Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: D2+gan5FIDsTtjnkuhBJu6XX1S+hizr+LZQy67ZFZ4k=
Subject key identifier: 96:58:E8:15:20:18:91:5A:2A:EE:3C:64:DB:73:34:27:D4:55:21:F5
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019D9773C7548DD1014410B24DC17BAFC2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 18CD
Signing time: Thu 16 Apr 2026 18:00:40 +0000
Manifest this update: Thu 16 Apr 2026 18:00:40 +0000
Manifest next update: Fri 17 Apr 2026 18:00:40 +0000
Files and hashes: 1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: hydK7YJRdJQjh5quQ8c6b7lB4WJw3W7qZIOeuSdKw/I=)
4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=)
7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=)
8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:c7:54:8d:d1:01:44:10:b2:4d:c1:7b:af:c2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Apr 16 18:00:40 2026 GMT
Not After : Apr 17 18:00:40 2026 GMT
Subject: CN=9658e8152018915a2aee3c64db733427d45521f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:2d:65:3a:79:4a:58:f7:18:44:51:69:d8:
61:81:86:e5:8c:bf:4b:ae:81:68:56:8e:5d:e2:0d:
29:11:6b:35:dd:60:84:16:d7:1f:82:af:22:5d:98:
83:90:15:9e:9b:2e:8c:c3:cb:3a:e5:51:98:91:e5:
e9:5d:71:20:44:ba:b2:1a:ce:a3:2f:70:55:19:ce:
02:6f:05:59:a2:58:ab:0a:c1:4e:4b:59:8f:5f:9b:
39:05:b2:6a:4c:ca:99:89:7e:e3:87:fb:c5:3b:06:
5f:e1:4a:77:17:69:26:e0:4f:39:9e:c9:20:b6:e5:
0f:9f:1a:07:1d:71:dd:60:65:9c:b5:11:33:37:de:
5c:ea:1d:cb:06:b5:00:27:5c:9d:68:84:3b:b8:17:
99:04:19:63:e7:89:99:09:cb:20:02:32:75:26:6a:
36:9d:4b:36:d3:50:ce:be:f1:91:f9:95:4e:9b:60:
61:5d:b3:b7:cb:0e:8d:72:11:50:3f:af:df:b3:18:
f6:53:ad:c8:2e:a5:9b:28:ac:7b:59:75:66:64:d7:
88:9c:5d:84:b3:68:f4:f3:19:90:d3:39:b6:6d:7b:
40:4b:29:67:83:03:75:09:d5:e9:a3:a2:5d:ef:00:
16:ec:75:87:66:7c:19:06:a0:62:df:c0:9e:55:3e:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:58:E8:15:20:18:91:5A:2A:EE:3C:64:DB:73:34:27:D4:55:21:F5
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:80:87:21:a9:4f:d5:0a:52:51:cd:36:f2:92:3f:14:a4:b0:
3c:ad:1d:d6:71:00:c4:39:49:a6:3c:b0:b9:cf:d5:08:5d:17:
47:3b:89:fd:49:a6:6b:30:63:af:4b:e6:31:aa:c6:52:8e:03:
06:cf:17:be:23:a9:56:b0:09:79:63:9d:87:e1:27:dd:07:29:
7b:cf:88:68:7d:fa:96:13:32:e2:fd:fb:17:52:55:22:2d:a2:
c7:85:0d:93:fc:03:38:35:35:5a:1b:57:35:de:db:11:a5:ec:
9a:f2:7e:68:3f:f4:a9:56:6d:02:75:ad:48:37:74:0b:e9:a5:
cf:4d:5e:c5:f8:e0:a1:53:ef:bd:1a:26:76:66:c0:fe:bc:06:
c5:4f:94:da:f6:00:b6:60:9d:e6:6a:95:d0:7b:e2:c5:ec:17:
5b:35:66:55:21:b2:ee:ed:57:ee:a2:65:44:34:41:15:96:c3:
c0:13:fc:30:4a:1d:d2:ed:31:ff:38:f3:e1:f1:a6:35:e2:48:
71:b2:4b:29:b3:7b:f3:0d:fc:8f:a7:62:87:15:8d:5b:34:af:
a1:d3:68:a8:83:f4:67:e9:17:a4:b6:21:54:05:ff:4f:65:4d:
d9:03:29:6e:6a:43:30:6c:c2:10:0c:69:e0:39:f3:b2:5f:e2:
88:c3:81:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xc8dUjdEBRBCyTcF7r8KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjYwNDE2MTgwMDQwWhcNMjYwNDE3MTgwMDQwWjAzMTEwLwYDVQQD
Eyg5NjU4ZTgxNTIwMTg5MTVhMmFlZTNjNjRkYjczMzQyN2Q0NTUyMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKAtZTp5Slj3GERRadhhgYbljL9L
roFoVo5d4g0pEWs13WCEFtcfgq8iXZiDkBWemy6Mw8s65VGYkeXpXXEgRLqyGs6j
L3BVGc4CbwVZolirCsFOS1mPX5s5BbJqTMqZiX7jh/vFOwZf4Up3F2km4E85nskg
tuUPnxoHHXHdYGWctREzN95c6h3LBrUAJ1ydaIQ7uBeZBBlj54mZCcsgAjJ1Jmo2
nUs201DOvvGR+ZVOm2BhXbO3yw6NchFQP6/fsxj2U63ILqWbKKx7WXVmZNeInF2E
s2j08xmQ0zm2bXtASylngwN1CdXpo6Jd7wAW7HWHZnwZBqBi38CeVT6VAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZY6BUgGJFaKu48ZNtzNCfUVSH1MB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYCHIalP
1QpSUc028pI/FKSwPK0d1nEAxDlJpjywuc/VCF0XRzuJ/UmmazBjr0vmMarGUo4D
Bs8XviOpVrAJeWOdh+En3Qcpe8+IaH36lhMy4v37F1JVIi2ix4UNk/wDODU1WhtX
Nd7bEaXsmvJ+aD/0qVZtAnWtSDd0C+mlz01exfjgoVPvvRomdmbA/rwGxU+U2vYA
tmCd5mqV0HvixewXWzVmVSGy7u1X7qJlRDRBFZbDwBP8MEod0u0x/zjz4fGmNeJI
cbJLKbN78w38j6dihxWNWzSvodNoqIP0Z+kXpLYhVAX/T2VN2QMpbmpDMGzCEAxp
4Dnzsl/iiMOBLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:29 2026 by rpki-client