Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: 4FsMnXyC7HW/aAQLz7JkzIVHSTDx7nSRMQdshCDVTdc=
Subject key identifier: 6B:91:54:F3:2A:7D:92:82:99:F0:E5:DE:03:35:3E:1C:16:6D:8A:A8
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 019D9A3E68A3A7CDA99B3017F3453BA5D565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 07:01:14 +0000
Manifest this update: Fri 17 Apr 2026 07:01:14 +0000
Manifest next update: Sat 18 Apr 2026 07:01:14 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: qqFYV8vfeykprwQIZV/RKaKJ4UjhydR2SrMATr5lIT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:68:a3:a7:cd:a9:9b:30:17:f3:45:3b:a5:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Apr 17 07:01:14 2026 GMT
Not After : Apr 18 07:01:14 2026 GMT
Subject: CN=6b9154f32a7d928299f0e5de03353e1c166d8aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:12:75:94:52:97:5e:51:4c:00:3b:4d:62:
65:e8:58:8f:f6:c0:16:98:a3:2f:4d:76:cc:38:73:
80:42:84:a1:89:c5:be:2d:96:55:df:53:60:ae:5d:
68:58:d8:da:15:84:f3:3a:0c:c1:d1:dc:45:20:82:
83:e4:e9:1c:d4:61:a3:70:12:aa:5f:cb:42:a2:86:
c8:f6:0b:11:52:6c:39:8d:d2:27:5b:f9:30:6b:2d:
27:f7:63:7e:37:c7:e6:46:31:78:70:09:d5:34:34:
2a:4c:f7:3c:9c:11:66:45:41:5c:a3:19:a5:c0:35:
22:df:a9:23:e4:ac:c2:a9:5e:74:ee:b6:84:e9:bd:
0b:bf:72:5e:7d:c6:82:60:14:c0:0d:0d:2b:69:7d:
ce:a3:20:f5:17:7c:0b:7a:8f:eb:33:2a:dc:96:3f:
4d:30:c4:1b:1e:59:d6:d2:04:46:da:fe:0d:32:63:
44:bd:fe:13:e2:5b:cd:eb:98:2f:01:57:e5:45:86:
3c:00:6d:cc:92:28:25:d3:53:23:73:5e:3e:e0:29:
85:75:c1:6b:88:05:68:df:b7:d1:a2:a2:81:67:3e:
ab:9a:4f:5d:e4:35:ff:7f:f5:0a:c5:1d:62:47:f5:
be:ff:93:f6:03:23:40:a1:56:34:f5:ce:39:84:9b:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:54:F3:2A:7D:92:82:99:F0:E5:DE:03:35:3E:1C:16:6D:8A:A8
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:cd:fe:c4:e1:cc:1c:ca:7c:89:da:da:bb:d9:bf:c4:7c:
49:95:18:2a:04:5b:b6:f0:79:04:cb:37:63:d4:6f:b6:4e:a6:
e0:b4:d4:b3:ed:6a:46:80:ab:cf:bc:b1:4f:44:37:75:94:0d:
5d:00:09:44:e8:c4:cc:e1:f0:33:b1:df:d9:d0:fd:7c:b2:4d:
b9:88:9c:bf:07:e9:e1:c5:11:18:d0:cc:95:06:27:f3:45:ed:
2b:c4:48:25:09:fd:c7:3c:0a:ab:2b:d1:05:0b:b5:64:79:a8:
89:4f:a5:9d:06:f9:46:37:1c:a5:d0:6f:38:b0:07:e4:ee:85:
23:46:b9:0a:1b:1b:7b:90:a5:45:ca:22:2e:e8:b5:a7:e3:83:
ba:d5:91:83:c6:e0:f9:b2:4b:7b:a9:75:e2:39:35:43:2e:f4:
51:54:8f:ea:cd:83:19:e9:a3:a4:84:f5:0e:11:ad:b9:cb:1f:
16:a0:07:21:66:82:bf:52:e4:e9:bf:ea:c1:38:e0:0a:74:26:
9c:86:b4:d2:6d:7e:22:c5:7d:a5:f8:a1:4f:53:9b:32:e9:3d:
7e:95:c9:65:d9:dd:91:09:08:d2:20:a5:4c:ac:81:ab:d1:c6:
bf:70:17:fb:20:b4:29:14:b7:38:4d:28:9e:c0:69:87:22:f2:
cd:ec:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:51 2026 by rpki-client