Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: UuLTPETmbziWZ4mB0uvvRPb1bwlDr2HwtnAxOc8WGFo=
Subject key identifier: 14:53:D0:01:25:C2:28:7C:C9:F6:C2:47:18:0E:6E:8A:32:A5:9F:4E
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019D9AABCC863F9E189C2F3492261A61D0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0FB7
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa (hash: lOFGAsrm5iHQNlLgX36AU9zrlOWulEYrqP1lI6ectMM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: w6MBk3uZyuJsjBmNuRRxvTyvSMJLdOBoaSf49KRsjdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cc:86:3f:9e:18:9c:2f:34:92:26:1a:61:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=1453d00125c2287cc9f6c247180e6e8a32a59f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:c7:26:6d:be:00:99:f9:ca:50:22:9e:ea:
db:8d:41:dd:e0:6a:0c:9e:31:71:be:71:c4:c3:ef:
3b:5d:b7:d2:f5:42:79:31:29:b9:bd:be:b1:2a:72:
64:7f:fd:bf:08:07:99:ff:d4:c9:c8:7d:42:37:fa:
9b:96:ce:db:bc:e6:08:ad:03:ce:09:f2:8a:cc:29:
b3:24:e4:c1:82:e6:4e:66:5d:dd:1a:ef:39:22:cf:
a9:2d:8a:19:68:20:e8:75:ea:de:b7:28:db:b2:fe:
fd:b4:d7:c3:fd:0f:27:1e:ef:c0:98:f3:40:8d:52:
b4:7e:e7:e5:32:1e:5b:dd:79:53:f3:e5:0f:5a:6b:
f2:dd:0f:c2:f5:4f:fe:ae:0f:4a:e0:f9:6e:92:d9:
52:85:9f:17:dd:8e:3b:40:c3:b8:10:59:d8:71:c8:
d7:7a:5c:00:8a:83:a7:5b:25:ed:3c:dd:6a:66:99:
21:f6:01:21:50:b5:f1:0f:e0:9d:f2:08:9b:de:3f:
51:e6:7d:f2:c6:9b:28:03:3e:7a:e5:8b:81:d5:ff:
8d:0a:5e:21:fd:38:80:ae:49:04:9e:1b:20:9b:94:
e6:fb:90:f5:d0:11:e0:fc:02:bf:35:3b:4e:b4:2d:
76:51:a3:13:c1:9d:f5:2d:5d:09:7f:fd:b0:99:90:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:D0:01:25:C2:28:7C:C9:F6:C2:47:18:0E:6E:8A:32:A5:9F:4E
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:10:15:d3:0c:8c:52:68:da:37:f2:01:25:1a:94:8e:a8:47:
48:f1:06:f5:19:6e:cc:65:0b:5c:81:fa:ba:b4:ed:43:60:aa:
d2:38:25:05:1a:45:e6:b3:39:90:d7:73:a7:8d:d5:d8:aa:20:
50:46:17:15:ab:94:30:7a:7f:d0:49:9e:dc:cc:a4:1e:fe:c9:
44:b2:e2:d3:ff:34:e5:98:2b:ae:01:35:90:5d:c4:da:1e:36:
1d:96:77:bd:c6:79:e2:d5:e2:4a:cc:21:8e:ad:02:45:4b:62:
df:d2:d7:3f:02:b7:ce:82:8a:b2:d4:43:33:ab:1b:eb:e2:b1:
b4:e3:53:2b:f7:74:48:cd:eb:d8:5b:a6:6d:97:f4:74:7a:68:
af:90:35:7f:a8:a7:42:11:ae:7d:16:8e:7d:9e:4d:2f:e8:1b:
91:a2:78:ff:e9:3e:94:1f:70:9a:58:40:0e:c0:3f:03:17:1c:
91:13:ef:48:85:70:fb:5b:b1:c7:d8:33:ec:b4:3a:9b:a2:23:
b5:7c:64:e8:24:86:49:9c:14:d2:68:f6:b9:28:63:8d:cf:80:
1d:3e:a1:2d:7b:2f:37:a2:94:3c:bf:f5:c7:18:aa:cc:a5:ca:
ba:35:e6:1d:ed:49:3b:2e:c7:6a:19:3b:1d:4b:93:12:71:fd:
8a:22:75:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8yGP54YnC80kiYaYdD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0
MzRkYTkwHhcNMjYwNDE3MDkwMDQzWhcNMjYwNDE4MDkwMDQzWjAzMTEwLwYDVQQD
EygxNDUzZDAwMTI1YzIyODdjYzlmNmMyNDcxODBlNmU4YTMyYTU5ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xLHJm2+AJn5ylAinurbjUHd4GoM
njFxvnHEw+87XbfS9UJ5MSm5vb6xKnJkf/2/CAeZ/9TJyH1CN/qbls7bvOYIrQPO
CfKKzCmzJOTBguZOZl3dGu85Is+pLYoZaCDoderetyjbsv79tNfD/Q8nHu/AmPNA
jVK0fuflMh5b3XlT8+UPWmvy3Q/C9U/+rg9K4PluktlShZ8X3Y47QMO4EFnYccjX
elwAioOnWyXtPN1qZpkh9gEhULXxD+Cd8gib3j9R5n3yxpsoAz565YuB1f+NCl4h
/TiArkkEnhsgm5Tm+5D10BHg/AK/NTtOtC12UaMTwZ31LV0Jf/2wmZDcNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRT0AElwih8yfbCRxgObooypZ9OMB8GA1UdIwQY
MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt
NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm
LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRAV0wyM
UmjaN/IBJRqUjqhHSPEG9RluzGULXIH6urTtQ2Cq0jglBRpF5rM5kNdzp43V2Kog
UEYXFauUMHp/0Eme3MykHv7JRLLi0/805ZgrrgE1kF3E2h42HZZ3vcZ54tXiSswh
jq0CRUti39LXPwK3zoKKstRDM6sb6+KxtONTK/d0SM3r2FumbZf0dHpor5A1f6in
QhGufRaOfZ5NL+gbkaJ4/+k+lB9wmlhADsA/AxcckRPvSIVw+1uxx9gz7LQ6m6Ij
tXxk6CSGSZwU0mj2uShjjc+AHT6hLXsvN6KUPL/1xxiqzKXKujXmHe1JOy7Hahk7
HUuTEnH9iiJ1/w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:45 2026 by rpki-client