Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: XLfYyRmDOxON8JhuDWNT2a9V4WSvaTzkNnSK1TKw2js=
Subject key identifier: 38:65:F3:9B:47:D5:48:CA:71:B2:2F:E1:95:F0:63:7E:C4:92:FF:6B
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019D9CD1F4EDE005923334A0AFAF5DA812BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0F65
Signing time: Fri 17 Apr 2026 19:01:38 +0000
Manifest this update: Fri 17 Apr 2026 19:01:38 +0000
Manifest next update: Sat 18 Apr 2026 19:01:38 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: y6WzmqfFXxYtdMRtb+JjoSiOsBbgx81aEIz3k6+vrrg=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:f4:ed:e0:05:92:33:34:a0:af:af:5d:a8:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Apr 17 19:01:38 2026 GMT
Not After : Apr 18 19:01:38 2026 GMT
Subject: CN=3865f39b47d548ca71b22fe195f0637ec492ff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:32:6a:a1:2d:08:0a:97:e1:22:6c:bd:f5:
bc:f7:b4:69:fe:9a:ab:9b:9b:a6:e4:e2:82:e4:38:
a1:01:b3:6b:5d:3f:81:51:c7:e9:7f:a1:c6:7e:d9:
f9:c0:90:b0:ed:f5:3c:5e:a4:f0:07:bf:de:b0:ca:
f6:ce:90:dc:e0:d1:73:1d:f8:df:7e:59:d8:ec:2f:
c6:38:8a:0f:d5:42:3e:1a:27:ef:8d:e2:ba:ee:2c:
6c:2b:a0:4e:62:96:08:7a:08:0e:46:56:26:c8:a1:
90:b5:a7:4b:f5:1d:73:54:34:77:df:48:36:33:e4:
f4:f3:9c:3d:63:06:6c:54:ef:97:2b:50:3f:ef:03:
8a:7b:61:e5:64:79:62:b2:14:02:3f:8b:b2:89:31:
40:6e:13:db:a2:ae:98:b2:36:e0:14:e3:c4:e3:23:
22:52:3f:08:c4:6b:0a:d4:1f:6d:3f:c1:8b:21:38:
11:19:49:5c:b0:dc:af:36:ce:41:b9:ba:96:51:37:
7a:b3:6f:89:89:fc:13:e4:e5:3b:15:74:53:12:7a:
76:ff:bc:44:30:ea:58:61:5e:64:73:6d:13:8c:a6:
87:76:a1:02:b6:e8:79:35:ec:84:1a:e9:c2:c4:01:
6f:d7:74:a3:90:e5:fd:44:c7:e4:88:33:af:9f:4c:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:F3:9B:47:D5:48:CA:71:B2:2F:E1:95:F0:63:7E:C4:92:FF:6B
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:95:2b:56:a5:58:01:ed:b7:cb:cc:dc:6b:fb:1c:2c:50:28:
0d:6a:0e:8e:33:65:aa:eb:6e:27:49:42:83:8d:d2:40:67:ac:
50:70:c5:22:e6:89:4a:1b:ae:c8:43:44:56:63:fc:53:c6:4b:
9b:a7:40:6a:e1:35:9b:7a:ae:b4:d0:5c:56:8c:ac:3a:24:91:
05:34:98:ff:c2:78:19:31:87:ed:8c:20:99:77:a3:a7:cb:ed:
b5:81:3a:93:01:2d:ee:36:a7:4b:31:14:8c:0b:75:db:5e:70:
62:bf:50:39:90:db:27:3a:09:ad:75:01:29:d1:13:bf:f7:b3:
28:f8:6d:c7:77:19:ff:25:58:88:69:32:e1:ac:0d:02:20:99:
4d:c9:5f:82:6e:12:46:00:69:7f:ca:fc:64:a9:80:2d:18:a9:
b7:6d:ce:67:d2:ce:1a:3c:47:9f:12:4c:e8:c7:86:9f:22:9e:
68:85:d9:4d:49:a7:2c:32:70:15:cb:96:f1:af:4e:38:89:77:
88:dd:2f:41:eb:7d:31:8a:5c:c5:8d:d3:0a:c0:01:c2:6c:58:
47:60:e4:bb:31:60:5c:b0:ee:c1:68:14:c2:71:76:cc:0b:76:
0d:f0:91:eb:d4:54:1d:95:a4:92:80:67:0f:52:87:8f:32:3f:
66:f3:f7:b4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2c0fTt4AWSMzSgr69dqBK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjYwNDE3MTkwMTM4WhcNMjYwNDE4MTkwMTM4WjAzMTEwLwYDVQQD
EygzODY1ZjM5YjQ3ZDU0OGNhNzFiMjJmZTE5NWYwNjM3ZWM0OTJmZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7EyaqEtCAqX4SJsvfW897Rp/pqr
m5um5OKC5DihAbNrXT+BUcfpf6HGftn5wJCw7fU8XqTwB7/esMr2zpDc4NFzHfjf
flnY7C/GOIoP1UI+GifvjeK67ixsK6BOYpYIeggORlYmyKGQtadL9R1zVDR330g2
M+T085w9YwZsVO+XK1A/7wOKe2HlZHlishQCP4uyiTFAbhPboq6YsjbgFOPE4yMi
Uj8IxGsK1B9tP8GLITgRGUlcsNyvNs5BubqWUTd6s2+JifwT5OU7FXRTEnp2/7xE
MOpYYV5kc20TjKaHdqECtuh5NeyEGunCxAFv13SjkOX9RMfkiDOvn0wPNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDhl85tH1UjKcbIv4ZXwY37Ekv9rMB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5Ur
VqVYAe23y8zca/scLFAoDWoOjjNlqutuJ0lCg43SQGesUHDFIuaJShuuyENEVmP8
U8ZLm6dAauE1m3qutNBcVoysOiSRBTSY/8J4GTGH7YwgmXejp8vttYE6kwEt7jan
SzEUjAt1215wYr9QOZDbJzoJrXUBKdETv/ezKPhtx3cZ/yVYiGky4awNAiCZTclf
gm4SRgBpf8r8ZKmALRipt23OZ9LOGjxHnxJM6MeGnyKeaIXZTUmnLDJwFcuW8a9O
OIl3iN0vQet9MYpcxY3TCsABwmxYR2DkuzFgXLDuwWgUwnF2zAt2DfCR69RUHZWk
koBnD1KHjzI/ZvP3tA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:39:11 2026 by rpki-client