Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: h14W8HYBvXY16Jl7d4S4N3gGXURgkz8tn6tlzmdpy1g=
Subject key identifier: 20:89:78:4F:AA:E4:2A:6F:E1:B0:BA:D6:FB:FD:E0:D1:CD:61:6A:5F
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019D9AE38B59873897756FCF5F664C77AE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 158E
Signing time: Fri 17 Apr 2026 10:01:36 +0000
Manifest this update: Fri 17 Apr 2026 10:01:36 +0000
Manifest next update: Sat 18 Apr 2026 10:01:36 +0000
Files and hashes: 1: 0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa (hash: r7csimlTjHrK6Lrz57cYuylUp8cy5+rV8BLjohqs/qU=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: AtMTxsVO+TqluGOBH/zZMkazKnhJGbnxzQVxLh4CjrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8b:59:87:38:97:75:6f:cf:5f:66:4c:77:ae:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Apr 17 10:01:36 2026 GMT
Not After : Apr 18 10:01:36 2026 GMT
Subject: CN=2089784faae42a6fe1b0bad6fbfde0d1cd616a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:23:a2:13:5d:c8:52:9e:64:88:c3:bd:34:
e4:c9:ab:bb:40:ce:e8:83:62:32:37:7b:f5:de:8a:
5b:ff:3d:88:c8:75:e6:2a:12:8c:6f:8c:4f:ce:0d:
89:1a:44:cc:31:1b:54:b1:e7:5c:b2:28:5a:e3:15:
3c:97:44:9b:47:cb:dc:6b:2e:55:76:d8:80:df:03:
d1:7d:9c:28:a6:dd:62:f6:39:d1:ae:a4:6f:3d:e7:
d0:79:63:31:48:00:6d:96:90:56:09:9f:12:95:fb:
13:74:48:76:79:b3:84:bb:d5:36:dd:1d:2a:e1:d5:
20:01:86:ab:1c:73:f5:8c:2e:80:4e:d4:4f:c7:3d:
5c:c6:60:9b:fa:47:2a:2a:1b:31:af:38:0f:63:01:
3b:cb:22:cb:8b:b6:52:ec:57:7b:b1:54:2b:6f:0b:
4a:5a:ba:4b:87:0d:79:97:56:ac:4d:61:eb:8f:7c:
3f:34:d0:61:f9:c7:18:65:bc:68:bc:f7:86:72:f8:
8b:72:ff:23:ac:e7:d7:3b:06:30:04:7c:05:6d:ee:
33:3e:1f:c3:57:38:da:67:81:59:7c:be:12:f2:75:
00:1f:19:6e:e4:e0:f4:64:5c:97:c0:f5:8a:cd:8f:
43:9b:d5:df:64:95:51:68:8e:5d:22:a9:5b:5d:6c:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:89:78:4F:AA:E4:2A:6F:E1:B0:BA:D6:FB:FD:E0:D1:CD:61:6A:5F
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e7:68:f2:02:77:94:f4:72:b9:01:8f:8f:22:a2:33:66:4a:
bc:db:47:e3:31:a4:31:da:8d:65:b0:58:07:e0:38:f6:f5:cc:
72:51:cb:77:46:e5:d5:a4:35:82:44:ee:21:37:d3:fe:c3:dc:
04:1b:4f:6e:02:30:fb:32:84:a9:ca:d1:1f:a4:f7:2d:ee:26:
71:d4:4a:ef:c3:31:82:3d:56:ba:56:0b:e2:79:86:93:82:77:
85:cd:9e:2f:1a:c1:b1:2e:7c:06:75:e2:e9:e5:c2:e7:8c:79:
e3:db:5c:a9:b0:a6:34:34:31:2b:1d:b8:dc:ea:ff:94:06:30:
eb:61:fd:5e:33:fd:e2:6e:49:c6:fe:1a:d6:70:c9:a3:98:33:
57:3a:8a:8d:e1:6c:b6:22:89:3e:bc:cc:0f:ec:01:03:0e:8e:
60:bf:2a:ec:1c:f1:59:30:04:a8:7b:e8:3d:35:17:52:6e:33:
8f:a5:0c:89:bd:f1:39:b1:4f:ed:7a:c5:51:83:fc:40:fa:a5:
f5:31:bd:d8:cf:94:2f:6a:79:5e:47:ae:67:61:52:5c:da:26:
57:ed:49:36:58:9b:d0:47:94:52:88:11:2a:ca:c5:78:f6:4b:
72:ea:fd:f3:d0:83:24:9a:9f:74:aa:d8:42:57:5f:9e:48:17:
e0:67:34:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a44tZhziXdW/PX2ZMd64uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjYwNDE3MTAwMTM2WhcNMjYwNDE4MTAwMTM2WjAzMTEwLwYDVQQD
EygyMDg5Nzg0ZmFhZTQyYTZmZTFiMGJhZDZmYmZkZTBkMWNkNjE2YTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01gjohNdyFKeZIjDvTTkyau7QM7o
g2IyN3v13opb/z2IyHXmKhKMb4xPzg2JGkTMMRtUsedcsiha4xU8l0SbR8vcay5V
dtiA3wPRfZwopt1i9jnRrqRvPefQeWMxSABtlpBWCZ8SlfsTdEh2ebOEu9U23R0q
4dUgAYarHHP1jC6ATtRPxz1cxmCb+kcqKhsxrzgPYwE7yyLLi7ZS7Fd7sVQrbwtK
WrpLhw15l1asTWHrj3w/NNBh+ccYZbxovPeGcviLcv8jrOfXOwYwBHwFbe4zPh/D
VzjaZ4FZfL4S8nUAHxlu5OD0ZFyXwPWKzY9Dm9XfZJVRaI5dIqlbXWwGNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCJeE+q5Cpv4bC61vv94NHNYWpfMB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+do8gJ3
lPRyuQGPjyKiM2ZKvNtH4zGkMdqNZbBYB+A49vXMclHLd0bl1aQ1gkTuITfT/sPc
BBtPbgIw+zKEqcrRH6T3Le4mcdRK78Mxgj1WulYL4nmGk4J3hc2eLxrBsS58BnXi
6eXC54x549tcqbCmNDQxKx243Or/lAYw62H9XjP94m5Jxv4a1nDJo5gzVzqKjeFs
tiKJPrzMD+wBAw6OYL8q7BzxWTAEqHvoPTUXUm4zj6UMib3xObFP7XrFUYP8QPql
9TG92M+UL2p5XkeuZ2FSXNomV+1JNlib0EeUUogRKsrFePZLcur989CDJJqfdKrY
QldfnkgX4Gc0Kg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:43 2026 by rpki-client