Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: UvZUssqjVfqT3iHp2NivWOHFOJJAcdiHOG8zpPhhYgE=
Subject key identifier: A4:83:45:31:23:77:00:E4:05:13:BE:E1:55:F1:C8:CB:08:49:E9:98
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 019D9AAC2DBF1E800CEFA106C94DF805B245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: Kva8pOVZlkquTrmEhbp1bVFcO6k.roa (hash: RxzZTraMVAKkP8ewUU+x3bHJ3Ubv/2C3lu8vqzkWAJU=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: BHtA0eLjnPhc1DM6LZWvBZF4PNPD857WSEkm+Taju7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2d:bf:1e:80:0c:ef:a1:06:c9:4d:f8:05:b2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=a4834531237700e40513bee155f1c8cb0849e998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:f0:6b:9b:0f:dd:53:5c:f2:6c:94:a4:7f:
a5:a3:77:fa:d3:4d:39:cb:27:87:32:f8:7e:58:89:
5e:1c:5d:01:65:c7:6b:2e:16:d5:45:7a:37:d0:62:
26:0d:7c:21:f5:19:fa:6f:33:f3:4c:e3:c5:0b:75:
d0:d1:e5:17:b6:3f:f1:fa:47:df:cc:ca:0c:92:b3:
bd:dc:8c:e3:b1:55:7a:22:d8:39:49:b3:fd:72:5b:
22:b3:a5:5d:c5:83:85:f1:df:48:1f:79:70:2a:fd:
5c:aa:b0:7e:5e:96:ff:fb:3e:74:66:0d:31:0b:c1:
d7:21:ef:f9:60:9a:72:22:10:0b:13:0f:47:33:50:
7b:43:e4:d0:28:be:26:a0:bc:b4:cd:52:ba:3e:b7:
fc:45:b1:b1:d9:7f:c4:70:19:0d:6a:21:3d:e6:ab:
ea:4d:79:00:ac:2b:f3:5e:52:ba:11:44:6d:5a:bc:
36:91:ec:59:bc:89:48:ed:ec:15:36:34:39:7a:3b:
27:87:c4:d8:03:74:d1:39:ea:e9:b7:04:d6:87:23:
8a:09:50:fa:be:30:7f:77:b1:0c:a1:b6:10:38:27:
93:20:32:24:57:b5:3b:3f:37:2f:3b:bf:55:ee:98:
af:8a:d5:7a:34:48:c5:c7:0c:a1:72:ee:eb:8b:2b:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:83:45:31:23:77:00:E4:05:13:BE:E1:55:F1:C8:CB:08:49:E9:98
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:70:0e:7e:9e:78:2f:09:ac:96:0a:bf:7e:03:c9:db:a4:
37:3a:a0:0f:21:a1:b8:00:dd:7a:c1:94:5a:4d:be:e4:b1:24:
c3:95:75:44:66:71:91:c1:26:3c:20:49:73:60:2a:44:40:d0:
06:d8:a9:1e:42:8a:31:99:58:d3:f5:4b:23:4d:70:8f:2f:8a:
e0:87:09:b7:e6:9b:6d:c9:ab:4d:3a:ec:f6:9b:37:e7:27:fa:
6d:ca:71:25:08:f7:fe:95:62:a8:cc:27:5a:4d:4c:8c:61:6f:
3f:c9:52:02:4b:a7:8a:84:2b:70:97:2b:0a:28:3f:dc:92:aa:
d4:97:3c:24:8a:a5:a1:d0:ce:9f:7f:ad:eb:0c:f7:cd:28:02:
d8:25:49:66:d3:67:9c:fe:e9:1e:71:e2:b0:e6:de:13:81:3f:
54:61:ad:05:ee:78:14:b2:f4:2f:dd:39:03:ae:59:ae:15:68:
0d:9e:8b:5e:7f:40:b2:da:28:92:f1:5f:0e:c2:a6:51:98:ca:
f4:56:ed:60:62:1b:59:73:d5:b4:f3:b8:6d:d5:c5:72:1e:72:
2f:83:25:8d:4b:29:86:07:b9:ad:d2:83:25:a4:d4:05:15:92:
11:9f:f6:96:29:84:f4:49:8a:8f:bf:36:01:67:58:42:ab:b4:
9c:3b:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:53 2026 by rpki-client