Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: 8MxmE0T08/KFCdAv6JsaRLFbNotj1aR5ZE8my0Fn2NE=
Subject key identifier: 5F:C6:A5:0E:03:28:F0:92:B1:31:6F:66:29:04:08:53:B1:4D:EC:5A
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 019D9961E593F1A63B871EED2DD418616FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 068A
Signing time: Fri 17 Apr 2026 03:00:22 +0000
Manifest this update: Fri 17 Apr 2026 03:00:22 +0000
Manifest next update: Sat 18 Apr 2026 03:00:22 +0000
Files and hashes: 1: DsjnP70xJrDmj0g_UlKJTaTYlrE.roa (hash: dQTLlCPrfnfLcZWl7wxf8pl/h6tKSJhaHDIpDeYdmfQ=)
2: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: Q6COu51bVl5qgb9B8N4F8Ao1SQ3bqXWcgLXJxN6ZWoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e5:93:f1:a6:3b:87:1e:ed:2d:d4:18:61:6f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Apr 17 03:00:22 2026 GMT
Not After : Apr 18 03:00:22 2026 GMT
Subject: CN=5fc6a50e0328f092b1316f6629040853b14dec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:ca:bb:71:dc:5f:25:eb:2d:bd:18:92:ea:
0a:a2:73:bb:7c:30:8f:c2:13:96:8f:7f:52:a8:ee:
f7:ad:73:93:7c:23:35:a2:52:16:3a:c1:ca:cc:1f:
36:d9:30:6a:52:ea:5c:a6:e8:81:76:b9:b5:3f:c7:
52:47:8b:f8:3e:8d:3e:b0:93:a6:10:8d:89:b0:87:
ac:6c:96:8f:d1:bb:13:e2:7e:cc:35:3f:e9:d7:98:
72:ea:7d:e4:6c:4e:0e:c9:fa:05:17:2c:14:4f:27:
e7:7a:89:01:dd:42:24:b1:63:a2:17:92:3a:ef:f1:
c6:f5:dd:73:fb:d2:60:01:94:11:5d:91:ac:96:c8:
90:13:da:db:e5:ab:5c:55:ce:38:90:37:15:14:46:
d3:c2:3f:b6:cd:1e:ee:6f:10:52:0f:b9:8f:76:43:
ea:fe:4d:1c:bb:a1:f0:55:13:ca:7d:cd:9f:38:99:
8c:6b:e4:67:08:a1:a8:b3:bd:b8:4f:28:56:f3:d2:
d9:2f:10:77:d9:5b:fa:c1:b2:49:b4:fe:a1:56:72:
ec:db:d3:a1:ad:e7:0d:b2:fe:95:58:56:6f:2d:d3:
85:2d:b7:bc:b3:29:10:75:fe:ff:e0:e8:68:8f:f2:
85:ad:9f:b3:ff:7f:0a:b7:f4:85:fe:ea:ab:2c:f4:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:A5:0E:03:28:F0:92:B1:31:6F:66:29:04:08:53:B1:4D:EC:5A
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:c2:d1:fb:27:b9:8f:c2:f7:cc:2b:97:20:28:b5:48:d6:
69:dc:36:af:31:0f:0c:1a:88:3f:d3:7f:42:ba:72:75:dd:f9:
db:f9:26:5d:5e:76:21:10:ac:c8:5c:d4:24:4d:33:a0:8d:44:
96:20:ce:c0:f4:3b:3a:86:6a:8f:7e:b6:07:a5:a6:b4:ed:fe:
66:c7:5d:c5:01:ce:87:ab:ac:1e:db:60:31:23:ad:7f:01:c3:
dc:ca:3a:6a:f0:ab:d2:cd:9b:02:42:71:2c:81:fa:47:41:2f:
f3:74:75:af:17:44:07:d2:b8:db:54:80:19:03:4a:db:a4:85:
3f:40:54:3a:5d:20:3b:57:b4:d4:b1:f2:5f:99:28:8d:a9:3f:
94:3b:03:a5:34:75:f5:ec:ab:44:58:c8:75:30:c1:b4:31:fa:
41:d8:ce:a7:cf:b5:a8:41:b6:ee:95:d3:b9:9e:d2:6e:e9:37:
59:a5:bc:45:f0:14:65:9a:09:02:44:b0:28:07:3e:cd:68:ea:
49:91:51:04:44:6c:df:b3:da:b0:dc:e7:a8:d0:07:c7:f0:fa:
5c:3e:49:fd:a0:aa:c7:d5:cd:e0:72:d8:d9:f5:df:7d:f3:c7:
63:58:3e:b2:8f:14:43:db:cc:dd:a0:c9:eb:4d:c7:7c:e7:fe:
c1:e6:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:54 2026 by rpki-client