Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
File: Ou5vE-TaDy5DIqGnWqfn189xekI.mft (raw, json)
Hash identifier: LYKiilVbvAksiICBvz3RTJ1ee7WM1RFWXtniMvenMWI=
Subject key identifier: EE:22:26:65:25:3C:C2:89:1B:E5:34:3A:46:53:46:0C:99:05:3A:C4
Authority key identifier: 3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
Certificate issuer: /CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Certificate serial: 019D9AE2F3118FBF54458532426DE527D9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:00:57 +0000
Manifest this update: Fri 17 Apr 2026 10:00:57 +0000
Manifest next update: Sat 18 Apr 2026 10:00:57 +0000
Files and hashes: 1: Ou5vE-TaDy5DIqGnWqfn189xekI.crl (hash: l7ZnO/0670ba2QSS2aWWkXqVywyji+4SR04NNoeV8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f3:11:8f:bf:54:45:85:32:42:6d:e5:27:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Validity
Not Before: Apr 17 10:00:57 2026 GMT
Not After : Apr 18 10:00:57 2026 GMT
Subject: CN=ee222665253cc2891be5343a4653460c99053ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:dd:1a:e7:53:8d:a2:ad:55:ef:d5:88:d8:
6e:c8:6e:ae:d7:f1:e0:5d:c1:30:d0:da:be:ee:84:
ea:00:e1:e2:4d:5a:f6:b2:99:dc:f6:b2:45:62:0e:
e7:5b:cd:76:48:51:bf:3d:01:e6:82:a3:3f:1a:00:
6b:c2:68:f3:8d:93:d2:82:60:99:00:fe:6d:64:45:
8a:73:c6:d5:89:f3:75:92:7f:fa:56:ab:fe:cf:1c:
96:61:8d:aa:28:73:2f:53:e4:3e:71:be:07:aa:6f:
ff:50:93:ff:19:99:99:23:f0:26:16:60:95:15:d6:
cb:48:77:fe:2a:2e:a1:c7:76:9c:6b:e1:54:55:53:
12:21:fb:56:27:d0:0a:4f:a6:d3:8c:28:cd:a5:69:
67:16:dc:79:fa:51:59:63:3b:96:68:d2:25:b8:dd:
03:9a:31:17:cd:6f:a4:36:2c:c8:82:2c:2a:6f:38:
4a:70:d5:75:6e:b5:86:80:1b:d2:02:5b:02:c4:fe:
ad:27:ba:5b:a7:ee:fd:8e:42:f4:2c:46:2e:92:32:
e6:7c:94:40:a7:2d:3a:de:4a:19:31:ef:3e:d2:65:
6d:0e:15:52:5d:da:0c:47:3c:c8:e3:bd:38:d0:8e:
94:63:92:df:22:3c:6e:ad:fe:5a:51:b3:49:e5:db:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:26:65:25:3C:C2:89:1B:E5:34:3A:46:53:46:0C:99:05:3A:C4
X509v3 Authority Key Identifier:
keyid:3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ce:5b:65:91:74:71:6b:a8:b8:79:b1:53:ad:f4:2f:c7:0d:
b4:7c:39:19:2f:67:f2:fc:52:eb:15:d4:d7:6c:cd:fe:7e:45:
54:9b:ca:f3:97:38:23:0c:ee:52:aa:e4:20:16:bc:b1:32:4b:
ca:f3:a2:62:6d:df:da:e0:54:c5:77:87:1a:81:bd:95:1b:28:
fd:a5:c8:a2:d7:c2:cf:66:79:5e:f9:72:f8:e3:fb:06:4b:8c:
00:4d:9b:99:68:c6:ec:6e:87:bb:1e:6b:ff:2e:a0:f3:f0:ac:
41:55:b3:f7:2f:f0:ee:21:cd:e6:70:50:2d:24:cc:41:ec:51:
68:25:41:5d:9e:3f:1f:03:3a:ba:fc:be:d8:19:4a:40:53:c1:
8f:7c:b5:f4:1f:ce:e3:fe:ee:b4:76:fd:0e:f0:31:f5:16:c5:
0a:ec:c0:6a:68:e9:0e:67:11:a6:0b:2c:86:b7:c2:13:31:e8:
f6:78:5c:da:42:0b:f2:c3:85:eb:4b:ef:85:8e:ab:65:e7:55:
00:b9:f1:47:cb:c4:51:d6:b4:4a:c1:3f:0e:1d:39:00:5c:ce:
76:45:fc:c9:c2:44:19:48:3c:3c:e4:4b:17:d5:f4:76:c6:8f:
8a:5e:3f:cc:cd:12:a2:46:8d:a0:e6:50:0d:e8:30:a4:75:ff:
b5:3c:04:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4vMRj79URYUyQm3lJ9nkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWU2ZjEzZTRkYTBmMmU0MzIyYTFhNzVhYTdlN2Q3Y2Y3
MTdhNDIwHhcNMjYwNDE3MTAwMDU3WhcNMjYwNDE4MTAwMDU3WjAzMTEwLwYDVQQD
EyhlZTIyMjY2NTI1M2NjMjg5MWJlNTM0M2E0NjUzNDYwYzk5MDUzYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWLdGudTjaKtVe/ViNhuyG6u1/Hg
XcEw0Nq+7oTqAOHiTVr2spnc9rJFYg7nW812SFG/PQHmgqM/GgBrwmjzjZPSgmCZ
AP5tZEWKc8bVifN1kn/6Vqv+zxyWYY2qKHMvU+Q+cb4Hqm//UJP/GZmZI/AmFmCV
FdbLSHf+Ki6hx3aca+FUVVMSIftWJ9AKT6bTjCjNpWlnFtx5+lFZYzuWaNIluN0D
mjEXzW+kNizIgiwqbzhKcNV1brWGgBvSAlsCxP6tJ7pbp+79jkL0LEYukjLmfJRA
py063koZMe8+0mVtDhVSXdoMRzzI47040I6UY5LfIjxurf5aUbNJ5dvjhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4iJmUlPMKJG+U0OkZTRgyZBTrEMB8GA1UdIwQY
MBaAFDrubxPk2g8uQyKhp1qn59fPcXpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U1dkUtVGFEeTVESXFHbldxZm4xODl4ZWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iYTBiMGUtN2NlYS00YjlhLTliNmQt
MGMwMjkyMTY3Zjk1LzEvT3U1dkUtVGFEeTVESXFHbldxZm4xODl4ZWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iYTBiMGUtN2NlYS00YjlhLTliNmQtMGMwMjkyMTY3Zjk1
LzEvT3U1dkUtVGFEeTVESXFHbldxZm4xODl4ZWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyc5bZZF0
cWuouHmxU630L8cNtHw5GS9n8vxS6xXU12zN/n5FVJvK85c4IwzuUqrkIBa8sTJL
yvOiYm3f2uBUxXeHGoG9lRso/aXIotfCz2Z5Xvly+OP7BkuMAE2bmWjG7G6Hux5r
/y6g8/CsQVWz9y/w7iHN5nBQLSTMQexRaCVBXZ4/HwM6uvy+2BlKQFPBj3y19B/O
4/7utHb9DvAx9RbFCuzAamjpDmcRpgsshrfCEzHo9nhc2kIL8sOF60vvhY6rZedV
ALnxR8vEUda0SsE/Dh05AFzOdkX8ycJEGUg8PORLF9X0dsaPil4/zM0SokaNoOZQ
DegwpHX/tTwELQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:42 2026 by rpki-client