Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier: Pe64Nd/H024iZYQtE/W/SMOoduQk/XpB6H9e3As2p0I=
Subject key identifier: 07:D7:16:EB:EC:BB:7F:99:C5:B2:EF:17:5D:93:58:BE:E3:B9:60:D3
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 019D9773F6198ECEFDBA3B5DAA80F38F5402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number: 1049
Signing time: Thu 16 Apr 2026 18:00:52 +0000
Manifest this update: Thu 16 Apr 2026 18:00:52 +0000
Manifest next update: Fri 17 Apr 2026 18:00:52 +0000
Files and hashes: 1: JFPJOrPs9dXx9GwdhX115yKBrlc.roa (hash: xcbSy3Zef1nqQuOhrN3INeMT7qcWiLG9Wjm4R+KTz98=)
2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: eKqMtore3Wv+BJgtMKSm8btePRoSBOu7FmqzsosVtGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:f6:19:8e:ce:fd:ba:3b:5d:aa:80:f3:8f:54:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Apr 16 18:00:52 2026 GMT
Not After : Apr 17 18:00:52 2026 GMT
Subject: CN=07d716ebecbb7f99c5b2ef175d9358bee3b960d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:da:cd:11:99:41:55:89:ed:64:97:9b:93:
13:62:0d:9f:c3:58:47:09:e4:c5:e2:b2:48:84:b5:
9d:c9:7a:c0:a3:a8:0e:bc:a6:a6:70:86:7c:8a:28:
70:24:0e:51:97:55:2e:b9:2f:45:b4:4a:53:e1:3c:
f7:e1:0a:07:30:dc:6b:aa:6c:4d:4d:dc:7b:30:78:
aa:54:61:0b:c3:e7:58:ee:e8:df:48:e9:68:7f:51:
33:69:27:24:29:78:9a:99:49:e1:73:52:4c:48:7d:
28:ab:d8:fd:06:c6:fa:78:91:9c:b4:57:cf:20:82:
8a:8b:04:22:13:75:2c:56:bb:e5:fc:e2:07:4c:31:
ea:f1:c2:ea:bd:f0:57:37:a1:d3:2c:db:35:77:7e:
67:1f:2c:6e:ac:03:7a:c6:06:be:35:ac:a2:f5:32:
3b:91:ae:30:5c:92:b6:44:bf:6c:6b:15:0e:f9:e2:
95:6b:f7:44:ff:30:47:34:db:0e:f9:81:8d:43:84:
8a:97:bc:f0:c0:2e:1d:74:da:8f:7f:b4:ac:73:67:
a0:85:1f:73:d8:2d:05:7b:a5:29:04:e3:83:3e:c0:
4e:75:3e:be:16:2f:c2:11:f9:c7:1b:60:51:a0:68:
56:10:f0:fd:0d:b3:0f:fd:38:39:12:c5:e0:b7:02:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:16:EB:EC:BB:7F:99:C5:B2:EF:17:5D:93:58:BE:E3:B9:60:D3
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:f3:f6:06:30:76:05:59:6f:d1:34:5b:4d:30:f9:35:fd:
d5:95:2e:52:aa:6a:60:ef:54:83:30:d5:4d:85:3e:e6:63:f1:
0f:9a:db:df:30:07:02:08:38:da:10:3f:7d:a3:39:de:6d:2f:
9e:23:56:31:55:44:b0:b6:8e:2f:08:20:5e:fb:ac:4d:99:bc:
c1:34:09:a9:d1:0d:29:d0:9b:65:78:cb:05:54:5e:71:a2:49:
48:04:9a:d2:bf:34:36:c0:30:27:9d:06:36:ee:45:d4:b1:8e:
04:36:c1:32:e7:96:5c:fa:23:54:ef:61:58:f8:95:55:22:12:
be:65:84:ed:d7:5d:f4:97:10:4b:4d:48:fb:0b:5e:d2:03:12:
b1:a8:82:eb:89:a7:40:08:ae:98:11:57:88:f0:dc:56:77:be:
bb:d3:d3:5e:50:b2:ea:ed:30:8d:9c:79:eb:5e:9c:50:75:b2:
64:10:03:b3:be:43:00:1c:16:fc:80:1c:0f:a0:5b:a2:26:e7:
ce:53:15:62:64:06:45:9b:04:e3:e7:ff:f4:93:8b:da:1a:e2:
c6:e9:cc:18:e7:0a:61:0c:95:c3:46:3c:36:37:36:e1:f8:40:
91:dd:5d:15:c0:3c:11:1e:fd:e1:07:56:d9:c2:44:39:12:a0:
ee:a0:85:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xc/YZjs79ujtdqoDzj1QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw
MTc0NTUwHhcNMjYwNDE2MTgwMDUyWhcNMjYwNDE3MTgwMDUyWjAzMTEwLwYDVQQD
EygwN2Q3MTZlYmVjYmI3Zjk5YzViMmVmMTc1ZDkzNThiZWUzYjk2MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTrazRGZQVWJ7WSXm5MTYg2fw1hH
CeTF4rJIhLWdyXrAo6gOvKamcIZ8iihwJA5Rl1UuuS9FtEpT4Tz34QoHMNxrqmxN
Tdx7MHiqVGELw+dY7ujfSOlof1EzaSckKXiamUnhc1JMSH0oq9j9Bsb6eJGctFfP
IIKKiwQiE3UsVrvl/OIHTDHq8cLqvfBXN6HTLNs1d35nHyxurAN6xga+Nayi9TI7
ka4wXJK2RL9saxUO+eKVa/dE/zBHNNsO+YGNQ4SKl7zwwC4ddNqPf7Ssc2eghR9z
2C0Fe6UpBOODPsBOdT6+Fi/CEfnHG2BRoGhWEPD9DbMP/Tg5EsXgtwLHgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfXFuvsu3+ZxbLvF12TWL7juWDTMB8GA1UdIwQY
MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt
Y2UyOWZkMzUyNmE4LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4
LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUjz9gYw
dgVZb9E0W00w+TX91ZUuUqpqYO9UgzDVTYU+5mPxD5rb3zAHAgg42hA/faM53m0v
niNWMVVEsLaOLwggXvusTZm8wTQJqdENKdCbZXjLBVRecaJJSASa0r80NsAwJ50G
Nu5F1LGOBDbBMueWXPojVO9hWPiVVSISvmWE7ddd9JcQS01I+wte0gMSsaiC64mn
QAiumBFXiPDcVne+u9PTXlCy6u0wjZx5616cUHWyZBADs75DABwW/IAcD6Bboibn
zlMVYmQGRZsE4+f/9JOL2hrixunMGOcKYQyVw0Y8Njc24fhAkd1dFcA8ER794QdW
2cJEORKg7qCFvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:03:21 2026 by rpki-client