:a1:6d:5e:d4:94:db:f6:5e:3c:24:b1:3c:01:a4:95:90:
b1:fb:06:ac:fe:b6:51:e7:8e:77:4a:29:83:90:b1:40:f5:96:
c8:19:fc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:02 2026 by rpki-client