Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: Dq/Mj3pBw5JNiV04wYlNR2aIVxScwdUoc7c3qoHOc4k=
Subject key identifier: 49:29:16:77:41:30:42:53:B1:7C:BC:6A:7E:17:C1:86:F5:C9:39:4D
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019D99620A9D9EDD22B0BEC5BE677B206078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 03:00:32 +0000
Manifest this update: Fri 17 Apr 2026 03:00:32 +0000
Manifest next update: Sat 18 Apr 2026 03:00:32 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: rys/pZk6pS4K1R4ZwkiPm7HhXf9PEze+t8Q2sbwsyRY=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0a:9d:9e:dd:22:b0:be:c5:be:67:7b:20:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Apr 17 03:00:32 2026 GMT
Not After : Apr 18 03:00:32 2026 GMT
Subject: CN=4929167741304253b17cbc6a7e17c186f5c9394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:fe:92:07:c5:46:df:60:56:6f:57:51:5a:
7e:e4:3e:bb:72:26:f6:c3:75:26:00:f9:57:b6:34:
84:25:90:32:65:9d:73:9b:dd:68:4c:2d:7a:c6:8c:
a6:9f:9a:e6:18:3e:a0:a3:b1:3d:40:2d:37:62:80:
ab:1c:a9:0c:7f:4c:14:e7:1d:60:ff:cb:0e:40:81:
ba:0c:00:8b:de:f1:7f:8d:c4:1a:bf:bb:5c:ea:d4:
f2:ad:83:c1:61:fb:43:2d:72:9a:7f:1e:53:66:f2:
be:25:e4:3b:98:95:74:0c:e1:58:ce:1e:bb:e8:7a:
24:da:99:65:9a:e3:db:48:02:c1:d1:01:89:9b:ef:
cc:77:19:ab:9b:1c:3c:01:f5:94:f5:3a:01:b4:80:
c8:29:fe:36:74:79:8a:d8:85:75:8d:1f:44:c6:40:
62:0f:57:10:25:87:02:d3:bb:fc:33:bd:f3:de:e7:
d1:84:e5:10:17:93:fd:04:ae:fb:7a:b3:cf:b7:24:
33:1f:5b:fe:58:20:1b:7b:96:22:ab:82:88:c2:d4:
77:68:6a:c4:2e:96:dc:51:77:8e:28:fd:76:52:a8:
27:5a:db:19:2b:fe:41:b7:67:7f:18:a4:75:d1:84:
a8:c9:e3:ed:b2:67:c0:fe:e0:6b:60:d7:af:b4:8d:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:16:77:41:30:42:53:B1:7C:BC:6A:7E:17:C1:86:F5:C9:39:4D
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:81:70:13:12:09:97:9e:08:3a:d0:8b:c1:ca:bc:76:03:f9:
1e:96:bc:5f:32:e7:43:5a:53:6c:5a:18:38:d1:4b:01:04:a6:
70:63:e3:fb:d0:83:a1:ca:02:1b:de:53:50:51:a4:4c:8e:18:
c6:15:9e:d1:6e:55:06:7b:f0:86:98:6d:55:72:a1:25:71:54:
f5:23:62:fa:ae:04:de:4c:8e:ea:a2:5e:07:ac:62:c2:bb:1f:
1d:89:a5:99:d3:29:dd:9e:37:da:b8:ef:d5:f4:2c:49:f4:a1:
30:fb:35:4c:48:2d:95:e9:e6:d1:c7:70:a9:d8:78:08:45:03:
23:69:48:31:5b:7b:3e:39:be:45:94:6a:ed:83:a4:cd:38:a0:
d2:25:12:60:f0:74:03:ef:17:39:06:20:60:80:8d:af:96:00:
35:fb:bb:6b:5e:03:7c:c9:ae:cb:c7:56:a7:79:1c:20:bd:89:
89:31:8e:e2:7a:29:fd:db:4a:da:08:e2:21:cc:e8:be:b9:d5:
3c:a8:49:8c:c8:5d:e5:48:69:38:87:29:e8:80:7b:94:55:74:
f6:2e:fa:62:e2:79:10:1f:f4:db:1e:03:d6:9a:8f:f3:69:04:
05:be:a3:49:da:2b:91:3e:99:e0:33:ad:7b:3b:e3:42:1d:4e:
4b:6a:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:59 2026 by rpki-client