Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: A382f85+0XmkKE5rw+K2f+FtVe/v/hrqEoFUzPiMOx0=
Subject key identifier: 27:88:49:93:BB:D0:B6:2D:72:1C:D6:38:BF:E9:0D:72:DF:C6:72:9D
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019D9AAB7DBC890B6F52A779F710EE22F297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 13CB
Signing time: Fri 17 Apr 2026 09:00:23 +0000
Manifest this update: Fri 17 Apr 2026 09:00:23 +0000
Manifest next update: Sat 18 Apr 2026 09:00:23 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: XfmyWSC+AbF5JK34BK6+U20jyuJ6Z8aiCjC1X7QILYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7d:bc:89:0b:6f:52:a7:79:f7:10:ee:22:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Apr 17 09:00:23 2026 GMT
Not After : Apr 18 09:00:23 2026 GMT
Subject: CN=27884993bbd0b62d721cd638bfe90d72dfc6729d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:f6:c6:d3:db:66:c1:1f:72:2f:5f:2e:78:
6a:fc:6d:da:b8:31:e2:1a:d4:b7:e0:3e:09:d4:59:
e6:66:a5:dd:b8:73:84:cc:41:eb:b7:1f:ca:1b:e1:
84:93:ea:c5:6f:b9:c2:47:d7:95:c5:6e:07:98:2e:
82:35:63:cf:d6:66:5f:28:4f:e1:7d:58:99:4c:9c:
37:4e:29:62:20:8d:b5:9f:5d:00:dc:76:9c:01:27:
6a:2f:51:81:49:29:83:13:ed:1c:55:1b:5a:1f:ba:
3f:55:ab:92:53:f8:09:45:5f:1c:2d:eb:50:c3:3c:
0d:e7:6f:8c:03:c8:1b:b4:78:9a:5e:fc:9a:94:27:
89:8d:1c:4c:d1:85:7b:1e:6e:d2:12:0b:b8:12:34:
a7:ab:cf:f0:0e:de:ff:5b:db:73:a9:e6:a4:d4:db:
14:94:dd:a7:da:08:d7:6a:4a:e5:24:70:40:78:07:
bf:59:61:e6:fb:9e:0b:b0:41:23:f5:68:5b:f4:ea:
c7:ea:f0:e4:37:14:dc:34:69:35:c8:12:9a:34:f8:
eb:8b:80:d0:8e:cf:58:45:c7:a0:00:a6:64:3f:14:
4e:a3:95:f3:e1:47:0a:0a:c3:4b:b2:b3:d0:ce:cb:
73:eb:70:f9:61:ff:20:ae:65:04:6c:c9:a5:c2:37:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:49:93:BB:D0:B6:2D:72:1C:D6:38:BF:E9:0D:72:DF:C6:72:9D
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cf:02:10:71:03:08:68:5c:f6:06:55:83:e0:74:7a:ae:d8:
62:64:fa:cc:5e:3c:64:ee:3c:d3:0e:c3:23:21:68:77:cf:86:
c1:44:e9:12:a2:b6:d9:c3:cc:18:78:3b:3c:56:d4:38:cf:e6:
40:41:b2:c7:82:e4:bf:05:a7:14:d2:8f:df:30:c1:d1:94:ab:
68:aa:e6:cc:66:f1:17:6f:72:84:9d:ce:ad:24:3b:06:86:0c:
58:8d:02:1b:d4:5e:d2:2c:3d:ac:1b:bd:96:6e:0e:ea:99:69:
a5:c5:c9:50:84:1e:b1:77:b1:5b:81:67:6e:7b:b4:0f:37:d8:
20:25:e3:a2:f1:1b:7b:6d:01:d9:6d:fb:0e:77:13:f7:f6:6c:
3f:b3:bd:69:7a:75:86:56:c8:b8:98:ec:a3:f0:c2:38:ea:e6:
0c:13:56:cf:35:52:34:30:ba:26:1f:10:a2:eb:c2:91:84:1f:
a0:6f:4d:b1:bd:6f:9f:ad:89:ef:b8:09:2b:c5:1a:91:b0:30:
63:86:5d:95:be:e9:ab:52:e8:58:bc:d6:d5:13:51:8b:ce:a2:
40:f2:26:ae:f8:1e:17:b3:57:8d:8f:c2:06:9e:71:bc:00:36:
f3:d5:25:73:8f:58:d8:9f:e1:7d:c8:e2:26:da:c2:ea:18:93:
62:e2:bb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:00 2026 by rpki-client