Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier: uxWA7mhUisiB8WfqfvPyoEFC4UBYIRHyUymDtPZawvU=
Subject key identifier: 83:5E:CF:1E:EA:EB:99:6A:D8:A7:1B:B9:B9:60:CC:55:F2:95:A6:3D
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial: 019D9B87D64BD7649104F061B7A7C8E11008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number: 15D0
Signing time: Fri 17 Apr 2026 13:01:03 +0000
Manifest this update: Fri 17 Apr 2026 13:01:03 +0000
Manifest next update: Sat 18 Apr 2026 13:01:03 +0000
Files and hashes: 1: Ne74LLa0nfzZuK4THnD6BGKIM7Q.roa (hash: jISOsp+VyfAbEpR6bMtcVFG4B/gUZHPkFBIPoaBcPQs=)
2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: 8A3qF87+Pr+8ys0ZhsLv4SnNNn5I5Yp0qOW2+roibW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d6:4b:d7:64:91:04:f0:61:b7:a7:c8:e1:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Validity
Not Before: Apr 17 13:01:03 2026 GMT
Not After : Apr 18 13:01:03 2026 GMT
Subject: CN=835ecf1eeaeb996ad8a71bb9b960cc55f295a63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:d1:a3:40:bc:c0:42:bb:28:40:b0:c5:75:
37:46:79:a7:f0:ad:8f:7d:2d:64:27:b5:86:e6:f3:
b4:9b:14:1b:7d:b2:e8:2d:ae:cd:db:46:67:df:1c:
eb:14:89:ad:6f:50:57:ec:d3:25:69:4a:a5:28:e6:
d1:b3:b2:84:42:80:8a:d7:78:c6:14:ca:3e:6b:55:
08:f1:8a:41:9d:0e:20:71:36:23:3d:44:09:ec:6c:
9c:31:9a:b4:fd:24:34:59:44:29:68:cd:eb:6b:a4:
af:8e:bd:f3:03:fe:75:b7:63:91:a7:7f:79:68:f2:
9c:a0:68:77:7e:14:e4:85:b9:94:cb:cf:b0:9c:fa:
a8:c7:c8:36:08:02:60:76:d3:6b:b7:c5:7a:66:29:
eb:70:5a:97:ee:2c:5e:65:fa:17:f7:8a:d5:2b:d4:
2f:69:9a:54:1e:9d:59:6a:72:90:50:7f:c7:fd:ea:
85:57:50:d6:b7:c9:9a:db:43:62:b6:1d:12:4c:89:
f6:8a:2e:a0:53:07:a2:53:3c:3b:3a:0c:23:8b:95:
1f:5f:c8:46:ca:e0:ae:ab:a5:53:87:00:22:a2:88:
63:2a:8f:cf:94:77:21:cd:d3:a4:56:cb:ec:02:f0:
d6:90:8d:5d:08:34:a4:86:f6:2c:df:8a:c4:ae:58:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:CF:1E:EA:EB:99:6A:D8:A7:1B:B9:B9:60:CC:55:F2:95:A6:3D
X509v3 Authority Key Identifier:
keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:99:88:ad:ba:71:e6:9a:a6:8c:51:68:74:f3:a9:53:b3:45:
2e:bc:ed:e0:47:9f:34:c9:1b:74:3b:c1:95:92:2c:99:67:cb:
b3:eb:2b:8a:9c:4a:c3:88:d7:6f:ac:03:c4:ea:47:8d:1b:ce:
1c:4e:b9:e8:bf:43:83:f3:6f:b8:64:e3:7c:02:c7:74:2d:64:
fb:cb:42:64:59:dd:e7:33:a3:ee:7d:f6:83:a4:02:3c:14:f8:
f2:d4:2a:8d:5c:d4:49:44:c7:0a:2b:52:e0:3a:d3:9b:1b:52:
08:8d:9b:5e:1d:1a:95:e0:91:9f:16:a6:0d:0a:d5:bd:35:67:
67:8e:7d:06:57:61:7d:5b:0d:19:60:96:c9:42:34:ee:21:4b:
06:18:6e:8f:92:8c:98:3f:9a:dd:6b:d7:2c:28:51:f6:b3:04:
08:c8:2b:de:a8:4a:30:43:59:9f:d0:23:07:67:2b:91:58:86:
0a:48:3e:fb:c6:5b:c9:51:16:ed:dd:4c:83:2d:99:fc:2a:fc:
24:ea:5c:52:ae:23:74:16:ac:ba:45:e7:86:2c:b2:c6:08:a1:
81:fc:4f:2f:80:f0:a9:fa:6a:00:64:a8:db:1d:a6:7b:e3:0a:
34:b6:eb:3b:1d:00:88:84:a4:e2:51:5c:30:05:b4:30:b1:2e:
ee:c2:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:37 2026 by rpki-client