Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: AhhGiMeRycVP/P9IjwpkkJ3eujqw131w1vDeTmUcxuk=
Subject key identifier: ED:7D:A7:EF:E2:6E:FE:55:1A:B2:68:11:D4:16:A5:E6:7C:54:57:D9
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019D99D0F273F169B34F850263650D8D560B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0F72
Signing time: Fri 17 Apr 2026 05:01:40 +0000
Manifest this update: Fri 17 Apr 2026 05:01:40 +0000
Manifest next update: Sat 18 Apr 2026 05:01:40 +0000
Files and hashes: 1: DtPI8rayiCn6GbGO39gWY47x3Rw.roa (hash: 5zQ8VMa4ZokifMiUt0TgaGFAoggGyd1YDaTZPDx6mJ0=)
2: Gj3q6BUrOlXkSFTxYL-qpFmf_vk.roa (hash: whp8DDz0dPW4+zkA02OHiJY2B4aYPpsEKoqbxk/AXoU=)
3: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: py5b/lWu/pxfasIXOw3nlKGomrKPXkhQUhCOvQBHyDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:f2:73:f1:69:b3:4f:85:02:63:65:0d:8d:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Apr 17 05:01:40 2026 GMT
Not After : Apr 18 05:01:40 2026 GMT
Subject: CN=ed7da7efe26efe551ab26811d416a5e67c5457d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:05:ae:6b:47:01:f0:c5:62:e1:0a:18:f2:
bc:02:ff:96:a3:4d:20:28:7c:bc:f4:59:a9:31:d2:
cf:ab:ca:7e:38:bc:eb:bd:bf:66:18:60:f4:98:cc:
95:4d:71:f9:93:1e:e3:85:24:cf:7a:8b:bc:ab:7f:
08:ca:36:14:13:7c:5b:65:fc:9a:49:90:d0:58:3f:
bf:ba:a3:d5:44:cf:80:1c:81:15:2e:df:b1:5b:df:
d3:e3:c2:88:05:26:c6:bd:f7:83:68:3e:1e:4d:59:
15:6d:36:b7:c6:05:1a:a8:44:76:30:58:82:39:63:
1e:87:8c:ec:f1:92:2e:b9:56:d9:66:c4:e2:06:57:
8a:90:de:f6:0c:82:0f:6f:0b:07:0c:07:42:c0:55:
46:ee:81:98:93:d8:4a:65:76:34:9e:ff:52:6b:6d:
c8:9b:57:de:6e:c6:72:66:f3:92:83:18:80:0e:7f:
04:04:0e:1a:94:bc:cb:d4:04:9b:13:56:e5:56:35:
7c:b9:bb:b6:75:80:cb:26:96:b9:60:7c:54:02:df:
2c:3c:e2:c6:27:9a:7b:2d:0b:95:35:db:98:8f:0c:
54:b5:30:59:43:ac:d1:66:51:20:7c:ab:bd:94:99:
a7:de:4c:fa:d8:35:d4:9d:f3:7d:2e:b5:c8:a0:81:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:A7:EF:E2:6E:FE:55:1A:B2:68:11:D4:16:A5:E6:7C:54:57:D9
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:0b:4a:36:a5:a7:12:f3:7f:12:07:a3:ba:12:2d:46:43:
3f:5a:aa:48:b1:53:0a:ce:71:10:1b:77:13:00:93:b0:14:96:
aa:2f:84:62:67:c9:33:bb:82:a9:8c:0c:a7:96:b4:db:cb:2a:
8a:a5:66:17:cc:4d:de:a6:f4:ea:f8:94:5e:8c:a3:e2:38:af:
e0:18:a8:25:ff:a8:32:7d:31:82:23:90:78:31:44:43:62:d7:
be:3b:4c:79:c4:37:39:05:a4:08:7f:d6:ea:f6:6e:22:6c:7b:
33:b3:02:b9:da:c3:db:6c:b0:53:21:53:0c:11:09:9a:a3:3a:
48:bd:cc:12:3a:d7:04:d4:98:47:92:fc:ef:80:c0:2d:e6:61:
a2:2d:1d:78:2f:8a:49:cc:81:50:27:a0:4d:a8:de:be:53:0b:
22:63:c2:ba:c0:d1:2d:5b:d3:2e:7c:fa:08:41:e9:2f:1d:e3:
3a:15:55:eb:3f:f0:ae:20:4e:35:74:4a:64:99:83:7f:e9:94:
5f:ae:93:d2:a9:88:33:05:58:b7:ed:23:e4:14:a0:a2:a3:35:
12:51:8b:e5:ad:42:20:d7:e0:74:16:a2:e9:d7:00:42:38:ed:
c8:79:b5:a2:b6:99:7b:dc:66:37:a8:37:82:41:66:83:70:1d:
7a:16:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:09 2026 by rpki-client