Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: +BMcJzfCO2SkF3XyN/67Z1Wy1bgx4YFDEKTSF8SwTso=
Subject key identifier: E0:84:9E:13:B7:EB:BC:E3:7D:80:E2:77:53:3E:3E:4F:E6:AF:51:14
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019D9B87A7565B22C1B207F0D548B842456F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 87
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: KF09wFgJMiRzk4qLPD60zdAH9W5fr89XxGI7XDTqsQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a7:56:5b:22:c1:b2:07:f0:d5:48:b8:42:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=e0849e13b7ebbce37d80e277533e3e4fe6af5114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:f5:1f:09:e7:9a:81:bc:0c:6a:a8:1b:69:
06:c0:2a:2a:34:b0:c9:20:2b:99:37:15:67:0c:47:
02:56:df:20:06:fb:97:36:b7:1d:7d:89:93:84:24:
8f:42:d5:96:67:17:cd:a4:15:05:c6:cf:62:34:d1:
90:ca:cf:46:e4:c0:41:7b:07:6b:f9:04:29:59:e9:
52:9b:eb:12:0f:9e:de:aa:1d:aa:aa:95:65:27:f6:
2a:80:2c:94:50:c0:58:f7:1e:75:e4:62:3a:d7:bd:
00:07:3d:17:ab:f8:5b:48:f0:ec:c7:1b:88:71:20:
b9:53:ce:e4:2f:a5:c8:1e:c6:af:02:cf:f1:fa:5d:
2b:28:36:17:99:cd:de:66:f5:0d:36:46:06:5d:89:
9d:70:d3:73:09:14:57:00:46:5d:72:a6:0f:fc:9d:
84:14:46:81:d3:b1:fb:c4:5a:90:b0:67:c2:9d:8e:
43:39:2d:dc:b7:6b:99:c7:f3:80:d9:ed:06:9d:db:
9e:92:1b:d1:c0:5a:8c:d9:a3:80:65:12:60:90:d3:
2e:2b:31:ab:bf:c6:ec:92:99:cd:bb:12:4d:87:3b:
c1:9c:49:6d:8a:5f:3d:31:22:02:4a:16:e4:d7:7f:
98:a2:db:ec:7b:ce:41:11:3e:ad:99:42:94:19:85:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:9E:13:B7:EB:BC:E3:7D:80:E2:77:53:3E:3E:4F:E6:AF:51:14
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:25:6d:90:04:ed:42:bd:7b:9b:7a:c7:42:28:41:34:d5:7a:
2f:b2:fa:7b:c2:86:97:32:c1:6c:a4:79:c1:b1:6c:08:37:1f:
28:ca:75:5d:b7:71:9b:8a:83:40:e2:5e:4f:9e:d2:62:6e:b3:
eb:06:fc:7e:a9:66:99:24:e8:4f:5b:80:02:36:2a:b2:53:56:
15:0c:6b:0d:03:0a:86:62:1d:15:e0:ea:f4:65:27:b9:c4:0a:
2f:cb:c7:09:0b:43:bf:c9:12:97:7f:6d:ff:26:1c:78:85:f0:
93:f0:bb:49:1a:1a:9d:56:80:a2:3b:84:5f:22:16:18:db:9a:
cd:3e:6e:48:c6:bd:ae:ef:b2:a4:8a:54:df:b8:97:a0:c8:12:
e7:e5:ad:b8:3c:52:d8:1d:b5:fd:60:e2:b3:fb:2c:24:a4:94:
3e:03:d1:2d:99:a6:94:20:c2:1c:d4:ec:ad:9c:68:ff:1c:4b:
94:53:04:a3:d4:26:e2:86:14:73:ee:33:6f:a8:ee:d3:11:31:
05:f4:b1:b8:40:55:8e:c2:49:db:ba:0d:d5:60:c9:ef:bb:10:
71:42:ca:04:24:ec:e6:5b:9a:4f:d6:6d:5b:cd:27:12:93:35:
84:72:b0:d8:14:b4:ba:f0:5d:1e:30:15:ee:2b:46:87:a3:58:
81:c7:a8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:58 2026 by rpki-client