Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: XwW5r+P+YYTduATtaPMJFiA4onFsQeCfpW+uxls6Dxw=
Subject key identifier: C1:B3:9A:71:5D:F1:E1:93:41:90:92:BF:24:98:5F:D9:D0:70:60:DF
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019D9AAB8EBFC357DB39FAC58FB1E73EECFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0DE5
Signing time: Fri 17 Apr 2026 09:00:27 +0000
Manifest this update: Fri 17 Apr 2026 09:00:27 +0000
Manifest next update: Sat 18 Apr 2026 09:00:27 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: fNkjf8jKxGYx6YR6vo8y053Rwfjlmu1DJ2GQXEdkuZc=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8e:bf:c3:57:db:39:fa:c5:8f:b1:e7:3e:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Apr 17 09:00:27 2026 GMT
Not After : Apr 18 09:00:27 2026 GMT
Subject: CN=c1b39a715df1e193419092bf24985fd9d07060df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:6c:53:bf:bc:d0:ec:c9:0c:e1:7f:d0:78:
b3:6a:ea:4f:16:97:90:56:49:a3:38:d0:52:03:4b:
b9:62:b6:6e:d9:17:75:bd:4c:8b:b8:cc:bd:e4:53:
05:98:11:15:ff:51:78:ee:7c:12:9c:85:a0:aa:73:
63:44:dc:fb:8f:87:4b:d1:5d:8d:80:0b:ee:3b:56:
4d:f2:60:01:0e:8f:14:ff:a8:50:37:6e:95:8d:f1:
63:6b:ee:ea:4d:dd:71:e4:d1:41:6e:a5:a5:53:d4:
52:ad:0a:12:b2:74:f6:04:17:38:fd:f0:44:d6:b2:
5b:6f:99:ca:cb:99:da:07:8e:ab:19:51:29:da:5e:
9c:9d:21:fe:e3:3e:8c:00:2b:75:2a:70:4b:7c:8d:
32:87:ed:a8:9f:c0:b1:8b:5c:f8:73:4b:97:a5:41:
80:73:bd:c6:18:c8:de:c8:e1:3d:fd:7d:04:0f:fe:
e3:cc:d3:b5:f3:b6:0d:88:5e:0d:b7:f1:a4:b1:4b:
80:4b:a9:44:75:49:b5:1f:0d:23:3f:de:53:4b:e4:
88:ab:25:7d:c1:54:72:56:7a:ec:45:b9:51:d1:fe:
0a:a6:7d:55:f2:4d:0d:1a:e0:65:e8:f6:c0:b5:c8:
c3:54:cd:62:a6:01:9d:31:09:12:c7:1c:1c:a5:ec:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:9A:71:5D:F1:E1:93:41:90:92:BF:24:98:5F:D9:D0:70:60:DF
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8d:22:20:fa:0a:5a:f0:ba:33:e8:4e:41:8b:23:50:5f:d3:
79:74:7b:20:0c:40:5d:f4:32:87:72:31:77:de:0d:4e:18:85:
35:a4:96:c6:14:46:73:68:52:5b:1f:d7:b9:cd:46:b5:2f:10:
08:f1:30:4b:8a:99:74:de:63:8c:18:61:85:5f:2b:92:8a:9d:
8e:be:0f:d8:49:fb:47:f5:08:e2:37:3d:d2:e7:df:36:f6:a1:
74:5e:d6:2b:2d:a0:07:30:f1:d0:b2:ec:ca:53:44:53:08:32:
d4:4d:19:db:87:86:35:b7:13:d0:76:c4:21:a3:92:31:c7:96:
cd:52:34:54:9b:07:5c:2d:09:ed:fb:95:9c:12:c1:d8:9b:15:
03:c5:58:e2:62:44:b6:1b:06:34:1b:ea:ca:01:67:b0:00:d9:
ee:a2:e5:4a:ab:1a:40:ad:5f:b4:a4:03:b9:82:5e:06:a3:4c:
78:ee:37:52:b7:48:d8:ad:66:2f:ff:3d:f1:3f:e5:8c:00:1c:
36:4f:c2:38:e6:ee:0a:25:a1:bb:b5:60:8a:43:cd:d5:88:c3:
9d:31:da:85:34:37:0b:dc:d0:6b:46:b9:84:0e:f1:37:7f:8c:
53:08:d8:5e:4b:a9:b3:69:f8:10:18:d3:ca:5a:08:ac:bc:50:
d3:5e:f7:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq46/w1fbOfrFj7HnPuz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjYwNDE3MDkwMDI3WhcNMjYwNDE4MDkwMDI3WjAzMTEwLwYDVQQD
EyhjMWIzOWE3MTVkZjFlMTkzNDE5MDkyYmYyNDk4NWZkOWQwNzA2MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPdsU7+80OzJDOF/0HizaupPFpeQ
VkmjONBSA0u5YrZu2Rd1vUyLuMy95FMFmBEV/1F47nwSnIWgqnNjRNz7j4dL0V2N
gAvuO1ZN8mABDo8U/6hQN26VjfFja+7qTd1x5NFBbqWlU9RSrQoSsnT2BBc4/fBE
1rJbb5nKy5naB46rGVEp2l6cnSH+4z6MACt1KnBLfI0yh+2on8Cxi1z4c0uXpUGA
c73GGMjeyOE9/X0ED/7jzNO187YNiF4Nt/GksUuAS6lEdUm1Hw0jP95TS+SIqyV9
wVRyVnrsRblR0f4Kpn1V8k0NGuBl6PbAtcjDVM1ipgGdMQkSxxwcpeyFKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGzmnFd8eGTQZCSvySYX9nQcGDfMB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApI0iIPoK
WvC6M+hOQYsjUF/TeXR7IAxAXfQyh3Ixd94NThiFNaSWxhRGc2hSWx/Xuc1GtS8Q
CPEwS4qZdN5jjBhhhV8rkoqdjr4P2En7R/UI4jc90uffNvahdF7WKy2gBzDx0LLs
ylNEUwgy1E0Z24eGNbcT0HbEIaOSMceWzVI0VJsHXC0J7fuVnBLB2JsVA8VY4mJE
thsGNBvqygFnsADZ7qLlSqsaQK1ftKQDuYJeBqNMeO43UrdI2K1mL/898T/ljAAc
Nk/COObuCiWhu7VgikPN1YjDnTHahTQ3C9zQa0a5hA7xN3+MUwjYXkups2n4EBjT
yloIrLxQ01732Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:27 2026 by rpki-client