Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier: E9S/ecggj3VAeL0WqzXABjMbqvGPz/muAhKKxHsssPE=
Subject key identifier: 64:99:98:DA:B8:1A:DF:08:8D:AD:75:A5:E1:5E:B8:E1:DD:B5:FF:F3
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 019D9886D98F580E0708F15BE26D1725C7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number: 086C
Signing time: Thu 16 Apr 2026 23:01:07 +0000
Manifest this update: Thu 16 Apr 2026 23:01:07 +0000
Manifest next update: Fri 17 Apr 2026 23:01:07 +0000
Files and hashes: 1: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: foQpnAbw9HVmUceGt9R5Ud8vwq15eyFXQCMtoh0tC8A=)
2: x2674gpeOOkrgbaldgBcetLScA0.roa (hash: slI9OZiOgpY/PPO59egGhNigxJguaSBoswQUZlXaUCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d9:8f:58:0e:07:08:f1:5b:e2:6d:17:25:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Apr 16 23:01:07 2026 GMT
Not After : Apr 17 23:01:07 2026 GMT
Subject: CN=649998dab81adf088dad75a5e15eb8e1ddb5fff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:bb:64:07:d3:39:2f:f6:69:2c:99:1e:87:
31:c9:8d:b5:bb:ed:26:3e:3e:d5:89:28:c1:d8:fd:
d5:fd:9b:07:a7:e6:81:13:51:c0:11:47:8d:1b:04:
3d:69:09:90:9d:98:8a:8a:22:8e:e5:5c:5e:ec:b7:
c6:4a:fb:4f:52:23:db:42:7f:68:9a:80:cf:7e:bc:
89:b6:bb:0a:47:ab:07:37:90:55:a7:bc:e2:56:81:
03:7b:0d:ce:2f:2f:47:7e:71:5b:0f:c9:b7:fb:1b:
c2:a0:c5:69:e4:88:f7:68:5d:b0:72:f2:3b:95:66:
43:be:af:8c:fb:cb:7d:7f:bb:3a:8d:f3:01:da:e4:
70:ba:1f:bd:6c:8c:3e:5b:ca:1f:33:71:e5:1f:1c:
87:2a:e9:b1:7f:79:6a:74:e9:65:71:b6:8c:3a:3f:
3a:bb:f8:80:56:7e:d3:ac:95:44:d9:51:92:f6:6b:
a1:15:91:f7:f1:28:ed:ce:5b:8c:a5:c2:e9:b0:a8:
5e:72:5f:17:82:55:0b:4a:27:f0:06:41:df:67:27:
24:69:87:67:83:7f:52:67:d7:de:fe:7a:20:44:8c:
8b:1d:02:28:06:57:ef:0a:23:c9:2d:bc:dc:91:4c:
3c:13:ad:0e:17:98:de:50:14:45:fd:5f:4f:40:49:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:98:DA:B8:1A:DF:08:8D:AD:75:A5:E1:5E:B8:E1:DD:B5:FF:F3
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:b3:39:42:70:99:28:15:ef:21:f4:c2:56:34:bc:96:05:
f4:24:25:4e:f3:cf:5b:82:d9:f3:f3:17:8f:4f:cf:a6:33:02:
92:02:21:28:87:70:5e:52:70:e3:84:f9:5f:72:21:ca:77:11:
7f:11:0d:6d:df:fa:90:6e:a5:bd:db:97:d8:06:74:8e:6f:aa:
10:b5:c2:16:a6:58:54:19:73:3a:83:4b:0e:f3:a4:f8:9f:d0:
be:5c:ec:23:5e:2c:a6:8a:da:f6:23:a9:f9:e4:5d:9c:8f:5a:
e2:b0:bf:84:46:ff:b7:a4:ca:4b:47:59:f8:9d:2f:87:fc:40:
41:61:28:d5:0f:b2:a8:69:a2:14:c9:27:b2:42:74:32:ea:fa:
8e:34:56:e8:87:37:31:28:75:ce:fd:43:4e:93:e9:b0:99:5a:
05:f3:99:2e:cc:16:7a:5d:53:50:78:53:12:73:f7:b4:d0:d2:
37:9f:59:79:20:7d:52:2d:58:86:2c:32:1c:71:32:79:58:bc:
c3:4b:ec:85:d4:d8:43:97:d4:f3:50:69:72:d9:01:94:78:ae:
ff:91:d8:4c:71:2d:15:66:08:bf:7c:e8:93:50:88:2f:3d:58:
10:4b:37:2d:fa:4f:73:cc:df:19:bf:38:73:b3:14:7f:17:69:
eb:fe:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:05 2026 by rpki-client