Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: DDjA8K2fAQWj4WLTcLvV4IMn7B9CC6vriJrZUdYwZqo=
Subject key identifier: 23:40:03:40:2B:92:6A:E2:3F:DB:21:73:CF:11:4C:92:71:E5:A0:9F
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019D9B50A8096024D3A3A0FD15DF54BF3CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:47 +0000
Manifest this update: Fri 17 Apr 2026 12:00:47 +0000
Manifest next update: Sat 18 Apr 2026 12:00:47 +0000
Files and hashes: 1: 1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa (hash: Gm5FahEhYqsf3/1qvhcpLeaE1t89Xgh/p3OZKItZTUY=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: 5A4V1bCzb/brkqyAQzAoLg5uSlUuIi9Xev/fIrvJugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a8:09:60:24:d3:a3:a0:fd:15:df:54:bf:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Apr 17 12:00:47 2026 GMT
Not After : Apr 18 12:00:47 2026 GMT
Subject: CN=234003402b926ae23fdb2173cf114c9271e5a09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:50:1c:0f:58:d8:bf:5d:87:f1:41:03:f0:
06:a2:0a:f5:56:e2:46:b0:b4:da:2d:4a:3b:b7:2a:
4e:78:c5:57:46:1a:d2:96:cc:33:00:4f:58:67:ad:
e0:0d:fc:f4:1d:11:cc:74:7a:59:13:21:b7:5c:2d:
d7:95:f8:22:30:2f:0e:65:80:76:ca:01:d3:d4:dc:
cf:75:0a:93:dd:d7:ee:25:d9:19:a7:db:98:96:ec:
35:75:f0:8e:5e:f3:37:cb:bc:06:ff:38:57:47:e4:
06:ed:99:89:d2:f0:2b:ee:40:26:92:2e:76:80:b7:
53:83:80:ef:20:ca:c7:27:17:cc:06:60:d4:2a:57:
c2:82:b1:5e:32:7e:c0:81:07:da:a1:6f:ff:76:76:
ac:8e:dc:58:cf:29:de:2b:2d:d2:e1:5d:b5:df:c7:
e2:8c:04:e9:b2:ad:dd:53:c9:1b:e7:6f:94:07:45:
03:99:17:f7:15:00:09:ea:ff:11:db:c6:18:57:e6:
a9:cf:2c:5a:78:73:8d:fe:d6:30:be:4a:7d:09:63:
53:d9:15:f6:01:32:c4:73:63:da:e9:ad:de:4d:53:
2d:e9:09:95:b2:f6:3f:5c:58:6e:2f:1d:69:d0:1b:
08:b3:5e:5f:ce:90:35:41:c6:9b:c7:61:9c:9d:23:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:03:40:2B:92:6A:E2:3F:DB:21:73:CF:11:4C:92:71:E5:A0:9F
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:03:46:77:39:90:73:83:3d:7f:8e:8a:05:f9:d2:8a:1c:
06:80:ab:64:e6:a5:25:36:06:c9:15:96:62:9b:90:2a:a2:28:
9a:56:61:06:8c:26:74:90:23:66:c3:b7:15:0e:a8:98:51:fe:
91:db:16:2e:18:9e:08:db:4c:57:0d:98:b2:84:2c:a4:bf:17:
d9:99:a5:2e:3d:4f:21:82:20:a5:ff:0e:5e:e5:76:51:f8:ed:
48:12:80:dc:cb:9e:2d:44:ab:a3:e2:cb:c4:bd:d4:f4:16:2f:
3b:b5:65:cd:c6:df:2c:c6:b7:63:b6:aa:c6:e0:46:03:a1:02:
b5:c8:56:2c:2f:81:ec:37:4f:c7:2b:9e:78:96:0d:57:5c:ab:
65:f9:f2:3a:f6:dd:c1:82:15:88:01:c4:a8:b8:b5:d7:d9:67:
7b:80:fe:fd:c0:45:d6:18:9c:73:e8:ca:f8:c5:0b:fa:88:41:
0d:0f:a1:5b:4f:9e:43:2e:40:b0:2d:8a:69:c9:0e:bf:31:99:
a0:b8:6b:91:94:75:7e:1e:7f:94:3f:4c:77:d4:76:6c:c9:71:
30:19:2a:21:42:93:36:2d:01:2d:f8:98:7e:86:b3:9c:0d:09:
53:16:c9:e0:c1:7e:e1:ab:ef:bb:a2:fd:70:c2:ec:40:31:c9:
af:bc:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:58 2026 by rpki-client