Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: ZiaqVEsjvYTPwd8BRT64vvLvOIx60FdkQdwlbKYAi/A=
Subject key identifier: 9A:BE:D0:EB:98:73:0E:44:14:60:E2:2E:10:A8:0A:C3:5E:DA:02:34
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019D96CF1F85025F5588856659DC838AE914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 18CD
Signing time: Thu 16 Apr 2026 15:00:49 +0000
Manifest this update: Thu 16 Apr 2026 15:00:49 +0000
Manifest next update: Fri 17 Apr 2026 15:00:49 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: 8DprNR9R4+5z6JePI+8+qk5P9a5hxIx0QE6afo37Y2A=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:cf:1f:85:02:5f:55:88:85:66:59:dc:83:8a:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Apr 16 15:00:49 2026 GMT
Not After : Apr 17 15:00:49 2026 GMT
Subject: CN=9abed0eb98730e441460e22e10a80ac35eda0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:5c:7e:2c:72:6f:5a:76:6c:71:9f:90:72:
65:9d:69:fa:97:6b:97:cf:2c:64:04:97:20:cb:e1:
03:bf:5b:6a:1a:21:2a:f9:10:bc:4c:e0:c9:12:0d:
c0:3f:9a:34:e3:fc:38:0c:88:0d:69:41:a0:6a:1c:
46:b4:66:6b:64:13:7b:0a:81:16:7b:b3:15:e9:03:
29:cb:57:20:46:30:4e:ed:5d:03:4b:50:ab:53:00:
04:15:ea:a1:0a:65:b7:42:df:2f:81:33:7b:a6:23:
c1:aa:1b:23:34:17:74:7c:3a:68:e3:31:90:ee:7b:
eb:cf:5a:4e:8a:4e:10:20:66:fa:1d:1c:0f:f5:7f:
91:46:62:a8:87:a6:a2:0d:bb:46:f0:b1:10:1a:e4:
e7:ca:63:93:eb:94:35:80:09:5d:1d:d6:e4:ea:5f:
b4:66:39:9c:81:df:c9:cb:57:37:62:92:04:c4:84:
04:6a:e6:31:ae:f8:0e:73:59:e7:db:b5:1a:e7:5c:
f1:c2:7f:6c:d8:df:52:c2:27:dc:85:bb:87:c9:9e:
ac:e8:b9:2a:d1:cc:e1:e7:89:98:79:17:69:2f:9c:
4d:82:2d:ff:ce:d6:ae:b5:09:09:e7:c0:f3:d7:5e:
4b:43:6a:7a:f2:5d:db:9c:80:34:b4:c5:38:ef:07:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:D0:EB:98:73:0E:44:14:60:E2:2E:10:A8:0A:C3:5E:DA:02:34
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3c:14:a4:56:d3:f5:d0:de:e4:f3:59:9b:c8:3d:bd:15:98:
48:d3:04:15:44:82:f3:04:85:00:a1:6f:6e:40:2d:36:c7:51:
c8:a8:a3:f8:3f:38:18:2f:49:67:c7:f0:4e:a2:f3:0b:7d:27:
c5:73:9f:eb:46:3b:83:9b:0a:7e:ce:d9:a8:1f:d7:07:c4:76:
94:b9:e1:3a:07:5e:7b:eb:bf:df:00:b8:ac:f2:0f:85:dd:7c:
a6:aa:f6:cc:0a:bd:51:c1:f0:b4:ee:16:2b:f0:17:31:2a:44:
21:09:73:4f:f5:bb:10:2d:db:a8:e4:fc:47:6b:8b:5c:c4:ce:
e2:5f:be:ce:ae:82:5e:33:27:af:8b:b3:0b:ba:4b:de:50:4b:
77:d7:8c:a4:1b:69:8b:74:1a:1c:d0:3d:bd:1d:c1:11:36:9d:
75:9f:49:20:e3:e9:18:a9:e4:51:50:d0:c7:2c:77:73:05:46:
42:ff:75:53:f4:0e:5a:7b:29:39:e4:8c:22:fa:b8:78:60:61:
a0:7d:da:ee:28:c7:b5:cd:ac:6c:0c:32:a8:db:f2:5d:80:99:
91:34:b2:27:04:34:74:17:01:c1:dc:6b:ba:9c:48:a4:bd:59:
5d:10:f1:c8:51:3a:85:36:14:ab:e3:82:c6:7f:44:31:40:ac:
32:6e:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:50 2026 by rpki-client