Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: PSBr1rJcr7W9/L7n3U56ARA4PkPuhrJyXVFQrL47tTE=
Subject key identifier: 65:E0:82:50:FA:52:07:AE:3F:B1:A5:5C:18:34:7D:50:39:AC:4E:1D
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 019D99626A41083F37B8F1D58AE6251B7E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 04E7
Signing time: Fri 17 Apr 2026 03:00:56 +0000
Manifest this update: Fri 17 Apr 2026 03:00:56 +0000
Manifest next update: Sat 18 Apr 2026 03:00:56 +0000
Files and hashes: 1: 5LuAukBT-PYtoVc1x_YPxle1wsc.roa (hash: h17Dfweg2VbRUUt3KQP8Gh9v6kUcdiw65gP5QtU0txQ=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: Rbv4xhzHgC1rU4F9sMgDbAjByvUyHFgG+2FcE1UjmpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6a:41:08:3f:37:b8:f1:d5:8a:e6:25:1b:7e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Apr 17 03:00:56 2026 GMT
Not After : Apr 18 03:00:56 2026 GMT
Subject: CN=65e08250fa5207ae3fb1a55c18347d5039ac4e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:c7:51:a2:60:91:da:de:c4:ee:47:1a:7c:
53:0a:95:87:33:2a:9a:43:1c:0f:a7:59:38:5e:5f:
48:9b:0b:2d:49:af:a5:cb:8d:7e:1c:41:60:2f:b1:
da:b8:df:0d:61:11:45:68:cc:c2:a6:a1:ef:32:08:
4a:b1:fa:21:51:33:5a:88:24:5e:74:1a:29:32:a2:
f3:01:1c:6e:b0:74:07:06:0d:97:26:ef:88:01:90:
7d:dc:0b:de:69:9f:9b:99:ad:7e:16:3b:b8:63:d1:
cd:09:86:0c:a0:40:d8:7c:ca:bb:ff:32:f0:d0:91:
64:f1:2c:62:1d:ba:f8:fc:f5:12:4b:b2:b5:b7:7e:
19:3a:48:4a:21:19:e0:2e:2d:5c:86:80:aa:30:9c:
ed:e2:61:f7:a8:26:de:cb:bc:a4:a3:2e:c9:1d:7a:
ce:84:82:b5:d4:75:5e:bf:02:a2:88:6a:78:09:82:
4c:f5:f2:d9:62:ea:04:48:f6:e7:a8:e6:ff:19:00:
eb:33:fe:43:7a:33:ee:cc:27:d1:64:64:93:6b:a6:
5a:ca:49:ef:54:6c:a7:42:41:75:46:6b:21:53:7a:
39:93:7e:ce:c9:15:70:c6:34:ed:e5:ae:60:ad:23:
b8:fc:e5:e9:8d:47:20:3f:65:06:a0:9c:14:17:18:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:82:50:FA:52:07:AE:3F:B1:A5:5C:18:34:7D:50:39:AC:4E:1D
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:10:43:ff:1c:82:80:0f:af:30:f1:93:07:4a:ac:f1:40:1e:
2f:e3:15:31:ef:4f:fc:eb:46:33:ba:c8:bb:7b:ed:81:a8:12:
31:ff:b8:e9:da:c5:c2:7f:bd:54:d4:58:b5:54:eb:4a:c4:ce:
e1:77:37:70:c4:d4:76:79:85:90:1d:32:b2:11:61:f0:2c:15:
79:34:3f:32:45:7b:74:c0:72:e9:05:b1:63:f2:b3:3d:d2:25:
92:fc:ba:9a:a6:38:cc:20:f3:fa:9c:5a:0c:25:10:c8:99:9b:
f2:0c:6d:da:f1:e8:66:60:76:34:b9:f6:f5:31:fe:43:7b:32:
15:70:ca:33:15:8d:c9:9a:d9:dd:7f:c3:e4:bb:c7:e0:85:f3:
bd:df:0e:60:73:a5:cb:28:41:dc:70:c0:37:92:f0:1c:84:57:
ae:3a:ad:72:aa:0c:57:38:9f:f2:eb:09:b6:5a:0e:51:8e:a3:
d0:9e:5e:8a:cd:52:6c:34:65:a5:14:1c:0b:91:8f:3d:b7:17:
61:8f:71:88:8c:3a:08:16:1b:f8:9b:1a:fc:4a:38:12:b5:40:
f4:23:78:51:65:c4:08:1a:cd:5a:1a:8c:c9:11:0f:55:72:9d:
7b:13:16:1a:b2:0f:7b:0a:90:1e:1b:08:8a:05:50:13:a3:f6:
75:e9:21:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYmpBCD83uPHViuYlG35sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk
NzVlYzAwHhcNMjYwNDE3MDMwMDU2WhcNMjYwNDE4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg2NWUwODI1MGZhNTIwN2FlM2ZiMWE1NWMxODM0N2Q1MDM5YWM0ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3jHUaJgkdrexO5HGnxTCpWHMyqa
QxwPp1k4Xl9ImwstSa+ly41+HEFgL7HauN8NYRFFaMzCpqHvMghKsfohUTNaiCRe
dBopMqLzARxusHQHBg2XJu+IAZB93AveaZ+bma1+Fju4Y9HNCYYMoEDYfMq7/zLw
0JFk8SxiHbr4/PUSS7K1t34ZOkhKIRngLi1choCqMJzt4mH3qCbey7ykoy7JHXrO
hIK11HVevwKiiGp4CYJM9fLZYuoESPbnqOb/GQDrM/5DejPuzCfRZGSTa6Zayknv
VGynQkF1RmshU3o5k37OyRVwxjTt5a5grSO4/OXpjUcgP2UGoJwUFxh/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXgglD6UgeuP7GlXBg0fVA5rE4dMB8GA1UdIwQY
MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt
OTcwMDU0NmI1NzExLzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx
LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghBD/xyC
gA+vMPGTB0qs8UAeL+MVMe9P/OtGM7rIu3vtgagSMf+46drFwn+9VNRYtVTrSsTO
4Xc3cMTUdnmFkB0yshFh8CwVeTQ/MkV7dMBy6QWxY/KzPdIlkvy6mqY4zCDz+pxa
DCUQyJmb8gxt2vHoZmB2NLn29TH+Q3syFXDKMxWNyZrZ3X/D5LvH4IXzvd8OYHOl
yyhB3HDAN5LwHIRXrjqtcqoMVzif8usJtloOUY6j0J5eis1SbDRlpRQcC5GPPbcX
YY9xiIw6CBYb+Jsa/Eo4ErVA9CN4UWXECBrNWhqMyREPVXKdexMWGrIPewqQHhsI
igVQE6P2dekhjw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:56 2026 by rpki-client