Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: oFo/zUI0kA96fJlpnqKoEwK+JVlUu3Uq55/G6QJvgHE=
Subject key identifier: 50:AF:92:21:42:75:0D:29:02:14:27:E3:E4:A8:BE:06:15:8D:5B:C5
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 019D97E229C6DB8E131DA1946044D8ECA086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 20:01:14 +0000
Manifest this update: Thu 16 Apr 2026 20:01:14 +0000
Manifest next update: Fri 17 Apr 2026 20:01:14 +0000
Files and hashes: 1: 8GTqxn7gEbfVcrTo_203jWSQqyQ.roa (hash: FBwIvrh4fkJq3441dM0QezB27aCU253T8SzW2IFWPFU=)
2: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: 4K1z6KmvWxLqVoYYIQvVluNOJmeaS47ur6Sj7F2xNV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:29:c6:db:8e:13:1d:a1:94:60:44:d8:ec:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Apr 16 20:01:14 2026 GMT
Not After : Apr 17 20:01:14 2026 GMT
Subject: CN=50af922142750d29021427e3e4a8be06158d5bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:83:b3:db:f4:51:57:47:a0:86:29:70:b7:
b2:54:67:95:1c:6e:70:59:81:ee:8f:b6:c5:04:57:
4e:08:de:1c:e8:94:c9:a9:51:a2:4f:db:9d:99:68:
fa:a1:ec:b4:2c:bf:ca:46:9d:f6:b7:db:6a:57:5a:
52:c3:88:88:a9:84:47:ee:69:d9:6f:31:24:ca:40:
0b:e4:36:d0:6f:58:47:00:22:da:3e:99:73:6c:fd:
9e:b5:11:c9:e1:8d:56:ac:57:fd:6b:a0:ae:14:4b:
78:1c:81:6b:e1:76:cd:e8:fb:9f:96:39:da:19:90:
af:ec:31:c6:1b:a0:ea:1d:9a:fa:72:4f:17:18:36:
86:29:04:73:da:fd:a2:8f:2c:b0:9e:18:96:de:a5:
bf:ab:f8:3e:5d:fd:e9:7c:42:c4:e6:17:fc:50:bd:
86:2f:4c:48:28:a5:cc:d6:3c:58:c8:d4:c1:25:a5:
7f:26:0a:ab:76:a6:24:73:66:d1:46:c8:ae:3a:cc:
7d:b5:89:e7:56:f0:37:d7:6f:f8:11:2c:a7:32:b0:
57:94:52:e4:d7:1a:74:79:6f:46:f0:45:94:41:c9:
86:89:c7:4d:f6:46:61:91:15:2e:ec:2c:32:4e:75:
f6:61:aa:60:8c:e8:bd:ad:0f:74:ea:c9:8f:f2:a2:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:92:21:42:75:0D:29:02:14:27:E3:E4:A8:BE:06:15:8D:5B:C5
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6e:31:85:b2:16:f7:1a:ae:ef:56:b3:f3:03:7b:4a:9f:bc:
d8:53:02:a2:dd:dd:70:48:ea:59:92:6d:b1:ad:f5:9c:81:e4:
ae:8c:ce:f3:e0:d7:62:5b:d7:b1:e5:9d:dc:92:3a:bb:74:9e:
8a:d2:83:14:e1:5e:72:67:08:4e:28:25:1f:9b:7b:16:eb:e5:
57:33:81:de:24:b1:e8:27:c2:0a:1f:68:ad:af:7b:57:d0:d5:
45:ed:1b:f5:4e:9d:fb:7b:a3:f6:61:51:4e:59:49:c2:c3:60:
06:db:0f:7e:cc:be:20:28:e1:f1:26:0b:fd:06:8f:a1:1e:7d:
3d:e3:b1:a3:25:d2:90:c9:8a:c6:b1:ff:e1:7a:df:0c:1b:eb:
0a:4c:d1:a2:74:a2:69:5d:44:8f:f8:93:0c:15:fe:4b:3a:b4:
37:56:46:d5:1e:13:8a:51:79:63:13:f0:c8:9c:4e:50:f7:50:
93:df:84:91:44:97:1a:fa:34:dd:d8:35:cb:a0:c4:90:d3:a2:
de:73:24:1e:8c:c3:f5:aa:68:4d:30:67:6d:04:ac:6e:cb:3e:
e5:4b:31:e6:7b:72:5f:ed:a1:38:8e:5e:5f:23:3f:2d:23:40:
30:ca:0e:f1:54:dc:ff:c9:4b:15:c9:e3:99:de:2b:9a:24:81:
55:85:77:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4inG244THaGUYETY7KCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh
MmQ2MTEwHhcNMjYwNDE2MjAwMTE0WhcNMjYwNDE3MjAwMTE0WjAzMTEwLwYDVQQD
Eyg1MGFmOTIyMTQyNzUwZDI5MDIxNDI3ZTNlNGE4YmUwNjE1OGQ1YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrGDs9v0UVdHoIYpcLeyVGeVHG5w
WYHuj7bFBFdOCN4c6JTJqVGiT9udmWj6oey0LL/KRp32t9tqV1pSw4iIqYRH7mnZ
bzEkykAL5DbQb1hHACLaPplzbP2etRHJ4Y1WrFf9a6CuFEt4HIFr4XbN6Pufljna
GZCv7DHGG6DqHZr6ck8XGDaGKQRz2v2ijyywnhiW3qW/q/g+Xf3pfELE5hf8UL2G
L0xIKKXM1jxYyNTBJaV/JgqrdqYkc2bRRsiuOsx9tYnnVvA312/4ESynMrBXlFLk
1xp0eW9G8EWUQcmGicdN9kZhkRUu7CwyTnX2YapgjOi9rQ906smP8qIw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCvkiFCdQ0pAhQn4+SovgYVjVvFMB8GA1UdIwQY
MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt
YmZiZTFiYzE1ZmMyLzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy
LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAim4xhbIW
9xqu71az8wN7Sp+82FMCot3dcEjqWZJtsa31nIHkrozO8+DXYlvXseWd3JI6u3Se
itKDFOFecmcITiglH5t7FuvlVzOB3iSx6CfCCh9ora97V9DVRe0b9U6d+3uj9mFR
TllJwsNgBtsPfsy+ICjh8SYL/QaPoR59PeOxoyXSkMmKxrH/4XrfDBvrCkzRonSi
aV1Ej/iTDBX+Szq0N1ZG1R4TilF5YxPwyJxOUPdQk9+EkUSXGvo03dg1y6DEkNOi
3nMkHozD9apoTTBnbQSsbss+5Usx5ntyX+2hOI5eXyM/LSNAMMoO8VTc/8lLFcnj
md4rmiSBVYV3xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:08 2026 by rpki-client