Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: iB5DrLY33oJ6tIOMPEhtB1y1jq/IjQfmgHiOf9yWYA8=
Subject key identifier: 7E:A7:8F:82:3C:DE:51:94:AE:6B:05:DC:B8:F9:0B:E7:8F:04:2E:6A
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019DA37910210C33BDE5AF53D0EFD81E025A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 02:01:53 +0000
Manifest this update: Sun 19 Apr 2026 02:01:53 +0000
Manifest next update: Mon 20 Apr 2026 02:01:53 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: fbdy5qHKDWEx/eSOVnjquEQNjQyy9B+k/JPESgvJSbM=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:10:21:0c:33:bd:e5:af:53:d0:ef:d8:1e:02:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Apr 19 02:01:53 2026 GMT
Not After : Apr 20 02:01:53 2026 GMT
Subject: CN=7ea78f823cde5194ae6b05dcb8f90be78f042e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:7f:ca:b1:7d:4f:4c:00:82:f1:26:97:67:
b6:25:d6:ab:ce:36:e5:87:0c:43:61:60:bd:00:83:
16:88:e5:62:f1:c1:46:e6:aa:0c:f0:b2:69:c6:b8:
a4:5f:c6:2c:52:bb:07:0d:84:bc:95:a1:cd:66:15:
95:a8:5e:7b:4c:7d:3f:f1:c8:94:0d:9e:5e:31:26:
79:e5:62:34:46:b6:74:9e:b5:df:e3:44:c0:eb:61:
2d:56:50:19:db:0e:65:62:cc:42:17:3a:39:ef:9b:
5e:93:a0:6b:e4:3c:cf:d1:ea:30:15:af:38:39:66:
f6:c9:9d:f9:47:38:11:0d:1d:68:1f:21:44:92:db:
f6:5c:61:bd:e3:30:d4:06:b8:86:a9:81:f9:14:bc:
1f:3d:55:3f:59:5e:f9:56:be:10:5a:00:be:35:1e:
1b:bb:21:b2:c1:0b:8f:e9:e1:5c:c7:f6:51:84:1b:
c3:73:d4:5d:b4:ec:8b:c5:d7:51:01:c3:d4:1d:87:
fd:b7:05:29:63:81:38:e2:19:47:a7:a6:f1:32:72:
55:0f:44:bd:e8:b0:18:80:80:f8:79:9d:19:0c:5e:
4b:44:4b:e9:ec:1c:82:27:4a:d3:1c:dd:ea:2f:25:
b8:75:95:15:bf:46:bb:48:6d:6c:e1:72:30:6f:b9:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:8F:82:3C:DE:51:94:AE:6B:05:DC:B8:F9:0B:E7:8F:04:2E:6A
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:16:34:0e:93:10:ae:7c:1d:db:d8:0d:8c:db:c7:b2:24:36:
30:10:b9:6a:b7:a6:a4:32:d9:b0:bd:7d:f4:27:f9:9a:77:82:
e8:ff:03:16:87:3e:3f:88:72:ab:d7:6e:d8:aa:50:7d:45:88:
6b:fd:70:e4:72:2b:f5:6a:39:14:60:65:09:58:68:ba:8c:44:
ba:af:94:d7:44:4c:d2:e9:13:6b:3f:c9:48:51:bb:49:1d:31:
8e:ca:5a:ab:19:7f:3b:1e:a0:72:71:00:2b:65:68:df:38:e3:
12:bf:15:9d:69:40:c3:32:8d:84:b3:80:11:a0:69:ff:41:be:
56:39:c1:80:bc:0a:a3:5f:39:a8:a8:9d:50:c2:d9:b9:05:74:
a1:20:38:99:e7:6c:3c:f5:8d:0f:a5:89:d2:70:96:54:91:14:
26:25:2d:58:34:78:8d:0a:7d:61:ed:c4:9d:33:90:82:63:47:
14:7f:f6:f1:e8:85:d4:a1:29:46:c4:35:b5:f1:69:eb:d4:6c:
3f:2c:ba:05:69:75:06:46:e6:59:d4:6d:07:09:1c:98:d3:b0:
53:a2:d2:25:cf:1a:ad:f7:b0:a0:c8:83:39:f6:1c:a7:63:0f:
78:3d:91:fb:3a:3d:8d:ba:96:44:1e:d5:0a:64:b7:48:9f:e7:
44:f9:c1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeRAhDDO95a9T0O/YHgJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm
NDEzNTIwHhcNMjYwNDE5MDIwMTUzWhcNMjYwNDIwMDIwMTUzWjAzMTEwLwYDVQQD
Eyg3ZWE3OGY4MjNjZGU1MTk0YWU2YjA1ZGNiOGY5MGJlNzhmMDQyZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd5/yrF9T0wAgvEml2e2Jdarzjbl
hwxDYWC9AIMWiOVi8cFG5qoM8LJpxrikX8YsUrsHDYS8laHNZhWVqF57TH0/8ciU
DZ5eMSZ55WI0RrZ0nrXf40TA62EtVlAZ2w5lYsxCFzo575tek6Br5DzP0eowFa84
OWb2yZ35RzgRDR1oHyFEktv2XGG94zDUBriGqYH5FLwfPVU/WV75Vr4QWgC+NR4b
uyGywQuP6eFcx/ZRhBvDc9RdtOyLxddRAcPUHYf9twUpY4E44hlHp6bxMnJVD0S9
6LAYgID4eZ0ZDF5LREvp7ByCJ0rTHN3qLyW4dZUVv0a7SG1s4XIwb7nfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6nj4I83lGUrmsF3Lj5C+ePBC5qMB8GA1UdIwQY
MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt
YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz
LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhY0DpMQ
rnwd29gNjNvHsiQ2MBC5arempDLZsL199Cf5mneC6P8DFoc+P4hyq9du2KpQfUWI
a/1w5HIr9Wo5FGBlCVhouoxEuq+U10RM0ukTaz/JSFG7SR0xjspaqxl/Ox6gcnEA
K2Vo3zjjEr8VnWlAwzKNhLOAEaBp/0G+VjnBgLwKo185qKidUMLZuQV0oSA4meds
PPWND6WJ0nCWVJEUJiUtWDR4jQp9Ye3EnTOQgmNHFH/28eiF1KEpRsQ1tfFp69Rs
Pyy6BWl1BkbmWdRtBwkcmNOwU6LSJc8arfewoMiDOfYcp2MPeD2R+zo9jbqWRB7V
CmS3SJ/nRPnB4g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:27 2026 by rpki-client