Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: 8H0T3ILVjDY/6g6K978erEfqi0A1+YbwCI/j/wQ8C3Q=
Subject key identifier: 14:FF:EF:70:A6:DB:7C:90:E2:0D:08:1C:B8:93:05:9B:3E:E1:FA:74
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019DA3E61E320BB7EADF9DA616495125E729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0C26
Signing time: Sun 19 Apr 2026 04:01:00 +0000
Manifest this update: Sun 19 Apr 2026 04:01:00 +0000
Manifest next update: Mon 20 Apr 2026 04:01:00 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: J3s6XxHj9Y7F5H3UGwvuwbkhm9W0LS1jVIvgIkg6DzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:1e:32:0b:b7:ea:df:9d:a6:16:49:51:25:e7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Apr 19 04:01:00 2026 GMT
Not After : Apr 20 04:01:00 2026 GMT
Subject: CN=14ffef70a6db7c90e20d081cb893059b3ee1fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:64:05:07:62:22:3d:35:0a:b9:c6:16:cb:
14:b4:25:33:5d:79:57:1d:b8:94:16:7d:de:7b:1f:
3c:27:f5:d9:0b:0e:2a:0a:96:9f:08:e8:96:2c:31:
92:73:cc:f4:9f:58:ca:85:3d:d3:5f:48:a3:13:6f:
9f:6d:08:64:59:b7:30:f1:cb:6f:bc:aa:3a:71:77:
e0:7c:b7:cd:7b:c0:44:3e:d5:8c:be:46:56:65:b2:
37:21:8d:ad:9d:e0:07:3d:5f:84:16:d2:b0:f0:53:
2f:2d:66:ca:e6:a3:81:57:f2:3e:97:28:b8:a0:cd:
c0:ea:b8:61:c2:df:44:be:65:f3:75:c8:2d:0f:d6:
97:e2:50:36:bb:3b:0d:ef:9f:fb:39:83:3d:a8:c1:
c5:36:02:7d:a2:0a:ff:40:83:0d:df:53:2e:56:32:
e7:55:ad:bb:94:8d:55:80:e8:14:7a:65:c9:91:34:
2d:dd:2d:e1:73:ab:d2:a4:3d:16:84:b7:d7:fb:04:
ce:3f:dd:3f:cd:ad:ee:02:15:a6:3e:27:af:47:d1:
6e:f6:d8:1d:0c:34:62:0a:a8:40:8d:c4:25:46:5d:
80:c3:f9:5e:36:d9:12:65:1f:3a:cd:43:a7:04:f0:
ac:d3:b2:d8:49:3f:54:f7:59:63:74:76:3a:05:95:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:EF:70:A6:DB:7C:90:E2:0D:08:1C:B8:93:05:9B:3E:E1:FA:74
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:16:ec:6b:23:82:f4:53:bc:81:ff:a3:7d:e5:e9:42:cd:
52:f1:29:1e:3f:9f:c1:97:c6:fe:56:af:0a:b3:da:45:4f:a5:
74:70:38:34:e9:90:73:57:df:66:3a:42:49:ed:10:18:db:ca:
b0:1d:c5:2b:5e:8f:13:51:c5:24:3f:52:ba:33:43:b3:bb:29:
e5:ff:f3:38:c8:51:7a:14:5d:c7:09:0d:b6:c3:4c:90:cc:5d:
50:0a:1b:99:3a:96:f9:cb:0d:cc:f6:be:d1:de:6d:8e:28:30:
b8:aa:80:a6:b2:5d:57:60:bf:34:da:d7:a0:07:d0:ce:c7:d0:
8e:11:1a:55:b0:bb:a1:85:19:17:de:1f:4c:ce:42:87:15:1b:
7d:38:22:b9:51:b5:d0:ec:86:bc:5d:21:0f:b8:b8:77:cd:da:
7c:24:8b:e6:07:b5:72:69:db:39:a7:66:70:e2:dd:6e:9b:40:
6c:3f:d1:c9:45:ea:14:64:6a:fe:6a:fc:6a:3a:af:d7:9a:8e:
60:1e:e3:f8:89:20:db:8f:de:ff:bd:cd:f6:ff:00:2c:80:81:
c1:f2:6e:80:94:3e:ca:8c:31:9c:e2:96:01:5c:d0:e3:72:8b:
68:6d:7d:40:d9:8d:40:78:70:65:f2:53:d7:8a:95:d6:17:1c:
96:24:8f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5h4yC7fq352mFklRJecpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmU1MzMwMzNiM2NlOTVlNDk3MmJmMjM4MmRkYWMyOTNj
MmRjMDEwHhcNMjYwNDE5MDQwMTAwWhcNMjYwNDIwMDQwMTAwWjAzMTEwLwYDVQQD
EygxNGZmZWY3MGE2ZGI3YzkwZTIwZDA4MWNiODkzMDU5YjNlZTFmYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCNkBQdiIj01CrnGFssUtCUzXXlX
HbiUFn3eex88J/XZCw4qCpafCOiWLDGSc8z0n1jKhT3TX0ijE2+fbQhkWbcw8ctv
vKo6cXfgfLfNe8BEPtWMvkZWZbI3IY2tneAHPV+EFtKw8FMvLWbK5qOBV/I+lyi4
oM3A6rhhwt9EvmXzdcgtD9aX4lA2uzsN75/7OYM9qMHFNgJ9ogr/QIMN31MuVjLn
Va27lI1VgOgUemXJkTQt3S3hc6vSpD0WhLfX+wTOP90/za3uAhWmPievR9Fu9tgd
DDRiCqhAjcQlRl2Aw/leNtkSZR86zUOnBPCs07LYST9U91ljdHY6BZUSdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT/73Cm23yQ4g0IHLiTBZs+4fp0MB8GA1UdIwQY
MBaAFDguUzAzs86V5Jcr8jgt2sKTwtwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMGZhZTEtNDBlZS00MTkxLWIyZDQt
ZWFhMDkwNTE0YjUyLzEvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hMGZhZTEtNDBlZS00MTkxLWIyZDQtZWFhMDkwNTE0YjUy
LzEvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndcW7Gsj
gvRTvIH/o33l6ULNUvEpHj+fwZfG/lavCrPaRU+ldHA4NOmQc1ffZjpCSe0QGNvK
sB3FK16PE1HFJD9SujNDs7sp5f/zOMhRehRdxwkNtsNMkMxdUAobmTqW+csNzPa+
0d5tjigwuKqAprJdV2C/NNrXoAfQzsfQjhEaVbC7oYUZF94fTM5ChxUbfTgiuVG1
0OyGvF0hD7i4d83afCSL5ge1cmnbOadmcOLdbptAbD/RyUXqFGRq/mr8ajqv15qO
YB7j+Ikg24/e/73N9v8ALICBwfJugJQ+yowxnOKWAVzQ43KLaG19QNmNQHhwZfJT
14qV1hccliSPZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:11:34 2026 by rpki-client