Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: grK1OTzBEl+1WfPwtICEHqYFE9s5pUL+irIKroVDcy4=
Subject key identifier: F3:1E:23:A6:52:FF:2F:9A:25:35:9E:B6:20:30:49:A8:3F:83:39:5F
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019DA454123E219344B655E8545AB633F084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0AC4
Signing time: Sun 19 Apr 2026 06:01:06 +0000
Manifest this update: Sun 19 Apr 2026 06:01:06 +0000
Manifest next update: Mon 20 Apr 2026 06:01:06 +0000
Files and hashes: 1: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: JZF1rV/XJj31h0RbyAVVbVL7LgFranzPnweTaNDurJU=)
2: wVx12s3RofqhZGn1DU5IkoBo6Ek.roa (hash: rtRYGzz5et6AkfKvUX/IWgHJLFa3ZiIV+HrHpHk9/S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:12:3e:21:93:44:b6:55:e8:54:5a:b6:33:f0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Apr 19 06:01:06 2026 GMT
Not After : Apr 20 06:01:06 2026 GMT
Subject: CN=f31e23a652ff2f9a25359eb6203049a83f83395f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:3e:4b:59:2f:6e:9b:de:48:82:f7:74:de:
3e:2a:b0:a5:9f:22:4b:18:ba:54:95:24:86:9b:d3:
46:82:80:4b:16:d8:ba:2a:60:c9:47:1d:69:1e:d3:
14:60:7c:d1:db:ff:b5:a7:26:a1:db:50:66:bd:9f:
4c:22:28:32:d0:0f:51:52:7b:b1:e9:64:6e:ad:14:
9f:09:80:3f:3e:07:d2:93:95:fe:c9:f5:33:ac:31:
b5:f4:45:16:3e:aa:b1:16:e3:e5:35:6b:75:65:da:
37:e4:49:60:36:56:e6:50:55:f7:65:16:d2:72:4f:
3f:43:45:9e:45:69:d6:d8:05:e6:59:64:d7:4f:92:
34:87:4f:5d:a2:00:7d:c7:d5:92:29:f0:6e:61:42:
5c:8a:89:b2:00:e2:2a:b8:10:c6:86:8b:d1:b1:3e:
ac:41:e2:30:e5:61:72:3e:33:3a:4f:2c:44:34:c5:
9c:bc:c1:0c:32:8c:27:62:a8:6c:74:c1:73:43:cc:
c0:79:34:2f:53:73:fa:8e:b2:f8:14:3b:34:3a:1a:
8d:bb:56:4c:45:c7:33:67:52:00:b7:d8:70:6e:09:
79:e8:70:a9:cf:a8:5b:e3:a9:33:f6:2e:f9:0b:b3:
ef:81:d3:26:a5:90:ae:41:f7:f4:99:a8:a0:50:4f:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:23:A6:52:FF:2F:9A:25:35:9E:B6:20:30:49:A8:3F:83:39:5F
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:85:fa:0e:ec:52:c2:7d:32:e7:c2:8b:cc:c4:40:5e:10:
59:7c:07:c0:9d:61:95:91:98:b0:3c:31:b5:e1:2d:76:6e:36:
3c:36:c8:3d:20:a9:e0:2c:2c:69:a9:ba:f5:71:31:7c:f9:bd:
40:2e:d1:92:5a:a0:f1:95:75:be:2b:7f:02:ff:ab:ab:1e:b2:
17:3d:fb:f3:b3:94:d4:e7:a9:02:0b:87:66:16:d2:2c:19:f4:
58:95:21:80:c5:dc:06:41:6b:a6:02:f2:16:98:38:1b:f5:84:
b5:d1:d6:0b:ef:bc:95:25:f1:2b:50:83:cc:55:c6:22:c6:7d:
1a:8e:3f:9a:8c:4c:27:5b:58:04:87:9d:70:ca:2c:b4:6a:ae:
71:99:66:0f:4e:bb:8a:fb:1f:ea:41:97:86:58:05:ab:a7:90:
78:85:b9:6c:cd:95:9f:0e:61:82:c1:0f:41:94:7f:40:6f:33:
82:24:4d:8a:3a:f9:16:f3:a8:48:80:da:48:b2:ef:24:a8:45:
ef:d3:a4:0b:71:d4:05:a6:e6:56:01:1c:2a:87:3f:07:49:f0:
09:01:56:2c:47:df:ce:53:c8:50:db:1a:98:ca:66:4e:80:4f:
5d:b7:7e:96:13:f6:90:f2:83:24:60:d5:9a:a6:b6:1a:66:1e:
d2:11:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:52 2026 by rpki-client