Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: En0n10Z4kppOYPbU2NrqwLyuuo6O3qpQ8wShxj6c4Ec=
Subject key identifier: CF:1C:AC:77:D8:54:8D:25:20:28:44:4B:3B:F1:27:FD:B6:3F:D6:5F
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019DA3E6FE64663EFD109ECD9492E0AC9716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 14FB
Signing time: Sun 19 Apr 2026 04:01:57 +0000
Manifest this update: Sun 19 Apr 2026 04:01:57 +0000
Manifest next update: Mon 20 Apr 2026 04:01:57 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: AmqzP2uMyqUg1u80W5AHsuhf+lYerMaXiwWYixvehrA=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:fe:64:66:3e:fd:10:9e:cd:94:92:e0:ac:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Apr 19 04:01:57 2026 GMT
Not After : Apr 20 04:01:57 2026 GMT
Subject: CN=cf1cac77d8548d252028444b3bf127fdb63fd65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:ae:ee:59:6b:c9:8c:05:9a:e8:06:8d:cc:
83:4d:7e:58:99:64:8d:5d:1c:f8:cc:5c:7e:f4:29:
86:bc:f5:34:41:da:bc:54:ed:25:8e:3b:18:9b:b9:
b1:6b:84:b5:74:64:6b:b7:45:3f:ab:52:b7:74:48:
ed:da:54:0c:2c:27:55:5c:70:ab:89:c1:ca:b3:21:
d2:26:1b:eb:b7:e3:b3:e0:be:a3:bb:ec:9f:24:76:
28:f4:51:57:a2:ef:3a:5f:28:35:e6:70:80:97:b9:
01:e1:e8:b3:d8:d3:54:6a:dc:ce:6b:b4:47:9b:15:
d8:74:f4:6c:a4:bd:26:ad:cd:95:9d:1a:fd:7b:2c:
94:44:67:5a:22:28:86:70:76:da:ce:86:fe:9b:2d:
d2:a2:e8:95:f2:f9:7f:de:7b:7e:99:75:de:c0:da:
f6:fa:f5:96:96:aa:f4:a0:91:82:b8:49:c2:f6:ab:
e1:f7:6b:93:b0:7f:82:3a:e4:e9:48:f6:87:87:57:
21:14:57:88:42:ce:59:97:c5:24:8a:79:58:08:fe:
d5:67:20:79:41:79:6b:6c:bb:a7:12:fe:ba:81:bf:
c6:8f:de:48:04:5d:21:af:3a:d3:08:19:5d:9a:a2:
93:cb:56:1b:48:25:78:81:50:20:6c:c1:45:86:a7:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:AC:77:D8:54:8D:25:20:28:44:4B:3B:F1:27:FD:B6:3F:D6:5F
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c0:9a:24:eb:8b:ad:07:34:10:ee:d4:ff:2a:4a:1c:fe:d5:
06:51:e6:f8:5b:fe:e6:ab:94:92:a7:24:73:1e:55:c4:33:ce:
39:16:34:c8:9f:b1:06:ff:e5:a6:f1:7b:9f:50:97:0e:26:17:
cb:9f:f5:43:67:57:ca:bb:eb:cb:b4:14:30:10:79:aa:a9:78:
90:2c:e0:fe:5e:d8:39:de:de:83:40:b9:21:d8:3e:c8:45:4d:
d4:53:6c:62:0f:e4:4d:14:8b:b2:b4:dc:13:11:ff:19:4c:ce:
bb:ac:a9:b1:51:ef:42:0d:35:32:93:cb:c8:ca:6b:d4:6f:11:
28:d3:e0:e5:af:59:3f:50:a9:1f:89:d3:0d:2c:65:54:07:a7:
d0:39:b8:64:92:1a:e2:a9:9f:d8:03:55:11:ff:a5:c2:42:6e:
cb:ec:78:e9:0e:91:4a:17:76:d8:0d:66:98:32:ed:d4:c4:80:
e4:87:69:b6:23:3c:4e:ac:35:18:af:74:e5:3a:b7:6c:9c:17:
5d:43:03:e2:15:8f:7d:f8:bc:44:2a:c5:65:d5:86:8b:8a:ee:
e9:a7:9e:97:32:0e:d7:20:f3:fd:4e:2d:83:b7:26:8c:b9:af:
71:03:a5:e2:a2:ab:c5:2f:80:fb:83:ad:82:93:38:f5:62:ae:
34:4c:90:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5v5kZj79EJ7NlJLgrJcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjYwNDE5MDQwMTU3WhcNMjYwNDIwMDQwMTU3WjAzMTEwLwYDVQQD
EyhjZjFjYWM3N2Q4NTQ4ZDI1MjAyODQ0NGIzYmYxMjdmZGI2M2ZkNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B2u7llryYwFmugGjcyDTX5YmWSN
XRz4zFx+9CmGvPU0Qdq8VO0ljjsYm7mxa4S1dGRrt0U/q1K3dEjt2lQMLCdVXHCr
icHKsyHSJhvrt+Oz4L6ju+yfJHYo9FFXou86Xyg15nCAl7kB4eiz2NNUatzOa7RH
mxXYdPRspL0mrc2VnRr9eyyURGdaIiiGcHbazob+my3SouiV8vl/3nt+mXXewNr2
+vWWlqr0oJGCuEnC9qvh92uTsH+COuTpSPaHh1chFFeIQs5Zl8UkinlYCP7VZyB5
QXlrbLunEv66gb/Gj95IBF0hrzrTCBldmqKTy1YbSCV4gVAgbMFFhqcYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8crHfYVI0lIChESzvxJ/22P9ZfMB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8CaJOuL
rQc0EO7U/ypKHP7VBlHm+Fv+5quUkqckcx5VxDPOORY0yJ+xBv/lpvF7n1CXDiYX
y5/1Q2dXyrvry7QUMBB5qql4kCzg/l7YOd7eg0C5Idg+yEVN1FNsYg/kTRSLsrTc
ExH/GUzOu6ypsVHvQg01MpPLyMpr1G8RKNPg5a9ZP1CpH4nTDSxlVAen0Dm4ZJIa
4qmf2ANVEf+lwkJuy+x46Q6RShd22A1mmDLt1MSA5IdptiM8Tqw1GK905Tq3bJwX
XUMD4hWPffi8RCrFZdWGi4ru6aeelzIO1yDz/U4tg7cmjLmvcQOl4qKrxS+A+4Ot
gpM49WKuNEyQUQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:51 2026 by rpki-client