Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: tVuhVk2L+4Z0wvZXRshMZ+eBw5XxgXTixMP6vKRgoAg=
Subject key identifier: DA:D1:32:BD:F7:4B:9C:CF:97:00:0F:73:9F:25:C1:4A:F2:BC:23:55
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 019DA45427F3162AD5F0D5557F9156AC1980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 12C3
Signing time: Sun 19 Apr 2026 06:01:11 +0000
Manifest this update: Sun 19 Apr 2026 06:01:11 +0000
Manifest next update: Mon 20 Apr 2026 06:01:11 +0000
Files and hashes: 1: MkHKmr1CCJc2BcOqw-KghmADjCc.roa (hash: mZUESDCQ7pThBi0ruZGxU2DBV/MKZ2Q9xt3I5e6sTr0=)
2: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: gpeXO45LP3S3XGMmcs1joxEg3XQZNYx7a34eJ1qfPu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:27:f3:16:2a:d5:f0:d5:55:7f:91:56:ac:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Apr 19 06:01:11 2026 GMT
Not After : Apr 20 06:01:11 2026 GMT
Subject: CN=dad132bdf74b9ccf97000f739f25c14af2bc2355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:20:82:87:71:ac:1b:9d:95:24:4f:a4:07:
72:ba:4f:90:bd:fd:57:d5:c4:67:12:e7:3a:42:e3:
1f:7a:ef:b8:79:a2:b3:e8:22:51:72:10:6b:9e:0b:
3b:f6:62:cf:8c:25:68:ad:a5:cd:37:ef:db:f2:56:
d1:5c:17:75:a9:4e:82:3a:a8:0e:b6:77:70:d3:5d:
19:0d:25:8c:ab:4e:98:03:a3:79:65:cb:03:c2:37:
50:a5:c8:48:90:b0:a3:27:05:43:b0:90:bc:0f:a3:
fa:ed:99:6a:29:7e:25:71:b3:80:cc:b9:99:a7:f6:
1b:03:6b:6c:c6:28:8f:e9:9b:b0:04:8b:35:4f:66:
d7:c4:a1:8a:fd:bb:79:3b:d9:20:d7:eb:fa:ed:4a:
52:ad:f7:fa:1e:5e:4c:17:51:a4:5e:84:98:ff:39:
7c:2f:16:cb:fc:39:0d:5d:9f:5b:49:58:bd:72:9d:
da:72:a2:7c:48:53:88:bb:6c:a8:14:1c:f0:af:5c:
53:2e:6f:09:b4:04:54:e9:7c:2b:e2:2d:48:83:e5:
99:de:f8:ef:d0:a3:32:cb:87:1d:ed:f4:c0:62:d6:
d8:43:86:dd:c5:81:71:22:92:32:30:79:55:08:6f:
b7:4d:09:4b:0c:b9:81:58:13:3c:42:cd:42:2d:9a:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D1:32:BD:F7:4B:9C:CF:97:00:0F:73:9F:25:C1:4A:F2:BC:23:55
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:02:64:b7:83:63:47:34:8b:c0:08:6d:7c:a8:cd:27:d5:d1:
2e:b0:d9:c9:74:88:7c:3e:b7:df:5b:e9:8f:c9:1a:e6:be:92:
04:aa:d6:27:98:23:45:84:35:6c:ba:dc:d0:44:37:77:a4:91:
14:2f:70:57:75:0b:48:b6:95:c9:54:bd:73:e9:1f:5c:cc:c9:
5d:fa:19:21:de:70:d8:08:33:c7:79:14:ee:dc:fc:f9:05:67:
99:ec:69:47:ca:e4:79:9f:71:7b:4c:87:5a:6c:f7:c7:b9:58:
21:f9:6d:f3:04:09:5e:2f:b9:be:a8:49:f5:4c:ef:6f:98:e6:
6b:af:ab:81:b3:15:5b:4d:0f:21:08:a5:78:95:1c:4b:5d:c5:
f0:5a:ff:d4:c7:14:13:e6:7a:3b:0f:11:71:e3:0f:05:36:53:
c8:7f:ac:bc:b7:cf:34:7f:03:d0:a9:e3:b6:83:77:bb:9e:59:
a6:ec:9a:64:5d:55:c4:29:8b:e2:4d:9d:e4:ec:9d:a8:9b:0b:
bc:08:65:62:8d:60:ad:03:20:17:29:38:e3:71:37:21:0b:7f:
c9:71:d7:11:04:4f:c4:bf:f1:91:f2:e3:70:bf:3b:a6:e7:37:
07:f6:c3:65:98:2a:4e:58:4e:be:bd:c4:10:35:66:b5:6e:a6:
f9:7d:e6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVCfzFirV8NVVf5FWrBmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz
Yjk5MmIwHhcNMjYwNDE5MDYwMTExWhcNMjYwNDIwMDYwMTExWjAzMTEwLwYDVQQD
EyhkYWQxMzJiZGY3NGI5Y2NmOTcwMDBmNzM5ZjI1YzE0YWYyYmMyMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqIggodxrBudlSRPpAdyuk+Qvf1X
1cRnEuc6QuMfeu+4eaKz6CJRchBrngs79mLPjCVoraXNN+/b8lbRXBd1qU6COqgO
tndw010ZDSWMq06YA6N5ZcsDwjdQpchIkLCjJwVDsJC8D6P67ZlqKX4lcbOAzLmZ
p/YbA2tsxiiP6ZuwBIs1T2bXxKGK/bt5O9kg1+v67UpSrff6Hl5MF1GkXoSY/zl8
LxbL/DkNXZ9bSVi9cp3acqJ8SFOIu2yoFBzwr1xTLm8JtARU6Xwr4i1Ig+WZ3vjv
0KMyy4cd7fTAYtbYQ4bdxYFxIpIyMHlVCG+3TQlLDLmBWBM8Qs1CLZpEdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrRMr33S5zPlwAPc58lwUryvCNVMB8GA1UdIwQY
MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt
NWUzMGI4NmZkMWFiLzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi
LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwJkt4Nj
RzSLwAhtfKjNJ9XRLrDZyXSIfD6331vpj8ka5r6SBKrWJ5gjRYQ1bLrc0EQ3d6SR
FC9wV3ULSLaVyVS9c+kfXMzJXfoZId5w2Agzx3kU7tz8+QVnmexpR8rkeZ9xe0yH
Wmz3x7lYIflt8wQJXi+5vqhJ9Uzvb5jma6+rgbMVW00PIQileJUcS13F8Fr/1McU
E+Z6Ow8RceMPBTZTyH+svLfPNH8D0KnjtoN3u55ZpuyaZF1VxCmL4k2d5OydqJsL
vAhlYo1grQMgFyk443E3IQt/yXHXEQRPxL/xkfLjcL87puc3B/bDZZgqTlhOvr3E
EDVmtW6m+X3mrw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:06 2026 by rpki-client