Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: uk9G1biy/PL1zVVy1IL4/W19xvtxJnWyrs+hPt9VVu0=
Subject key identifier: E6:F7:4D:6E:6F:40:EA:7F:DF:F0:BD:69:66:F2:E6:43:5C:73:92:5B
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 019D9D3EB4857ADCD806A55459E279E256B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 04AF
Signing time: Fri 17 Apr 2026 21:00:25 +0000
Manifest this update: Fri 17 Apr 2026 21:00:25 +0000
Manifest next update: Sat 18 Apr 2026 21:00:25 +0000
Files and hashes: 1: 5KspkUlNT9BbAUaOg4XWjrocZnM.roa (hash: 1rw1PhJZEsHj02oRb/8duN7T9vEuiylU/SbsI5Ekwko=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: en++Ri0pnH1wVzzNPVcVKZBYLSOcCfuI0RN6VQM6a2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:b4:85:7a:dc:d8:06:a5:54:59:e2:79:e2:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Apr 17 21:00:25 2026 GMT
Not After : Apr 18 21:00:25 2026 GMT
Subject: CN=e6f74d6e6f40ea7fdff0bd6966f2e6435c73925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:60:6f:1d:ef:eb:4a:5b:b3:d8:37:8c:39:
2e:0e:93:21:42:eb:7e:28:9b:2e:c2:0f:ce:55:a5:
82:68:6c:1a:1e:84:b3:15:72:5f:14:ad:32:0c:af:
cc:26:07:f5:3a:f2:38:cb:cb:c5:6b:d0:37:6f:65:
23:5d:f4:93:a8:4f:49:a8:e8:94:5f:ae:d1:e5:dd:
e9:81:ae:53:30:6a:11:11:a3:8d:8b:da:d1:33:af:
38:f3:ca:36:da:d3:38:3b:42:e5:b8:95:24:d1:b6:
99:64:a6:bd:64:e0:5b:33:3a:0e:06:c5:b3:2d:93:
32:da:7f:70:c5:4b:ba:1a:68:af:a3:72:56:bc:fa:
78:ea:dc:ea:05:b4:11:7f:fe:c1:5b:f5:ab:04:b6:
7b:6f:31:7b:ca:21:6d:0a:e9:42:35:60:75:b5:fa:
e7:a4:f8:4e:47:c8:6f:ca:c2:cc:b0:f1:10:f1:f5:
5d:1b:17:43:6d:7b:65:3e:25:19:90:93:f2:ac:01:
91:2f:a4:36:bf:67:b0:d8:d7:c4:5d:8e:54:7d:d9:
3d:29:05:bf:07:79:15:14:8f:7e:e1:29:33:54:9e:
fd:35:5d:18:85:f7:79:9a:21:e9:36:cc:20:7e:fe:
13:6f:2e:a2:24:d5:73:49:fb:09:d4:7a:63:4e:74:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:4D:6E:6F:40:EA:7F:DF:F0:BD:69:66:F2:E6:43:5C:73:92:5B
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ec:79:0f:1c:55:f0:e9:e0:f5:b9:11:05:24:bc:95:e4:28:
70:7c:05:6a:be:c4:6d:28:50:51:52:d6:02:3a:d6:ab:01:cd:
3f:69:13:59:2a:69:fd:94:13:d8:d6:c6:2b:9f:d6:f0:ac:a0:
8e:b4:5e:22:ab:7d:20:0d:cb:c8:cf:3b:ff:8d:f2:0e:88:4c:
06:1b:87:d5:60:f2:ce:ce:3b:df:12:5b:38:cd:64:b9:dd:83:
38:b6:52:a6:1f:f6:61:e1:25:f7:2d:67:78:ce:ac:53:1b:68:
21:e5:a0:fc:f1:7e:8c:64:39:fe:26:0d:ef:11:54:6b:db:fb:
32:ce:c1:49:41:a4:1c:42:f4:2b:f3:52:b7:dc:92:13:5c:65:
3e:15:aa:fe:0d:81:a7:b0:c8:51:0a:99:cb:fa:c2:56:05:84:
51:57:b4:31:35:8b:bd:41:3e:03:77:41:c1:c8:77:e8:b4:77:
37:51:c0:8a:2f:c6:77:93:bd:ad:51:4a:15:3a:4d:85:49:90:
2f:38:c8:01:f2:bb:b5:90:96:7b:2e:7a:c6:23:e9:43:38:fe:
a5:f5:45:f6:21:6f:4b:99:81:7c:d4:09:d0:3c:71:bb:36:08:
28:ab:e4:99:30:13:5c:ec:eb:cd:8c:d5:c0:02:7b:97:89:fc:
a6:2b:18:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dPrSFetzYBqVUWeJ54la0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi
ZjAwNjIwHhcNMjYwNDE3MjEwMDI1WhcNMjYwNDE4MjEwMDI1WjAzMTEwLwYDVQQD
EyhlNmY3NGQ2ZTZmNDBlYTdmZGZmMGJkNjk2NmYyZTY0MzVjNzM5MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Ngbx3v60pbs9g3jDkuDpMhQut+
KJsuwg/OVaWCaGwaHoSzFXJfFK0yDK/MJgf1OvI4y8vFa9A3b2UjXfSTqE9JqOiU
X67R5d3pga5TMGoREaONi9rRM68488o22tM4O0LluJUk0baZZKa9ZOBbMzoOBsWz
LZMy2n9wxUu6Gmivo3JWvPp46tzqBbQRf/7BW/WrBLZ7bzF7yiFtCulCNWB1tfrn
pPhOR8hvysLMsPEQ8fVdGxdDbXtlPiUZkJPyrAGRL6Q2v2ew2NfEXY5Ufdk9KQW/
B3kVFI9+4SkzVJ79NV0Yhfd5miHpNswgfv4Tby6iJNVzSfsJ1HpjTnQkMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb3TW5vQOp/3/C9aWby5kNcc5JbMB8GA1UdIwQY
MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt
N2Q2ZjUzODg5ZDU3LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3
LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYex5DxxV
8Ong9bkRBSS8leQocHwFar7EbShQUVLWAjrWqwHNP2kTWSpp/ZQT2NbGK5/W8Kyg
jrReIqt9IA3LyM87/43yDohMBhuH1WDyzs473xJbOM1kud2DOLZSph/2YeEl9y1n
eM6sUxtoIeWg/PF+jGQ5/iYN7xFUa9v7Ms7BSUGkHEL0K/NSt9ySE1xlPhWq/g2B
p7DIUQqZy/rCVgWEUVe0MTWLvUE+A3dBwch36LR3N1HAii/Gd5O9rVFKFTpNhUmQ
LzjIAfK7tZCWey56xiPpQzj+pfVF9iFvS5mBfNQJ0DxxuzYIKKvkmTATXOzrzYzV
wAJ7l4n8pisYZw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:44 2026 by rpki-client