Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: 6cFvEWwKB7Igx/xJvzMW4R+9IaKWiV5M2FH+k9aIQuw=
Subject key identifier: D7:E7:EF:8A:7E:56:1C:B4:70:AE:1B:A4:26:A3:69:8E:8A:EF:2C:A3
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019DA59D7F59E3F31E9247C67230FED03A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 080F
Signing time: Sun 19 Apr 2026 12:00:55 +0000
Manifest this update: Sun 19 Apr 2026 12:00:55 +0000
Manifest next update: Mon 20 Apr 2026 12:00:55 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: jNmG4yGVK8LHHt6jE8ZGrzhUO8zSlh5SHnjSv8lgIHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:7f:59:e3:f3:1e:92:47:c6:72:30:fe:d0:3a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Apr 19 12:00:55 2026 GMT
Not After : Apr 20 12:00:55 2026 GMT
Subject: CN=d7e7ef8a7e561cb470ae1ba426a3698e8aef2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:1e:af:b5:5c:30:c1:5b:53:fe:59:2e:9c:
d0:14:69:3e:8b:9c:a3:7d:a8:f5:ff:35:2e:0b:8f:
ed:73:ec:2b:e9:19:98:07:60:9a:a8:84:6c:0d:68:
e3:1a:00:af:59:5b:ac:4d:03:e5:eb:4d:24:05:45:
2e:6f:fe:e9:11:55:81:06:c1:74:b3:f8:b6:41:ac:
5e:a0:52:ff:f0:bd:88:f4:21:e9:e6:11:12:c2:84:
22:0b:6d:7e:45:95:4b:12:83:94:62:d9:85:95:b7:
9a:f1:03:ea:a0:4a:2a:41:46:ee:f4:71:32:92:d0:
1d:3f:39:ee:60:a3:92:5f:66:26:9e:77:58:5d:aa:
67:e7:39:14:54:7c:ef:fe:77:9c:d5:22:13:29:86:
7a:ef:b9:7c:c5:86:1b:58:d6:1c:7c:39:de:0f:06:
59:53:d1:e6:31:2b:d9:e8:fc:48:4f:a9:64:0e:c8:
ea:28:db:45:d3:60:ca:27:09:22:b7:04:dc:1b:15:
b3:9d:fe:40:67:84:c9:55:36:71:64:ef:99:9d:49:
99:a6:c0:65:1e:97:37:08:9c:74:36:cd:28:72:f7:
07:a1:ab:3a:01:eb:1e:22:1a:ca:8f:35:2b:e3:28:
db:f4:9b:c4:7a:f7:1f:e4:ba:9d:ac:ac:e7:56:ad:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:EF:8A:7E:56:1C:B4:70:AE:1B:A4:26:A3:69:8E:8A:EF:2C:A3
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b2:8b:0c:72:59:e9:3d:4e:2d:e3:22:d4:95:e6:dc:c4:d4:
60:28:2f:78:33:e9:4e:0a:85:16:b5:a8:c2:49:72:b3:d2:83:
6b:5b:85:ee:df:a9:e5:f9:4b:a0:5f:79:d5:92:b8:ee:73:cd:
01:66:cf:eb:21:41:81:cb:8f:7e:e6:31:4b:6f:1f:1f:ab:d8:
9c:f2:90:25:95:27:c4:8c:d7:9d:d7:23:81:51:00:8a:4b:34:
5a:2b:91:45:34:e8:d7:55:fc:fe:95:1f:83:a1:c8:23:64:ef:
ab:d2:4e:6f:2a:51:bc:54:db:5e:d5:e7:03:6a:08:85:c6:8e:
e3:23:c8:18:c4:af:c0:67:36:c6:75:e9:cf:2e:b7:11:e7:86:
bc:58:1f:23:17:b4:57:fe:df:e0:32:58:65:7a:d2:67:75:8f:
f4:4e:12:8f:d8:00:b4:d3:da:d2:fd:4b:59:1d:f5:0b:39:da:
4e:f1:6c:b6:cc:63:6e:d9:c5:b5:24:41:a9:80:9e:07:8f:12:
f0:26:b0:06:66:e1:10:d1:f2:1d:f8:46:15:a1:03:ce:a8:e0:
e4:e2:71:e7:97:0e:be:74:6a:13:e2:af:59:15:48:9c:63:59:
41:ae:0b:77:c9:48:05:65:5d:5a:7a:00:92:2c:05:b4:1c:e4:
b0:66:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:48 2026 by rpki-client