Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: Efvb/BKgQmre86FDmqfYhYiqk4oYtC5NLl3wOStQi8w=
Subject key identifier: D5:AE:DD:B1:08:46:CC:BF:49:24:9A:5A:98:69:87:9D:69:81:FD:AD
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 019DA41D019FE39AB14C970334674B581404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 04D2
Signing time: Sun 19 Apr 2026 05:00:57 +0000
Manifest this update: Sun 19 Apr 2026 05:00:57 +0000
Manifest next update: Mon 20 Apr 2026 05:00:57 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: xGiMOiJ/scO1bhJcCUC7sl5elBGepKLc941ZmSheKu0=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:01:9f:e3:9a:b1:4c:97:03:34:67:4b:58:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Apr 19 05:00:57 2026 GMT
Not After : Apr 20 05:00:57 2026 GMT
Subject: CN=d5aeddb10846ccbf49249a5a9869879d6981fdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:4e:c8:c5:41:c9:aa:8f:29:ec:e8:a1:f1:
d4:4f:be:53:90:b9:a3:d8:5d:58:e9:2e:9e:8e:09:
b0:8c:44:3a:20:05:2e:24:f5:0b:d5:7a:e2:a4:0b:
f9:e8:22:7c:40:ba:aa:c7:8e:32:23:af:7b:f7:51:
5e:0f:72:a4:82:ab:f0:4c:81:1a:c2:85:96:c7:d0:
cc:93:df:84:27:49:40:4c:04:e3:c5:5d:53:5e:ae:
d5:3a:a1:1f:27:58:75:65:31:4d:07:a0:d3:63:97:
1f:af:be:54:76:02:9b:ad:20:61:a5:f9:cd:b1:30:
a1:59:e1:20:ec:08:e7:10:5d:35:1d:aa:b5:0f:68:
c9:e4:d9:5f:24:ed:bd:fa:2f:a1:d5:16:9a:ec:ec:
22:15:49:b4:e9:98:a6:02:cf:1e:b7:05:2c:0f:3a:
0f:31:db:62:7d:49:cb:90:f9:63:79:46:e6:76:f8:
e1:07:21:db:dc:e7:2b:19:19:af:66:a0:25:d6:35:
bd:ff:b5:64:e0:9e:34:82:85:75:69:5e:1b:5f:23:
b1:7c:e4:05:3b:4b:2f:2f:b0:c7:b0:59:10:ce:82:
3c:f8:85:50:48:17:1e:11:ac:05:c8:4b:4c:3b:1b:
aa:1b:e0:62:6d:e6:4c:51:3f:8d:67:0a:ca:4d:1b:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:DD:B1:08:46:CC:BF:49:24:9A:5A:98:69:87:9D:69:81:FD:AD
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f5:90:fe:18:47:de:82:b0:69:27:51:b2:9b:31:a8:a9:1b:
4d:47:ef:6b:f6:7b:ce:7e:e5:b1:17:5e:d2:bf:6f:3c:02:40:
e6:78:a8:a2:cc:14:1e:64:ed:c6:aa:ca:53:df:88:55:5d:15:
d8:84:20:6d:09:bb:c1:38:61:9d:b2:10:51:ae:5f:17:c9:9b:
2a:ce:a9:1e:d1:cf:d0:1e:f4:89:73:4d:0e:75:9f:52:56:72:
e9:38:4d:13:f7:72:f0:ee:df:c8:94:9e:f0:cc:f0:7f:ce:fb:
7a:b8:fa:38:af:dd:80:1d:f4:95:24:22:f1:97:41:d0:43:48:
54:4d:98:cd:86:0d:d5:43:6f:4f:31:f0:5a:13:c4:75:f9:7d:
34:12:60:ad:be:01:fb:7e:3c:f1:58:46:20:8c:42:2f:bf:9a:
dc:d6:35:e0:30:07:ac:df:58:8e:8f:c5:06:16:5d:8d:bd:64:
ab:48:6c:26:58:67:b1:f6:f9:65:84:e4:6f:c1:f8:5d:1d:03:
f7:cb:af:9b:e7:86:17:9a:da:f4:f3:a3:cc:5d:99:ce:8d:34:
79:1b:88:a4:cb:90:59:eb:7b:8a:0a:b5:92:fe:58:a0:41:88:
8d:82:a1:e8:d3:66:8d:6a:e9:31:02:7a:a8:d4:78:7b:88:71:
60:29:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:54 2026 by rpki-client