Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: saKtGQi48sjzdmtokclFiK1UpcZJWBJ9dsz8e9toQXg=
Subject key identifier: 52:18:93:AE:8E:6F:BA:20:AD:D2:28:B4:2F:DF:D1:DE:A6:FF:BD:D6
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019D9B51203D94AC138B59F0E84224B48900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 0433
Signing time: Fri 17 Apr 2026 12:01:18 +0000
Manifest this update: Fri 17 Apr 2026 12:01:18 +0000
Manifest next update: Sat 18 Apr 2026 12:01:18 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: EQV3v64ahpfEhGyU5EVYhrkXzXrWa265lYJSh3yNsqw=)
2: qcRxwVaFJKZNZxKItMTgD_sHnKI.roa (hash: zSxjrYYqoeDrJlezU9Vi0F+/e6UNxqHigCDZbFFsf0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:20:3d:94:ac:13:8b:59:f0:e8:42:24:b4:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Apr 17 12:01:18 2026 GMT
Not After : Apr 18 12:01:18 2026 GMT
Subject: CN=521893ae8e6fba20add228b42fdfd1dea6ffbdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:bb:27:04:43:b6:4c:58:a2:fd:91:54:a2:
0d:e7:c8:25:94:c2:dd:af:e3:fa:d5:7e:54:d2:02:
91:07:8e:2b:bd:fc:cc:c4:69:5f:ff:db:a3:e1:1b:
2b:0e:50:07:96:91:6a:7f:14:87:1b:13:b3:84:98:
c5:c4:48:43:a7:a3:80:4a:9e:ba:14:5b:0f:57:5a:
8d:a0:60:96:ea:52:f1:4a:2d:d7:dc:2a:25:2e:1c:
55:19:e1:cd:00:b4:9c:05:3c:e8:92:66:00:0d:6d:
94:93:06:7b:9a:88:f0:78:0f:ab:a9:d9:b3:e0:c4:
c6:a8:f6:e2:f4:0b:c5:6d:04:8e:66:1f:75:66:71:
79:0d:ed:b7:dd:31:17:18:5a:9c:91:4d:5d:33:9b:
79:d4:e4:b6:a1:1d:8f:e1:9f:ff:60:e0:1d:91:7d:
10:75:0a:cb:39:b8:56:8c:38:91:4c:fb:ee:6d:eb:
c6:85:43:59:7b:79:8e:44:2b:3b:ab:77:e9:8c:4b:
8b:8e:d2:6f:a3:98:c0:c3:8c:53:bb:05:cd:a4:32:
94:72:a0:f3:da:d6:2b:a3:50:e6:08:f4:12:34:1c:
f3:1f:62:c0:11:ea:1b:dc:98:d4:92:67:3a:0a:13:
c3:c6:ec:60:9f:a4:c5:dc:54:98:de:5b:8a:f0:bd:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:18:93:AE:8E:6F:BA:20:AD:D2:28:B4:2F:DF:D1:DE:A6:FF:BD:D6
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:a4:fd:ee:a3:ce:32:be:94:75:34:11:85:db:cf:90:be:
7f:f5:7d:f9:5e:15:b2:65:61:de:dd:26:16:19:dd:5f:24:1d:
72:7c:97:8e:a8:d8:13:3e:1e:d1:be:a0:eb:86:da:0e:f0:1f:
1a:9f:6e:6e:e4:cd:f6:e7:51:2a:05:2e:f2:e5:e2:ba:60:9c:
c1:a2:b7:b4:e8:75:51:f8:c5:0f:28:6f:20:70:40:91:75:e5:
f6:dd:e6:ac:87:bc:9e:cf:0c:ec:f4:fa:f1:68:bb:99:70:c2:
7e:97:e3:30:81:66:73:a0:c7:8f:a1:61:55:4e:4d:3e:2f:f0:
dc:c7:a5:8a:b5:d2:71:3a:2f:b5:47:15:0b:f2:28:57:a1:35:
03:84:d7:3b:28:ca:73:59:99:85:f3:b1:8f:9b:90:6c:af:86:
4d:28:33:09:d5:f9:88:82:cb:fc:a8:91:f3:b4:fd:6e:7f:f9:
75:91:e7:1f:6d:8f:7a:fc:07:84:b8:5d:bb:6c:42:69:69:32:
ca:10:95:be:80:99:62:13:48:14:c4:3e:38:41:fe:be:91:c0:
71:09:5f:e8:75:f5:ff:23:2f:da:b5:5a:9f:14:66:50:07:44:
39:7b:98:a9:3f:9d:9f:cc:41:a3:85:68:67:28:99:54:8d:f7:
0f:f5:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:41 2026 by rpki-client