Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: AnjrbyO3kf+5U2jPiSZbO2j1cYPh3XdxbH0gUVjriW0=
Subject key identifier: 0C:D5:03:CC:71:E9:8F:0A:70:60:9D:64:D5:C1:CE:79:2A:77:CD:CA
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019D9A0743A6E2D6A29FB930CAF30EEB84D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 128A
Signing time: Fri 17 Apr 2026 06:01:00 +0000
Manifest this update: Fri 17 Apr 2026 06:01:00 +0000
Manifest next update: Sat 18 Apr 2026 06:01:00 +0000
Files and hashes: 1: THUvGSRSDdO8NyiSUs_kzMBgKSg.roa (hash: f2duUHB5LK8Of3Fa8X+WHnO6K86lhJ6HdId3wsUMfg8=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: mWwqn9Y+hYvN7roZRVCwfVOtkhqZ8hJgfHRweEDMsPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:43:a6:e2:d6:a2:9f:b9:30:ca:f3:0e:eb:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Apr 17 06:01:00 2026 GMT
Not After : Apr 18 06:01:00 2026 GMT
Subject: CN=0cd503cc71e98f0a70609d64d5c1ce792a77cdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:f5:bd:ae:e3:d8:e7:f6:4f:88:7e:db:33:
9c:d0:e9:24:35:9c:e1:e2:c3:cf:f5:28:9d:0b:7c:
57:8c:3f:cf:fd:d7:0c:66:20:95:53:be:5f:d3:05:
08:22:a2:da:e2:8f:51:92:d8:4c:97:eb:8c:2e:73:
95:4b:32:20:b1:5a:2f:a3:2b:89:86:2d:d3:1a:71:
41:f7:6c:f8:f9:f0:4e:76:2f:80:af:c8:f6:d7:70:
56:f0:89:d5:14:12:a6:59:6b:bf:6a:15:8d:36:71:
8d:99:fb:55:32:b8:9e:a4:e6:9a:53:f5:49:7a:2a:
1c:3c:00:d2:96:2a:54:b7:17:df:b0:d4:af:c5:93:
cb:9a:cc:3b:c4:4f:cc:ac:73:fb:b9:c1:39:74:84:
f8:96:b2:f9:b1:e4:5e:57:66:87:f6:cb:45:62:42:
26:1b:e1:28:f1:60:2f:2d:ee:2e:b1:94:6f:d5:4f:
f3:f0:d7:a3:ba:c2:4e:73:38:87:c1:33:da:67:85:
01:1a:99:7b:cc:19:de:db:6f:e4:0e:0e:36:5e:7a:
75:ae:1b:56:54:c5:aa:95:00:ec:ef:84:4b:24:41:
52:7a:e8:fb:28:de:87:4a:5e:ef:55:8b:01:4f:d7:
ca:d3:96:e2:ab:ab:20:47:c8:4e:8d:6f:21:95:d9:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D5:03:CC:71:E9:8F:0A:70:60:9D:64:D5:C1:CE:79:2A:77:CD:CA
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2b:3d:61:f3:e8:d8:79:f3:97:56:62:f5:5a:ab:0d:8d:e2:
e4:91:f3:11:e5:7b:28:45:e0:b2:49:0c:56:0c:f1:50:47:fb:
ff:2a:c2:76:0e:32:90:45:73:a7:21:4a:48:c7:fd:86:3a:0b:
07:7a:69:d2:6b:bf:ca:c4:d5:76:05:38:45:27:6d:bd:82:35:
e9:fb:b4:5f:18:d6:3e:8e:60:92:48:74:51:14:47:77:6e:3d:
50:2a:74:db:70:77:0f:24:87:42:97:11:83:e6:c2:af:2b:88:
c0:62:e2:db:95:5f:17:30:a3:a9:05:25:73:4b:58:ed:fd:3f:
e7:8a:3a:ed:ff:15:05:11:ae:4c:1d:35:95:90:75:70:1c:3d:
fb:75:5b:a1:82:f5:97:15:05:73:ed:31:a3:ee:2f:db:98:1c:
16:65:73:7a:e9:ef:05:59:70:64:ae:04:2c:16:63:aa:d3:92:
63:e3:52:04:a2:12:b0:5a:72:31:31:59:61:23:e3:8b:a5:1e:
c3:8b:03:06:bf:10:d1:b4:dd:51:1b:74:f9:78:7b:68:d9:8d:
2e:d4:f6:c0:ff:05:c0:ea:e9:ea:2e:81:3a:53:b8:b4:f5:dd:
a2:34:22:f5:48:0b:76:d4:1c:57:47:6b:cc:15:73:b5:7b:1a:
da:cc:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:21 2026 by rpki-client