Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: NtrPHtmOo+9VR6X25zkDqqQI/WSN98vJv+/DRtv+lpo=
Subject key identifier: 55:AE:1D:16:FB:BD:CD:5E:3A:E5:74:05:77:5D:17:CB:C3:F1:47:DD
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 019D984FB0AB3338433E2BDFE11BF7C409CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 0BEC
Signing time: Thu 16 Apr 2026 22:00:52 +0000
Manifest this update: Thu 16 Apr 2026 22:00:52 +0000
Manifest next update: Fri 17 Apr 2026 22:00:52 +0000
Files and hashes: 1: RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa (hash: v10XXGdmUOPRJJS1MaufQ22rkW2n2zH/GaaX/HJobRg=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: GlFsGf8mtbuyI5aOF59KQzQYLmnjpIBeveIhKwFSrxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b0:ab:33:38:43:3e:2b:df:e1:1b:f7:c4:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Apr 16 22:00:52 2026 GMT
Not After : Apr 17 22:00:52 2026 GMT
Subject: CN=55ae1d16fbbdcd5e3ae57405775d17cbc3f147dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:12:c4:e5:89:d0:eb:c7:25:7a:fb:1d:fe:
47:21:04:41:a1:cd:7f:13:39:45:78:4e:26:ee:32:
c0:b9:ae:8a:e1:de:a7:7d:4a:fb:cb:b6:f0:51:14:
58:14:5d:6a:2b:fd:0e:ba:78:97:5a:01:34:4b:3c:
40:a9:c5:b6:7d:f4:71:1b:60:f1:a0:6e:76:22:39:
be:b8:d6:e5:b8:90:9a:3b:8a:e3:f8:26:88:59:98:
74:bc:2a:74:82:40:e9:f3:34:2a:95:52:ab:95:f1:
14:c2:ad:50:11:9f:4c:52:68:64:ae:c2:70:6f:e4:
ee:91:66:10:bc:62:26:41:8e:c8:3a:8e:1c:a4:e5:
f6:37:49:fe:ba:71:e0:0d:6c:08:8d:c3:29:22:35:
1f:49:8a:73:47:8e:54:c9:73:70:7b:d3:b7:97:0d:
96:18:b1:bc:31:e3:28:48:0c:0f:65:c5:d3:2c:52:
74:8a:ba:ba:73:59:9d:1f:38:11:fe:41:5b:9c:33:
99:53:42:74:1c:ac:af:07:1c:e5:79:25:0c:15:25:
4a:4f:98:74:93:bd:ea:06:cf:72:59:1f:c7:79:c1:
3c:70:d8:59:49:21:24:6d:45:c9:f2:96:df:9f:ec:
7a:44:e3:f6:83:79:68:20:73:6c:1a:64:e5:ee:05:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AE:1D:16:FB:BD:CD:5E:3A:E5:74:05:77:5D:17:CB:C3:F1:47:DD
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c7:5f:f0:7d:bf:ee:d7:56:8f:f0:fc:3c:a7:2e:73:43:2b:
57:aa:f8:c3:0e:d2:7a:6f:2d:65:81:56:59:56:e6:bc:27:5b:
da:f4:53:b3:57:f2:3d:4c:d4:28:96:7d:56:22:a4:e7:2b:c1:
4e:61:db:3d:1d:c7:2e:de:0d:f9:ac:42:bd:69:e1:45:88:05:
ef:4c:56:9e:e5:5d:17:cc:7f:cc:1d:c3:2d:e7:9b:65:41:70:
f4:36:fe:f3:fe:44:e3:c6:d4:fe:b6:0d:2c:c4:55:b8:f3:67:
16:0a:2e:15:23:3e:2b:be:01:1d:71:bc:f1:45:f3:f6:0c:de:
4d:b5:48:08:76:84:3e:75:33:70:2e:47:26:f5:af:5b:58:a8:
d7:22:69:3c:64:72:42:52:d9:16:73:d8:68:ef:c8:6d:18:b1:
94:ff:99:ce:98:48:49:ed:88:fd:c9:17:25:3c:29:87:0d:1c:
a9:49:b4:84:7f:35:af:6b:b7:f4:e3:a2:fe:b2:65:69:21:a9:
ba:32:a2:e0:d7:44:24:8e:d8:52:28:a0:ea:f2:f6:07:23:c2:
41:98:a8:ac:97:cf:ea:c5:ca:00:76:1f:14:ea:3c:42:c8:de:
e4:dd:47:53:04:96:32:8e:b6:24:c3:8b:86:d2:8b:6f:61:2b:
35:fd:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:20 2026 by rpki-client