Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: oOTo+ANedWy4G0RQLppuDIFW/Sg2qSWoiQU2P8KypuM=
Subject key identifier: 76:4A:83:3D:73:41:B7:A6:35:3F:CF:B5:7A:31:4D:6C:52:1F:0D:B9
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 019D984FADCB43E392FE8ACBF1E838BC5010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0D25
Signing time: Thu 16 Apr 2026 22:00:51 +0000
Manifest this update: Thu 16 Apr 2026 22:00:51 +0000
Manifest next update: Fri 17 Apr 2026 22:00:51 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: nE/nnWh131dA/r1iD4N4W/HuDJ1AkJE96KrqZ0HyrqI=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ad:cb:43:e3:92:fe:8a:cb:f1:e8:38:bc:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Apr 16 22:00:51 2026 GMT
Not After : Apr 17 22:00:51 2026 GMT
Subject: CN=764a833d7341b7a6353fcfb57a314d6c521f0db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:3e:e2:17:0c:a0:2d:fc:b8:a9:ee:eb:ec:
23:b7:f7:02:d6:75:2f:19:e5:a6:d6:9d:39:a3:dd:
0e:de:b0:00:8b:e0:b1:ed:13:99:d4:04:5e:cc:68:
66:3d:46:c5:4f:3b:80:eb:f7:6d:0f:2b:e0:f5:f3:
49:e0:94:b5:45:2e:7b:1f:c6:4d:c3:3e:8d:d3:7e:
16:d3:49:f8:86:0b:ca:e2:67:b1:d0:b3:a4:c5:26:
7f:b4:c6:ad:9c:5a:e9:31:0f:0c:69:bc:07:ab:47:
6a:14:d0:ab:92:fd:bf:54:04:e3:00:1b:1f:b0:c2:
be:90:78:86:38:e9:9c:46:09:1b:43:b1:40:c3:32:
96:2f:1e:2b:dc:5e:f7:e6:a0:f7:a4:1c:7e:2e:c4:
ca:08:fe:5f:39:15:2e:d7:8f:47:df:6f:b4:b0:51:
61:41:97:80:4f:8c:58:b0:bb:4c:a6:f9:31:91:d0:
1d:f3:01:60:8c:5e:13:3f:9f:ab:32:52:44:dd:3b:
b5:72:31:64:58:18:1f:24:ad:58:c6:6b:21:b4:83:
9c:56:46:6b:11:53:43:2f:eb:11:c8:6a:63:ce:b2:
e3:f6:fc:25:13:ae:0b:de:6a:02:30:ab:b3:2a:7b:
31:c9:4b:69:2c:00:62:c9:87:10:d4:f5:a4:e3:44:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:83:3D:73:41:B7:A6:35:3F:CF:B5:7A:31:4D:6C:52:1F:0D:B9
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9e:08:73:7f:be:50:74:9b:1e:eb:6b:82:c8:e9:89:f8:94:
2f:0d:03:1f:55:c1:a1:1f:50:8f:c5:4e:85:97:5e:21:8d:8c:
c8:28:ab:6f:8e:46:79:e0:c7:0e:f0:7b:01:1d:8e:a3:21:2d:
35:0f:b1:74:2d:7c:57:82:9f:5e:84:6f:6f:cb:bd:93:2a:3a:
36:29:c0:57:2f:14:51:81:9a:64:2d:b1:b2:70:1a:60:9f:ee:
ff:56:be:bb:ca:92:49:99:6c:3b:b3:46:ff:f6:d2:29:e2:c4:
7a:cc:e3:2d:9d:5a:23:42:b8:d4:c0:8d:a2:54:ea:67:c7:bb:
75:72:0e:93:ff:a5:a8:0b:87:e4:68:5a:96:ef:80:5d:05:02:
dc:09:c3:92:63:12:26:c2:fc:77:46:33:11:f6:75:74:69:7d:
0d:e2:ac:67:17:21:88:48:43:96:d3:fd:44:88:4b:97:3b:8d:
7c:13:77:65:18:d0:01:a2:3a:b0:9b:5d:d8:8c:68:e0:4e:44:
c0:a3:e8:fd:eb:0f:45:0d:a6:ba:05:7b:45:1a:d1:4a:41:1f:
7e:42:75:96:f2:e9:94:e8:5b:7a:ec:0d:aa:a4:8b:01:6c:3f:
21:e9:e1:2b:68:3b:41:d1:a2:b4:a2:22:65:60:d5:e5:9f:24:
b0:4b:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:55 2026 by rpki-client