Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: jdbzR+ebt+A8SiCSrGubtO7/6C1ge7WPklw8FePIrPc=
Subject key identifier: 59:AC:80:CB:3C:F6:AA:33:7F:29:33:8E:EE:7A:24:39:F5:50:9E:0D
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 019D97AAC8C007B3C3EB1462150FF33A3503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 18CA
Signing time: Thu 16 Apr 2026 19:00:45 +0000
Manifest this update: Thu 16 Apr 2026 19:00:45 +0000
Manifest next update: Fri 17 Apr 2026 19:00:45 +0000
Files and hashes: 1: 1nYeCdEIBl74RW5H49WfsI_nh5E.roa (hash: EcWzaBWnHXuF+60jlRtvVMtfG/DsbN91ytwmWQKXBaU=)
2: WJ5q-_YpjemWY4gDwOrsfg8-7ps.roa (hash: 7c7RZOTv3Be2R6ZcFGTG+yBTp0jpJb35qh0V1e0nACU=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: mbLziEyBCBbzzubr7Owwwe2Om+lIzsqLwdD59pmiJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:c8:c0:07:b3:c3:eb:14:62:15:0f:f3:3a:35:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Apr 16 19:00:45 2026 GMT
Not After : Apr 17 19:00:45 2026 GMT
Subject: CN=59ac80cb3cf6aa337f29338eee7a2439f5509e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:06:df:9f:92:7b:27:0e:03:d3:0f:bf:71:
b1:7b:73:b3:35:df:ac:b6:54:18:6e:3c:3c:70:61:
58:e9:55:29:0e:00:f1:42:4c:a3:60:87:78:a7:03:
d5:dd:de:82:1a:d5:0d:be:45:5f:c0:58:d3:03:01:
c9:08:d2:ea:af:d3:f4:e2:b6:7f:8a:49:b4:28:cb:
3d:e7:69:7c:00:de:be:d8:2d:35:3a:dc:5b:57:5e:
1c:ee:92:04:ad:65:c9:1e:80:27:48:10:ee:37:8a:
89:cb:da:85:eb:3a:19:ed:47:1b:f5:07:e4:55:f9:
d5:ca:a3:f9:06:c5:60:19:3d:32:9a:a7:1c:e7:b9:
32:21:fc:50:9e:62:69:d5:6a:e4:80:7e:34:74:eb:
3f:71:da:26:26:48:72:f4:20:94:37:45:1a:75:38:
4e:f3:d7:8f:62:c1:59:6d:79:53:ab:83:d1:08:b4:
c1:0a:59:1b:62:00:f3:83:9f:02:55:53:1f:a5:2d:
42:22:98:2a:9c:35:b4:e6:ad:01:7b:95:87:c5:99:
5e:1e:47:aa:1e:ec:ae:53:d8:cd:27:3e:31:0e:a6:
3b:cb:23:0a:6e:98:41:46:9a:03:fe:a8:e1:f5:d6:
7f:18:a7:15:c9:9c:70:fc:d4:16:fe:1d:b4:89:e6:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:80:CB:3C:F6:AA:33:7F:29:33:8E:EE:7A:24:39:F5:50:9E:0D
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:58:92:9d:0f:78:a4:60:36:e7:b9:0e:b9:46:b8:71:7a:98:
d4:60:bb:d6:28:2e:dc:40:35:a8:ef:a7:30:df:99:c2:d4:a7:
27:8d:39:36:30:3f:9b:66:2e:61:1c:7a:ad:db:8c:52:6e:14:
9e:33:e8:e7:a7:14:8c:42:a5:80:74:84:eb:8c:84:52:ac:6e:
47:70:ea:b5:45:4e:02:68:ac:89:16:e1:20:ee:8b:9c:e3:5c:
c8:94:e0:15:e7:8c:45:8b:70:15:c6:39:a8:ee:de:27:02:42:
bd:23:9d:c1:49:40:08:b4:34:3c:3a:83:08:7d:bd:86:24:80:
cc:08:9b:e6:66:40:52:b1:d4:6b:87:de:b1:b5:ed:ff:7b:e9:
ef:85:09:e7:56:94:4b:ee:cd:df:11:28:7e:68:73:03:c0:e1:
c4:40:05:f0:5b:37:b8:3d:96:61:6a:54:d1:62:38:32:18:69:
52:f2:97:4e:cc:a0:3e:bc:e7:63:09:30:f8:60:e5:e3:e8:67:
f0:33:9b:8e:78:5d:54:ce:7c:e3:d7:ac:74:5c:2e:e3:03:57:
06:4b:3c:e7:3e:78:a5:95:18:cf:16:8d:aa:47:e4:9e:06:a5:
44:d7:e8:13:ef:d4:ef:7a:fd:b5:c8:24:ea:c6:ab:45:c8:79:
67:3a:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:01:04 2026 by rpki-client