Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: KG/C2mxUsOwqDRmG+EpjyEMpvawdPex/KZZm4Pv9R5E=
Subject key identifier: A9:A3:66:C3:1E:20:19:5B:7A:71:2E:2C:DC:3D:BF:3A:D4:B9:B7:31
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 019D98508EB87EAEE3BEB8D3E8CB354CD3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 1426
Signing time: Thu 16 Apr 2026 22:01:49 +0000
Manifest this update: Thu 16 Apr 2026 22:01:49 +0000
Manifest next update: Fri 17 Apr 2026 22:01:49 +0000
Files and hashes: 1: 1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa (hash: nfIlAhagUA3pYoE5LuKLJK3yVXO0M1iaR7XMEzKKagA=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: OnmzLHuilGDuY+bD28VB71IcNNoeJ2cWDlG3ln/az2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:8e:b8:7e:ae:e3:be:b8:d3:e8:cb:35:4c:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Apr 16 22:01:49 2026 GMT
Not After : Apr 17 22:01:49 2026 GMT
Subject: CN=a9a366c31e20195b7a712e2cdc3dbf3ad4b9b731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:5a:bc:2c:bb:7c:47:0c:b1:27:22:98:15:
b7:c9:ed:cf:78:25:d5:53:e3:26:a5:04:dc:f3:4d:
2d:be:82:86:a3:76:1e:a3:9a:71:92:3a:2d:07:d2:
11:78:72:11:db:9e:93:d2:df:77:29:fa:d8:d1:0b:
53:fa:cf:ad:87:7e:72:1e:de:79:b5:36:3c:6e:71:
1a:4b:02:e9:45:8c:0c:34:40:f8:37:d7:89:c1:94:
08:8a:71:73:6b:bd:de:a8:ca:c4:4b:3a:81:23:95:
3f:35:6e:6e:97:48:d4:43:44:e1:48:1f:26:23:28:
27:b8:bb:c8:72:61:c5:5c:a0:58:9f:51:f6:6e:c6:
eb:4c:af:21:e9:7f:7c:02:c1:1b:12:e8:a9:09:38:
65:ba:a0:a4:d3:c4:a3:f9:38:b0:07:8e:aa:c1:b0:
38:21:65:0c:94:dc:61:22:0d:d1:2c:f5:bd:09:31:
df:63:40:f7:79:31:c1:bd:20:1f:f1:54:92:d7:6c:
85:9e:e9:d2:ca:a2:6f:46:f5:0c:44:c6:7a:e6:9c:
18:65:fb:7d:5c:ff:ee:4d:87:9c:bb:b9:b4:28:11:
38:c9:78:16:bf:be:90:ea:f0:5a:88:50:f1:7a:b1:
5b:5b:46:0a:b3:c7:05:dd:1e:c5:05:9a:29:95:b5:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:66:C3:1E:20:19:5B:7A:71:2E:2C:DC:3D:BF:3A:D4:B9:B7:31
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:59:3f:2f:93:f1:60:1a:58:fa:0c:c1:62:3a:71:c4:e4:c2:
31:5c:1a:3b:4e:e6:0c:0b:68:77:27:f0:78:77:96:38:ab:33:
be:54:0a:5e:e0:d0:23:de:da:95:20:bb:e8:e3:d6:26:a6:1a:
21:00:75:ba:82:bf:fe:3c:c9:69:c0:47:7a:22:bb:23:82:24:
ca:6d:e8:e8:49:f0:2b:fe:66:69:b6:df:0c:03:7f:09:d5:4d:
32:51:05:97:46:ef:90:3a:e3:30:55:0f:8a:a4:dc:93:20:d3:
60:0e:e2:a2:d4:03:58:06:b8:6b:b4:65:d0:af:a7:15:b0:a2:
cd:53:e6:2d:f1:c8:19:ae:36:2e:ad:2b:29:bc:7a:aa:64:bd:
05:d6:08:b4:2c:21:c4:80:3d:5e:13:75:9d:69:84:2f:29:37:
1a:23:ce:af:da:0e:fc:57:62:4e:c4:5f:e7:fc:87:2d:13:96:
21:0b:cc:23:89:36:0a:8c:3d:fe:59:36:1c:51:6e:46:a1:49:
13:29:7e:0d:7e:f9:e9:da:c9:51:17:ce:96:ed:92:df:7b:f8:
74:c7:98:57:3b:70:1c:41:b0:6a:57:b7:a8:04:c9:ef:18:04:
5b:79:57:6a:99:00:88:47:d2:22:ee:2e:71:2c:c3:bb:99:66:
72:df:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:09 2026 by rpki-client