Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: rQIjsAfM4knvV90zJNXLlT/Qqp1veMiLjTYdj911heA=
Subject key identifier: F0:12:B3:EA:C1:B7:AC:7F:9D:8A:09:A2:C1:37:62:45:55:67:A8:EC
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 019D996220F11AAB37CD7E2F7D064BB12900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 0534
Signing time: Fri 17 Apr 2026 03:00:38 +0000
Manifest this update: Fri 17 Apr 2026 03:00:38 +0000
Manifest next update: Sat 18 Apr 2026 03:00:38 +0000
Files and hashes: 1: CWrDgc5NbM6Zs9itj9MrhDXauLk.roa (hash: 560ydlJiyR+07bXN/UJ/XSK5/4Gksiqy4Mjbt8hjlzc=)
2: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: 56PkltGXTybiOh1HH8BSbSb/ifoElWtsvGiVzLUAhk4=)
3: xf3fvrapGPL0YVXoyYDdzlTvzBQ.roa (hash: Lr8wCklzvs9FPPUMnaTVlsRfmWB1G14CuyO51jqEGdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:20:f1:1a:ab:37:cd:7e:2f:7d:06:4b:b1:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Apr 17 03:00:38 2026 GMT
Not After : Apr 18 03:00:38 2026 GMT
Subject: CN=f012b3eac1b7ac7f9d8a09a2c13762455567a8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:c1:55:9d:f9:d3:58:40:01:1c:a2:b7:f7:
6a:77:e0:b4:24:b3:ad:ba:07:b9:0f:1f:e0:26:2c:
0c:11:01:a1:7c:fd:fd:53:b9:27:d3:88:3c:53:62:
23:97:4a:56:c7:2e:19:30:da:3e:08:d9:10:d1:9f:
e4:5e:b5:1a:82:e9:cd:ef:42:5a:b8:2b:5f:e1:8b:
ad:81:16:19:cf:67:c4:f3:c3:82:5d:de:0a:a9:95:
e7:23:a1:ba:02:14:17:10:e1:a9:75:25:b6:34:1f:
f2:ba:80:57:2b:d8:cc:c6:a1:9e:13:62:46:51:bc:
98:61:9b:fe:e0:a8:fc:ff:db:aa:d2:02:2c:b8:c1:
45:38:89:25:59:3f:38:ab:07:49:26:4f:de:23:93:
ab:16:9d:9e:af:f9:2a:f0:de:b8:d6:16:7b:ae:ce:
b4:05:aa:14:8f:a7:93:04:89:12:a3:e8:96:a9:a2:
13:1a:ea:0a:4e:88:9a:aa:b1:7e:a2:c5:1e:be:5e:
39:c7:2b:86:5c:2c:18:6f:05:69:d3:15:e3:aa:b3:
f2:f2:7a:16:9d:3c:e0:bd:f2:0d:d4:66:66:37:d2:
df:33:d4:c3:bd:5f:76:f5:9d:99:31:ac:8e:99:cf:
5f:f0:97:a1:83:9d:6e:0c:fc:ea:78:d7:4f:28:d5:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:B3:EA:C1:B7:AC:7F:9D:8A:09:A2:C1:37:62:45:55:67:A8:EC
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bf:ec:5b:45:1d:0b:6b:2b:28:f0:97:93:55:0d:e3:ac:7c:
59:65:3e:81:b7:62:e5:27:d4:62:5f:ad:74:4d:c7:41:b9:43:
69:75:18:1e:a7:77:7f:17:f6:85:ee:ea:7b:20:00:35:e3:e3:
b2:2a:c3:bb:4f:a2:51:b2:96:ae:2e:c6:da:23:99:20:69:e3:
4c:47:42:53:27:5b:80:e7:c6:e4:fe:8d:b4:48:d4:83:ea:54:
b8:ca:4c:b7:fb:ce:a1:61:79:59:4b:ac:75:17:97:1c:71:1f:
5c:07:16:11:cf:5b:cc:fe:2b:ae:57:eb:23:21:4b:eb:76:e9:
c2:b8:00:64:3e:ec:5c:2d:81:e0:31:4a:ed:36:54:e6:b6:c2:
e5:a0:dd:dd:c4:74:2e:ed:3e:a3:bb:94:db:55:46:ff:67:9d:
a5:7f:92:b5:eb:54:be:20:3a:d8:f9:07:04:e9:d1:16:84:7e:
5b:39:eb:4e:9f:a2:6a:da:e0:5f:25:04:6e:81:b7:28:75:fc:
dd:86:8b:42:43:a1:10:2f:84:16:eb:9d:44:eb:37:51:3e:53:
32:e3:9f:94:11:d9:6c:4b:d7:36:a5:52:5c:fc:75:db:49:cd:
6e:26:ca:8b:29:8b:c2:32:fa:7d:cc:a4:b3:01:51:a8:a5:a6:
a4:4a:99:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiDxGqs3zX4vfQZLsSkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2Y2ZTJiNjBjYTQ2NDcwMGRkOGUyOGZiYTBkYWFkYzJj
NDBjZWQwHhcNMjYwNDE3MDMwMDM4WhcNMjYwNDE4MDMwMDM4WjAzMTEwLwYDVQQD
EyhmMDEyYjNlYWMxYjdhYzdmOWQ4YTA5YTJjMTM3NjI0NTU1NjdhOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EjBVZ3501hAARyit/dqd+C0JLOt
uge5Dx/gJiwMEQGhfP39U7kn04g8U2Ijl0pWxy4ZMNo+CNkQ0Z/kXrUagunN70Ja
uCtf4YutgRYZz2fE88OCXd4KqZXnI6G6AhQXEOGpdSW2NB/yuoBXK9jMxqGeE2JG
UbyYYZv+4Kj8/9uq0gIsuMFFOIklWT84qwdJJk/eI5OrFp2er/kq8N641hZ7rs60
BaoUj6eTBIkSo+iWqaITGuoKToiaqrF+osUevl45xyuGXCwYbwVp0xXjqrPy8noW
nTzgvfIN1GZmN9LfM9TDvV929Z2ZMayOmc9f8Jehg51uDPzqeNdPKNX4LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPASs+rBt6x/nYoJosE3YkVVZ6jsMB8GA1UdIwQY
MBaAFKB/bitgykZHAN2OKPug2q3CxAztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGIt
YmNiNzI0YmMyNjg0LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGItYmNiNzI0YmMyNjg0
LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJr/sW0Ud
C2srKPCXk1UN46x8WWU+gbdi5SfUYl+tdE3HQblDaXUYHqd3fxf2he7qeyAANePj
sirDu0+iUbKWri7G2iOZIGnjTEdCUydbgOfG5P6NtEjUg+pUuMpMt/vOoWF5WUus
dReXHHEfXAcWEc9bzP4rrlfrIyFL63bpwrgAZD7sXC2B4DFK7TZU5rbC5aDd3cR0
Lu0+o7uU21VG/2edpX+StetUviA62PkHBOnRFoR+WznrTp+iatrgXyUEboG3KHX8
3YaLQkOhEC+EFuudROs3UT5TMuOflBHZbEvXNqVSXPx120nNbibKiymLwjL6fcyk
swFRqKWmpEqZ1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:43 2026 by rpki-client