Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: NOOazPJsVhmpkQH77qVphB39ewftD+ZG3YTO4APLZPQ=
Subject key identifier: F8:C9:4C:0E:29:85:56:54:5A:08:0F:18:0B:3A:2B:2C:7A:3A:41:62
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 019D9A75185A7636B6F62444372C155E3AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:58 +0000
Manifest this update: Fri 17 Apr 2026 08:00:58 +0000
Manifest next update: Sat 18 Apr 2026 08:00:58 +0000
Files and hashes: 1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: ULUrdGjP3QuouMamByfiqtDpjGCaW5PrVj/ZjyjpLy4=)
2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:18:5a:76:36:b6:f6:24:44:37:2c:15:5e:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Apr 17 08:00:58 2026 GMT
Not After : Apr 18 08:00:58 2026 GMT
Subject: CN=f8c94c0e298556545a080f180b3a2b2c7a3a4162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:d8:ee:cf:53:93:50:c1:3a:14:7c:74:f4:
f3:ee:52:e4:de:dc:43:04:5f:b8:d5:c7:87:26:ff:
ca:30:b4:5c:4d:7e:11:e7:87:ec:e2:19:51:31:f5:
1c:76:bb:6f:9a:d3:a7:58:17:b1:d3:4a:9e:66:d2:
4e:c6:a6:d4:66:7a:f5:1a:8a:09:ee:c1:ab:8f:d1:
d2:7a:2c:8e:bf:b7:07:72:a2:8d:07:08:64:5d:5f:
83:be:c2:4b:ac:75:c5:5b:50:00:56:c5:d4:81:7d:
cc:fd:58:c1:13:61:41:39:1e:67:28:60:3c:97:9b:
50:07:fe:80:8a:9d:b1:37:6a:83:fb:c8:41:5d:b5:
df:71:f0:db:1b:15:5e:15:d3:3a:62:a8:f3:12:d3:
e0:f3:a3:41:54:03:29:7a:55:1a:f8:81:ba:01:20:
32:9a:41:72:c5:32:89:35:bf:de:8f:2a:43:7b:49:
9c:58:52:09:1f:78:5a:4d:35:17:4e:4b:b3:56:cc:
a8:05:51:44:d8:76:de:5b:a6:18:d9:2c:2d:48:c8:
20:67:2a:9f:65:89:0d:b1:ed:c2:6a:f5:76:f3:2a:
7f:50:a3:7e:85:16:ab:47:2b:f6:27:b5:83:12:14:
82:2a:56:d7:d5:f2:5e:58:29:45:6e:17:1f:36:d2:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C9:4C:0E:29:85:56:54:5A:08:0F:18:0B:3A:2B:2C:7A:3A:41:62
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:b4:43:be:da:3a:f7:f0:97:a6:17:2b:72:ec:54:e8:75:
9a:42:7b:a4:97:ed:d2:9c:32:38:54:ba:7d:b5:fa:89:9a:d6:
11:68:35:64:e1:ea:6d:e1:20:00:11:68:95:dd:73:46:2e:1d:
24:70:94:b9:42:e6:6c:43:09:ef:b1:c4:65:94:98:1d:24:ab:
b7:d8:a7:ac:78:d3:5c:13:23:3d:be:24:c2:98:8f:3b:49:85:
03:27:54:e1:55:d9:4b:71:d7:d0:b6:36:0c:de:24:a7:88:4f:
8d:a6:ac:d5:de:42:1b:f5:aa:04:f0:60:5d:e7:8f:73:3f:42:
d6:18:2c:5d:42:c3:3b:b2:a8:39:a5:4a:18:ad:b1:f3:ea:1a:
96:ac:06:ed:7c:9d:ca:8b:1c:b3:6c:9e:54:f8:af:6f:9d:77:
58:57:d6:0f:c6:b1:60:b5:49:80:2e:9b:5d:aa:8a:da:53:fe:
55:04:d4:69:23:36:bb:c4:86:35:91:dc:b2:dc:0f:be:e0:d8:
62:fd:3e:81:15:73:71:94:36:ea:7c:4a:1e:ea:a5:8f:79:16:
f9:3c:ab:4b:e4:69:d9:2d:5a:0e:fa:f7:45:54:83:eb:39:1f:
a5:81:d5:b1:3b:63:3c:97:3d:56:31:2a:95:91:6b:68:ad:14:
dd:cb:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:19 2026 by rpki-client