Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: Ouw0LvA6ieGRZu7x20lDKmLhU5e5cfhz1tcXneW6AUM=
Subject key identifier: F4:35:43:AD:54:6F:F1:A0:51:80:65:90:11:DD:07:C9:E5:98:6C:03
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019D9C2C451D1DB923DF7A6E35CCE295F202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:00:40 +0000
Manifest this update: Fri 17 Apr 2026 16:00:40 +0000
Manifest next update: Sat 18 Apr 2026 16:00:40 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: t0qsbaM6ctfh7I6/OPcKYwYczpC0r1IPDMuLIeuleCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:45:1d:1d:b9:23:df:7a:6e:35:cc:e2:95:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Apr 17 16:00:40 2026 GMT
Not After : Apr 18 16:00:40 2026 GMT
Subject: CN=f43543ad546ff1a05180659011dd07c9e5986c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:2b:30:4c:59:10:1a:86:96:cc:bf:d1:ab:
27:2f:f1:06:14:8f:b3:31:1f:a4:d3:88:e2:51:0e:
08:bf:ef:0a:15:24:53:b7:f9:98:dc:79:d4:2c:d6:
09:7b:94:0e:e3:ff:7c:b5:cd:ca:14:b4:7d:c9:19:
22:06:8d:25:e4:45:13:f2:32:41:96:d1:4c:9a:d1:
37:0f:5f:4d:c9:bc:d6:88:68:3a:45:52:e2:63:4c:
25:43:94:58:02:d4:b1:36:a0:46:98:f6:54:84:56:
e6:36:9b:ea:e7:e8:33:65:54:62:39:fa:ab:4b:51:
c6:00:5a:cd:7a:33:14:79:ea:4e:31:a7:51:85:06:
35:e0:1a:85:e7:6f:d0:45:07:8a:6d:39:52:6d:35:
31:c3:8f:4f:a7:b7:3b:11:f1:5b:67:71:86:ed:a1:
19:80:ce:15:d5:34:da:d2:28:d4:0e:f9:83:1a:db:
b8:b9:e5:a8:6e:ce:05:00:9d:ac:33:0a:b2:15:83:
21:af:d5:e0:36:c8:bb:43:e8:e8:e4:b9:31:ca:33:
ff:67:1e:8c:ad:c4:9e:e1:5a:25:85:dc:71:0b:1a:
c1:52:5a:ba:de:ff:fa:d9:3a:d1:4c:4b:4b:aa:22:
ab:13:50:53:bb:71:8b:79:04:79:79:a3:a0:2f:62:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:35:43:AD:54:6F:F1:A0:51:80:65:90:11:DD:07:C9:E5:98:6C:03
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:97:10:a5:6f:01:b2:8c:ec:5e:cd:ff:d0:df:ca:59:1d:
38:3a:16:76:48:ea:d7:fb:0b:c3:5e:82:14:4e:c8:14:15:4b:
05:a7:15:fa:b8:ce:1c:bf:0b:dd:f0:e2:9c:00:bc:a6:5d:08:
80:c0:81:0a:19:57:ea:47:61:fd:69:43:cb:52:b5:f6:2d:b8:
01:d7:a4:1e:f5:ce:06:8e:a7:fd:1f:03:d8:ea:80:60:36:75:
7b:1f:45:73:b1:60:3d:ba:e5:b3:ed:20:e7:00:90:1a:6c:6b:
05:49:ce:ab:a4:88:12:bb:3d:fe:cc:fc:df:6a:8d:4d:f6:71:
f9:e7:c7:7c:c2:f0:d1:6e:d1:94:46:92:95:d6:0f:2c:7a:59:
e6:24:a6:7d:a5:2d:8f:dc:f8:61:b3:dd:b1:c5:35:06:b4:03:
83:fd:fb:b7:44:94:0c:f8:b5:29:53:09:70:74:76:c2:dd:0f:
6c:b4:c8:3d:b3:e9:15:9d:cc:1c:4d:13:26:c9:38:3c:58:e5:
cb:96:07:10:ea:9b:1f:c8:74:f4:f5:21:8d:75:c7:c7:30:86:
b0:3e:1d:4a:0f:4d:4f:f1:6a:04:5b:bb:ea:8e:bd:f7:52:d3:
09:e0:2a:51:b9:96:60:96:ec:74:79:85:de:6d:b6:76:ed:26:
cc:56:61:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLEUdHbkj33puNczilfICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1
YTNlZDUwHhcNMjYwNDE3MTYwMDQwWhcNMjYwNDE4MTYwMDQwWjAzMTEwLwYDVQQD
EyhmNDM1NDNhZDU0NmZmMWEwNTE4MDY1OTAxMWRkMDdjOWU1OTg2YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF0rMExZEBqGlsy/0asnL/EGFI+z
MR+k04jiUQ4Iv+8KFSRTt/mY3HnULNYJe5QO4/98tc3KFLR9yRkiBo0l5EUT8jJB
ltFMmtE3D19NybzWiGg6RVLiY0wlQ5RYAtSxNqBGmPZUhFbmNpvq5+gzZVRiOfqr
S1HGAFrNejMUeepOMadRhQY14BqF52/QRQeKbTlSbTUxw49Pp7c7EfFbZ3GG7aEZ
gM4V1TTa0ijUDvmDGtu4ueWobs4FAJ2sMwqyFYMhr9XgNsi7Q+jo5LkxyjP/Zx6M
rcSe4VolhdxxCxrBUlq63v/62TrRTEtLqiKrE1BTu3GLeQR5eaOgL2IgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ1Q61Ub/GgUYBlkBHdB8nlmGwDMB8GA1UdIwQY
MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt
YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw
LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHiXEKVv
AbKM7F7N/9DfylkdODoWdkjq1/sLw16CFE7IFBVLBacV+rjOHL8L3fDinAC8pl0I
gMCBChlX6kdh/WlDy1K19i24AdekHvXOBo6n/R8D2OqAYDZ1ex9Fc7FgPbrls+0g
5wCQGmxrBUnOq6SIErs9/sz832qNTfZx+efHfMLw0W7RlEaSldYPLHpZ5iSmfaUt
j9z4YbPdscU1BrQDg/37t0SUDPi1KVMJcHR2wt0PbLTIPbPpFZ3MHE0TJsk4PFjl
y5YHEOqbH8h09PUhjXXHxzCGsD4dSg9NT/FqBFu76o6991LTCeAqUbmWYJbsdHmF
3m22du0mzFZhpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:20 2026 by rpki-client