Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: DbolgJPvj8RljEcK4Kp6f3MdcH/cEgiIq8UudJKUdvk=
Subject key identifier: A2:34:39:4B:67:73:23:62:98:1B:E9:66:BB:7C:1D:CF:12:4D:01:0C
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 019D99995C7F297F118A99FD09E963BCCAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 1829
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: eB9ojJLa3oWBFrlNK0k4b9Cie5I.roa (hash: ztnCVdjoCnesK+ihroQfAdypwMeqhVL1q+oU4stV8zI=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: 4LHkcno8Rzvwc9O2jWMlaYTax61lM+mxtORUuzosz8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5c:7f:29:7f:11:8a:99:fd:09:e9:63:bc:ca:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=a234394b67732362981be966bb7c1dcf124d010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:3e:44:2f:54:bd:df:c0:eb:5f:57:23:25:
37:3c:7b:d9:0c:4c:13:4e:dd:da:19:1c:98:bf:5f:
f8:1c:3d:b2:01:62:22:ff:f0:33:eb:f2:2c:81:b3:
c7:62:48:5a:f5:a7:63:96:1b:94:b0:32:24:af:eb:
75:17:24:b3:6e:66:9a:9c:67:09:8c:f5:a9:b8:84:
28:9c:4a:18:7a:a3:03:9f:04:7a:f1:9d:87:f5:63:
10:9e:fa:c3:a1:66:d5:53:12:e5:46:f1:db:76:98:
77:3c:5d:29:50:59:c6:77:bb:a2:84:31:7c:60:7d:
3b:c6:ae:eb:8c:82:8e:41:57:00:ef:c1:63:39:0d:
e8:19:dc:6d:9d:ce:cc:c2:f4:0e:90:9d:c1:fe:04:
d6:a4:60:f4:f0:3b:81:c1:d0:95:1a:44:23:5b:5e:
e8:cd:42:0a:2e:5c:fc:ac:d1:c9:e4:8d:85:ac:8d:
9a:b4:8f:b3:a5:2c:6e:1a:b9:d7:cd:4e:66:e4:b2:
be:a2:93:09:4a:4b:17:04:0f:f1:fd:c5:c0:50:ca:
86:fd:88:d1:4d:42:e5:27:b8:a2:1f:c6:a8:d2:3d:
ba:e0:1a:dc:33:d4:9b:c9:18:33:4c:d5:70:df:2e:
2b:50:f2:67:78:ec:93:1e:aa:dc:d5:23:d7:22:fa:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:39:4B:67:73:23:62:98:1B:E9:66:BB:7C:1D:CF:12:4D:01:0C
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a7:3c:44:11:5d:ae:05:24:fe:34:65:db:64:0e:5c:56:fd:
79:91:04:18:ee:d3:e8:29:93:a0:e5:73:1a:49:94:85:0c:56:
45:94:4e:9d:11:e6:8a:ea:6b:62:71:a4:d5:f5:dd:df:a4:73:
f7:46:da:05:d5:7f:2e:fc:a5:80:28:59:d9:4a:34:a6:9a:1d:
ba:18:6d:4b:d8:71:aa:2a:86:fd:e7:7f:8b:3e:17:fc:b9:e2:
da:7b:70:9f:e2:52:2b:b0:8e:c0:21:6e:d9:4c:7d:8b:cb:e2:
fb:e7:8e:ef:52:d9:07:8c:d9:bb:49:00:b2:28:d6:19:8f:62:
58:08:a4:e5:e3:e8:23:66:3d:d1:a6:96:11:da:66:d4:84:0c:
ac:18:b3:ed:e5:95:0b:84:ce:a8:37:20:0d:ee:8f:f4:8e:df:
51:57:54:e5:bc:eb:4d:56:3f:0d:72:aa:40:a3:73:f6:2f:f2:
af:33:e8:70:1a:8c:8c:69:d5:b9:76:7f:e2:dd:28:59:33:86:
cf:83:b8:f5:2a:e2:3f:7f:ab:17:40:7a:c1:56:bc:24:d2:e1:
3d:7a:c2:d8:69:e5:fa:e1:cd:aa:5b:57:d7:cd:53:ec:c4:04:
b8:b4:71:3f:23:ec:20:cb:5f:55:f0:39:83:06:0f:5c:ec:26:
68:d6:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:52 2026 by rpki-client