Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: /I7XVqPP6l1svK+Imbok5WtmHqfQ4k6l25tfMuxFe44=
Subject key identifier: CD:20:0D:63:FE:AC:EC:FB:C3:D3:1F:23:6A:A8:0E:CC:1C:E0:A8:09
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 019DA52FB13C7A440DD8A8C2D7CC316BAED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 182F
Signing time: Sun 19 Apr 2026 10:00:59 +0000
Manifest this update: Sun 19 Apr 2026 10:00:59 +0000
Manifest next update: Mon 20 Apr 2026 10:00:59 +0000
Files and hashes: 1: eB9ojJLa3oWBFrlNK0k4b9Cie5I.roa (hash: ztnCVdjoCnesK+ihroQfAdypwMeqhVL1q+oU4stV8zI=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: ghYmaJURBw1gM7j3eLTSzlcNQSf12XHH1exjaLyvoIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:b1:3c:7a:44:0d:d8:a8:c2:d7:cc:31:6b:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Apr 19 10:00:59 2026 GMT
Not After : Apr 20 10:00:59 2026 GMT
Subject: CN=cd200d63feacecfbc3d31f236aa80ecc1ce0a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:6d:b9:d2:a7:22:65:c2:b0:e1:58:be:f0:
3f:4a:8b:c9:e7:3f:b8:e2:0f:d7:ef:bf:fb:e0:48:
57:5c:fe:34:b0:6a:41:89:6c:7d:88:5e:68:3d:9e:
ab:10:47:b6:8a:bd:0c:b3:5e:97:57:da:7f:e5:c3:
ec:11:3b:3c:7e:61:3f:b7:6a:94:dd:15:5d:47:49:
da:a7:d8:4e:24:49:22:5c:a7:21:e6:13:7d:7c:c2:
fc:96:68:b0:96:a6:cd:52:fa:5a:c3:c9:97:32:15:
e8:eb:12:71:b0:b6:6e:f6:f5:b6:d9:68:3c:9a:55:
02:53:58:2c:6f:00:f5:63:18:d0:6e:b3:f6:ce:27:
7f:97:d6:e0:31:90:19:98:34:24:99:d6:fe:71:e6:
bf:47:bb:d3:c0:a1:db:67:a9:45:bc:f9:00:b4:bc:
c0:40:e9:52:8a:01:18:d8:b0:e9:15:5d:38:21:bd:
b2:35:7a:bd:6a:0f:66:b3:d9:c4:8e:bd:18:d0:21:
89:2d:b9:ae:6f:0e:5f:f7:3d:e9:32:3d:66:79:fd:
e4:5b:a9:26:68:6c:78:8d:20:36:91:33:06:ac:00:
4e:b0:01:3f:3a:25:87:9e:f7:0f:43:ec:c6:46:ec:
79:70:cb:a5:e5:c9:02:29:f1:9d:c1:a4:53:12:3b:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:20:0D:63:FE:AC:EC:FB:C3:D3:1F:23:6A:A8:0E:CC:1C:E0:A8:09
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:79:4d:28:ff:83:13:f6:ef:6e:97:f8:90:24:aa:d5:74:71:
49:7a:d0:30:6a:8d:a6:59:ac:fc:41:5c:ed:f5:7c:af:71:ca:
9e:b3:da:35:46:16:e6:e9:0a:e8:b3:8b:23:97:8e:c2:56:91:
5a:28:5e:0c:42:b1:83:64:93:f7:20:a2:ce:ba:b6:59:bf:b1:
af:7e:52:62:9e:0c:6f:7a:ad:97:07:54:89:ce:a9:04:9e:4a:
5e:76:1b:e2:10:77:f6:38:67:8c:b9:0a:70:8f:6a:1d:c3:a0:
91:1d:43:40:9e:5b:df:5c:e1:ca:b1:67:ff:b1:23:7f:18:a9:
40:76:8c:fb:3c:80:6c:0e:3e:46:f5:81:3e:14:4b:11:ae:24:
16:f4:d9:17:87:14:1a:3d:b3:4d:af:f4:a0:fc:11:f2:05:ab:
a7:1a:92:32:55:1b:3c:9d:2e:0c:89:d6:80:ea:ce:53:5e:45:
42:1d:8f:e0:1b:db:1b:8d:a1:1b:8b:be:21:d4:5c:38:d3:18:
11:2a:42:23:7e:e0:c9:eb:a0:7c:bf:8c:80:9d:6e:ea:25:a0:
58:02:50:53:40:4c:c5:c4:ff:c1:b8:ef:59:94:72:02:ec:cc:
a1:09:ad:bf:d7:64:94:04:58:67:45:bd:17:ff:cf:7c:14:7c:
06:2f:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:50:34 2026 by rpki-client