Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: Yrqu1QrCIvAKFkdpRjkniTltVtpTi5NMLirgDm1gM4w=
Subject key identifier: 0D:CE:9F:20:D9:C1:61:3D:7D:5E:65:DA:E0:41:F7:93:FE:AD:D4:EE
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 019DA3E6DB3DB3AEA1E6C8E4648B1E860B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 0A41
Signing time: Sun 19 Apr 2026 04:01:48 +0000
Manifest this update: Sun 19 Apr 2026 04:01:48 +0000
Manifest next update: Mon 20 Apr 2026 04:01:48 +0000
Files and hashes: 1: YQbAqJ7asgFGYO3z_k0v9YgK57g.roa (hash: RmvGtF2+R8JrPIka6fJbEr327La/wJJ+N/n7t1M8mPI=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: AsuA9arGWd/SsL8ygVK0rEgIDV9TU/5mu6iF3UtJLGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:db:3d:b3:ae:a1:e6:c8:e4:64:8b:1e:86:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Apr 19 04:01:48 2026 GMT
Not After : Apr 20 04:01:48 2026 GMT
Subject: CN=0dce9f20d9c1613d7d5e65dae041f793feadd4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:07:7d:a1:d2:23:9a:a3:b1:c0:4c:87:7e:
e4:0d:29:8d:d8:2f:f0:15:4e:b9:bc:0b:11:95:99:
5e:08:65:45:e9:de:dd:e1:55:a7:4d:a9:5f:6b:2c:
c0:5e:39:2d:c9:0a:49:f5:1b:27:ea:6d:8b:22:34:
dd:8a:21:57:2e:55:61:f9:4c:a0:9b:0f:24:25:08:
fa:92:fa:cb:7b:93:1f:29:4a:cb:c5:eb:60:05:ad:
e5:ff:1d:6a:f3:f7:f1:9d:ea:4e:99:aa:66:86:11:
cd:c0:ff:c6:e7:79:eb:d4:31:2e:41:86:40:41:c1:
3d:72:ec:85:5a:66:82:e0:35:c8:7d:9b:e2:e9:82:
86:4c:c9:d6:d9:83:bc:36:17:aa:33:6e:60:ee:34:
26:9c:f3:17:b8:16:8b:1b:15:23:c8:39:33:ee:5f:
ab:87:18:de:49:b4:31:9b:b4:f1:97:4c:d9:cd:14:
30:51:e5:bd:8e:c8:ec:e3:6b:c8:bb:0b:e9:a5:13:
2a:ce:3e:69:a6:d6:bc:3c:7c:0a:48:05:bc:79:48:
ec:83:ed:01:79:48:3c:5f:bc:7e:fa:4a:42:35:a6:
a3:6c:46:ee:99:58:58:68:26:00:47:f2:9f:b3:bc:
5b:0e:e4:ae:aa:41:2d:1e:ec:88:f8:31:75:4d:3f:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:9F:20:D9:C1:61:3D:7D:5E:65:DA:E0:41:F7:93:FE:AD:D4:EE
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:a2:f9:74:7f:65:36:1e:21:8d:98:69:d0:a4:d8:f2:65:
02:38:cf:cc:ce:ba:99:0d:4d:82:94:03:7d:14:c8:0b:73:07:
40:b8:7a:91:2a:a5:74:c0:1a:8f:28:b8:79:f2:03:dd:f8:f2:
14:78:a4:24:48:02:73:47:5d:ec:1c:f7:b3:9e:38:10:f9:b2:
da:09:6f:ed:0d:cb:fd:5b:0f:b1:01:b7:3a:54:03:ac:80:4f:
bf:81:c7:e7:78:ab:a0:99:18:fa:fc:b4:a4:cc:3c:ef:69:fe:
70:3f:95:fe:49:72:79:a4:bc:5a:06:e3:72:00:26:f1:42:82:
9c:a7:82:46:36:e5:62:da:cb:4b:76:21:06:21:c9:bd:c6:39:
54:6b:4c:c0:84:c0:5c:fc:98:96:99:42:0c:bd:82:24:a3:b8:
53:36:52:41:9f:ef:48:ac:55:3b:65:73:86:8e:c2:4e:55:9b:
64:23:86:80:74:aa:a0:8e:03:31:31:1f:66:20:cd:6f:8f:1a:
e4:a9:0f:a4:12:cb:05:72:f6:98:ba:0c:88:a1:e6:d7:33:7c:
29:55:f7:11:2b:c9:2e:60:ae:cf:ec:39:5c:04:94:de:d4:a1:
0e:4d:4c:7d:96:fc:ee:53:8e:57:8f:e8:5c:30:6f:e5:ed:cc:
36:b2:06:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5ts9s66h5sjkZIsehgtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTQ3MDM5ZDlmMDgwYTQyN2Y3NTI1YzVkMDY2ZjZjZjYy
MTM0ZjMwHhcNMjYwNDE5MDQwMTQ4WhcNMjYwNDIwMDQwMTQ4WjAzMTEwLwYDVQQD
EygwZGNlOWYyMGQ5YzE2MTNkN2Q1ZTY1ZGFlMDQxZjc5M2ZlYWRkNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJAHfaHSI5qjscBMh37kDSmN2C/w
FU65vAsRlZleCGVF6d7d4VWnTalfayzAXjktyQpJ9Rsn6m2LIjTdiiFXLlVh+Uyg
mw8kJQj6kvrLe5MfKUrLxetgBa3l/x1q8/fxnepOmapmhhHNwP/G53nr1DEuQYZA
QcE9cuyFWmaC4DXIfZvi6YKGTMnW2YO8NheqM25g7jQmnPMXuBaLGxUjyDkz7l+r
hxjeSbQxm7Txl0zZzRQwUeW9jsjs42vIuwvppRMqzj5ppta8PHwKSAW8eUjsg+0B
eUg8X7x++kpCNaajbEbumVhYaCYAR/Kfs7xbDuSuqkEtHuyI+DF1TT9ecQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3OnyDZwWE9fV5l2uBB95P+rdTuMB8GA1UdIwQY
MBaAFKCUcDnZ8ICkJ/dSXF0Gb2z2ITTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQt
YzhiM2FjMGJlZmNiLzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQtYzhiM2FjMGJlZmNi
LzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghqi+XR/
ZTYeIY2YadCk2PJlAjjPzM66mQ1NgpQDfRTIC3MHQLh6kSqldMAajyi4efID3fjy
FHikJEgCc0dd7Bz3s544EPmy2glv7Q3L/VsPsQG3OlQDrIBPv4HH53iroJkY+vy0
pMw872n+cD+V/klyeaS8WgbjcgAm8UKCnKeCRjblYtrLS3YhBiHJvcY5VGtMwITA
XPyYlplCDL2CJKO4UzZSQZ/vSKxVO2Vzho7CTlWbZCOGgHSqoI4DMTEfZiDNb48a
5KkPpBLLBXL2mLoMiKHm1zN8KVX3ESvJLmCuz+w5XASU3tShDk1MfZb87lOOV4/o
XDBv5e3MNrIGGg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:48 2026 by rpki-client