Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier: 9yTiHnuKELP4JGY9wlRT0yD8D4+/Iww1fmnXLjHsecs=
Subject key identifier: 49:75:59:03:A2:4A:EF:07:7B:FE:02:41:6E:F7:4B:82:83:7D:11:7D
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial: 019D9B87A697ABC2C6C4FD583366B58E8B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number: 1038
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: ICRn9ChBU97eULnM9BOvPAb4b7QnPC1LSbirD8qlSUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a6:97:ab:c2:c6:c4:fd:58:33:66:b5:8e:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=49755903a24aef077bfe02416ef74b82837d117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:55:ff:4b:40:88:d3:b3:56:de:d8:1e:5d:
b6:d8:e0:9b:79:72:4a:66:5c:dc:f4:fa:ce:d3:37:
cf:58:51:0e:3e:bd:ba:a1:02:60:94:51:51:72:17:
a3:52:a7:44:74:de:49:09:06:a2:7b:bd:e9:8b:8e:
ed:49:98:9e:ee:dd:54:0e:fa:db:da:81:73:7d:89:
c7:28:5f:81:ff:8f:a9:27:5d:3f:fe:83:bd:c8:a4:
22:b7:df:19:b1:5a:f6:c1:35:ff:b5:e3:57:c9:03:
57:f1:d5:84:e4:56:00:d8:76:b4:89:1d:b2:47:73:
93:b7:6d:dd:4a:43:cd:1a:f6:b5:40:df:27:95:fa:
4c:8b:f2:07:30:9d:fd:48:32:b2:f7:6f:f0:08:80:
20:73:5e:0e:8d:64:3e:c7:1d:27:5f:e5:58:46:80:
ad:6b:a8:33:58:e8:f2:4b:32:90:d0:26:c0:86:10:
c7:5d:2e:29:e1:4c:ca:b7:17:6b:cb:aa:e7:b7:27:
05:8c:1b:cf:27:cb:78:5b:a3:96:ae:b2:83:cd:02:
b9:6b:00:8a:25:65:96:02:00:f4:b5:4e:bb:f4:ec:
86:4c:59:53:e1:11:89:f4:8b:75:0d:5b:cd:3f:fe:
91:db:49:3e:d5:79:67:d4:3b:c1:dd:b4:e9:e2:ff:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:59:03:A2:4A:EF:07:7B:FE:02:41:6E:F7:4B:82:83:7D:11:7D
X509v3 Authority Key Identifier:
keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:fe:49:d1:9f:79:42:48:5c:a6:8d:3e:79:bc:42:53:d8:
4d:06:74:41:ab:ce:6d:03:df:77:78:25:38:e2:7d:e0:67:aa:
be:91:3b:75:fc:a7:f0:53:96:1c:4a:71:c6:81:a4:b5:f4:ce:
d6:9f:dc:c7:b8:c6:58:3d:3b:28:e9:e0:a5:41:af:ca:43:59:
f2:32:d2:7e:b1:44:48:44:52:4c:bb:6e:2d:ef:20:a4:c7:b0:
97:e7:41:3f:f9:db:1f:22:00:b9:a2:d3:17:04:9f:0b:b0:d6:
07:03:3a:91:8b:51:5a:a9:91:e7:e1:02:2d:f4:28:e6:91:05:
df:22:ec:5d:5c:a8:e5:79:5f:8d:3d:85:db:f0:33:89:55:01:
cf:d0:bd:be:13:43:49:9b:0c:ff:79:42:b4:da:e3:85:7e:ca:
3c:4e:dd:8d:fb:22:60:71:a9:de:69:35:73:aa:37:68:1b:f7:
e9:94:15:5c:b8:52:08:28:64:6f:69:62:49:1a:36:2a:96:75:
0b:70:01:43:7b:33:48:dd:e9:c2:bf:f7:75:9f:cc:e9:21:3e:
11:5a:e6:03:dc:fe:4d:e8:c9:fc:62:4d:cb:39:9c:98:c5:d3:
83:0b:8b:0e:84:fc:bd:94:58:bd:f5:c9:1c:0e:33:40:52:8e:
eb:e6:4f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh6aXq8LGxP1YM2a1jos5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYWExZDQ0NjI5MzgzY2FkZmM3NTE3ZGVmN2RlMjkyOTVh
ZTM5YjQwHhcNMjYwNDE3MTMwMDUxWhcNMjYwNDE4MTMwMDUxWjAzMTEwLwYDVQQD
Eyg0OTc1NTkwM2EyNGFlZjA3N2JmZTAyNDE2ZWY3NGI4MjgzN2QxMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIJV/0tAiNOzVt7YHl222OCbeXJK
Zlzc9PrO0zfPWFEOPr26oQJglFFRchejUqdEdN5JCQaie73pi47tSZie7t1UDvrb
2oFzfYnHKF+B/4+pJ10//oO9yKQit98ZsVr2wTX/teNXyQNX8dWE5FYA2Ha0iR2y
R3OTt23dSkPNGva1QN8nlfpMi/IHMJ39SDKy92/wCIAgc14OjWQ+xx0nX+VYRoCt
a6gzWOjySzKQ0CbAhhDHXS4p4UzKtxdry6rntycFjBvPJ8t4W6OWrrKDzQK5awCK
JWWWAgD0tU679OyGTFlT4RGJ9It1DVvNP/6R20k+1Xln1DvB3bTp4v9VewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl1WQOiSu8He/4CQW73S4KDfRF9MB8GA1UdIwQY
MBaAFKKqHURik4PK38dRfe994pKVrjm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMTc4MjQtZjhmNS00Yjc4LTliNWUt
NzQ5MTc1YjE3OGYxLzEvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zMTc4MjQtZjhmNS00Yjc4LTliNWUtNzQ5MTc1YjE3OGYx
LzEvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJv+SdGf
eUJIXKaNPnm8QlPYTQZ0QavObQPfd3glOOJ94GeqvpE7dfyn8FOWHEpxxoGktfTO
1p/cx7jGWD07KOngpUGvykNZ8jLSfrFESERSTLtuLe8gpMewl+dBP/nbHyIAuaLT
FwSfC7DWBwM6kYtRWqmR5+ECLfQo5pEF3yLsXVyo5XlfjT2F2/AziVUBz9C9vhND
SZsM/3lCtNrjhX7KPE7djfsiYHGp3mk1c6o3aBv36ZQVXLhSCChkb2liSRo2KpZ1
C3ABQ3szSN3pwr/3dZ/M6SE+EVrmA9z+TejJ/GJNyzmcmMXTgwuLDoT8vZRYvfXJ
HA4zQFKO6+ZP0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:34:13 2026 by rpki-client