Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: KLSdxTC/j4AuRXY3OFyWN0DjS7ZthKvfWna+UOHjc9I=
Subject key identifier: 4C:2C:5B:7E:EC:7C:A8:EC:9B:59:E2:5E:C1:47:21:67:49:FB:9F:6C
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 019D999959E31E919F786465DB9958A83098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: kyF6Y+k05I6ofxJxluFiUW2oNZMi4lQOKwt522taFio=)
2: YyuaBUM2DfGwrhhloV5aHuzBCI4.roa (hash: CVz/owS5fTPJx5btZA+MB4GhmLyvwbOLmAgKI8HaW2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:59:e3:1e:91:9f:78:64:65:db:99:58:a8:30:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=4c2c5b7eec7ca8ec9b59e25ec147216749fb9f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:c5:c6:4b:83:f8:94:44:1c:20:4a:f5:70:
b0:43:e6:dd:a2:ce:d6:f4:49:ea:84:31:e6:ce:9d:
72:a4:ad:95:3c:b9:ce:cb:30:f8:b1:db:42:d0:eb:
4c:ae:58:3d:7c:fe:da:2c:c8:80:e1:84:5d:98:05:
e0:8c:11:ea:24:57:ec:ce:88:c6:2e:03:59:f5:5a:
2e:53:8d:d9:a7:98:ad:aa:ff:4f:7a:9c:77:a2:15:
11:ca:70:5f:32:ac:4a:3b:1a:5f:ea:08:ac:e1:ed:
de:45:8d:75:de:ed:a2:15:d0:32:7e:00:9f:59:e6:
31:f4:bb:5f:58:7e:47:2c:d9:0f:b7:0b:ee:b3:46:
81:ad:4a:0f:a5:30:67:78:b7:99:26:18:f5:c3:73:
8c:d6:d6:ea:a5:85:fd:d9:bd:f0:06:ec:c7:f9:bd:
98:a4:21:8d:38:d9:21:0b:08:c0:9d:81:cc:da:8f:
b2:19:6a:c7:e1:a4:89:21:b8:48:74:f1:a0:63:97:
a2:07:e7:2e:23:0c:96:ec:f7:4d:2c:29:e3:bf:3a:
fb:14:b8:22:ec:db:1a:36:2d:60:66:2d:ce:b3:20:
7b:41:2c:60:12:61:e3:9f:11:11:22:9e:3e:25:6d:
72:f5:e1:1c:91:0a:5d:f2:26:2f:43:5a:0f:ac:b5:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:5B:7E:EC:7C:A8:EC:9B:59:E2:5E:C1:47:21:67:49:FB:9F:6C
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:76:f3:39:44:9b:d3:3a:b6:e0:6f:8e:46:b5:68:dd:40:
20:da:9c:f7:47:2b:8d:5b:e6:e5:41:1b:de:08:9e:2e:c1:3e:
94:79:a0:b0:ea:c1:2b:ac:da:a6:8d:1e:5c:e6:cd:80:e2:8f:
da:86:06:3f:67:4a:25:fc:f7:8e:f8:60:63:9d:0d:1e:e1:5a:
c1:13:ff:cc:0e:25:a1:02:9c:19:a1:2e:53:5b:71:a4:84:dd:
e6:5e:32:e7:86:49:6c:9a:79:e7:f3:5e:7f:0d:3e:a4:11:83:
0e:0f:2a:86:fb:09:1c:07:12:ca:14:f8:59:f9:8e:9d:10:2a:
2b:c2:0a:16:cf:07:5f:d5:c2:a8:6b:3a:95:7f:4f:d7:59:a4:
94:54:05:80:42:f4:83:0a:6f:56:c6:73:2b:3a:63:63:91:d8:
c7:a6:9d:a7:8c:38:d2:cd:6f:4c:4f:1f:77:02:13:f4:f7:89:
d8:06:db:b7:07:5a:f4:1a:7c:0a:34:ef:b6:b4:68:15:aa:0e:
f8:94:c6:74:bb:47:78:bd:31:1b:67:81:1e:70:ea:97:82:cc:
a3:1c:d6:af:9f:fb:6f:b6:c7:28:81:5d:25:d0:69:a7:8f:2a:
36:f1:f8:2a:c2:37:77:81:ae:42:9e:9d:cb:0b:4d:8b:98:48:
9b:06:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:24 2026 by rpki-client