Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: zjtzhK3ELiKJARGvQiYCRWJb+JBFgP/3Hyo5JfPdGCQ=
Subject key identifier: FF:77:69:0B:AA:A1:2A:40:9C:AF:7B:70:19:2A:1A:F4:C2:B4:A5:16
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019D9D3FB41B62F80371A3FA9838B1257263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 21:01:30 +0000
Manifest this update: Fri 17 Apr 2026 21:01:30 +0000
Manifest next update: Sat 18 Apr 2026 21:01:30 +0000
Files and hashes: 1: 1-gPKYrkboHkA5jyn7VCFjqwwrd4.roa (hash: kidu4lOLKqvGV02gy25d0uI1CUme+b+dZBhX/K3RSeg=)
2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: zJSE/DgDRzJutGhRmN3dAUGTcOSp4df7HwJqkEkSJb4=)
3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:b4:1b:62:f8:03:71:a3:fa:98:38:b1:25:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Apr 17 21:01:30 2026 GMT
Not After : Apr 18 21:01:30 2026 GMT
Subject: CN=ff77690baaa12a409caf7b70192a1af4c2b4a516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:a0:ab:21:b0:bf:e9:b3:8b:2c:16:98:18:
c6:6c:ba:e2:5d:29:7f:d6:4e:1d:de:a3:f2:f9:12:
8b:7e:5c:20:3a:dd:d0:13:3e:04:6a:82:4e:c5:65:
16:1c:c4:a2:48:0d:fc:14:18:99:d5:d6:75:ed:ea:
6f:f8:76:a1:7f:45:2a:cf:e9:33:31:48:8c:30:f3:
3d:36:bd:e2:99:62:2e:36:a5:d9:1b:2b:f4:f4:3c:
e5:da:4b:64:8d:0a:d0:95:c0:c9:8f:49:b4:7a:df:
37:ea:d3:63:b9:eb:9c:1e:f5:1a:80:df:aa:be:89:
10:bf:13:d4:06:0e:de:23:bd:74:56:1d:a1:cc:7e:
3c:24:f6:56:2b:dd:6b:a4:7c:1d:2e:27:a7:cb:dd:
71:b7:a4:c6:73:01:18:7f:fb:db:de:8c:b0:85:42:
f0:e2:50:8b:c2:48:10:bf:da:44:0b:24:03:71:fc:
8d:5a:49:78:41:ba:42:5b:ef:18:5f:db:fa:28:1a:
18:37:eb:6b:9a:cd:ac:a7:6d:c1:e9:c9:bb:f3:10:
e4:c2:59:43:4e:00:9e:f2:e2:8d:bf:7b:2e:f8:2b:
dd:a6:50:d8:8b:7e:00:5b:16:b4:e1:dd:06:de:61:
74:54:3a:ff:62:96:17:f3:14:79:3b:63:2c:76:e7:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:77:69:0B:AA:A1:2A:40:9C:AF:7B:70:19:2A:1A:F4:C2:B4:A5:16
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:70:db:3e:f5:76:ff:74:f9:e2:ca:5a:61:6d:1d:83:7b:d4:
d2:c9:9a:b8:42:69:b6:42:ae:71:12:49:a5:4d:48:c1:1f:54:
36:69:01:87:63:ff:3d:46:bc:d7:4e:19:02:25:71:2e:f8:00:
2b:95:6b:5e:cc:45:63:9d:9d:8c:e2:6f:4a:6f:08:b8:4e:8a:
0a:41:cf:61:5d:be:1a:20:50:1c:93:61:fa:ae:70:94:a2:88:
a6:f3:26:27:fc:14:69:c4:d5:16:85:18:f9:93:3d:45:17:32:
c5:a7:41:b9:0e:2a:a9:c6:db:86:77:61:08:c8:bd:1a:6c:da:
02:14:a0:0a:03:de:c4:69:79:7f:83:f7:b9:3a:25:72:75:f2:
00:29:8e:72:b8:f5:c5:51:fb:c7:b1:fb:79:3d:01:cd:ad:c4:
4e:b4:79:a4:b7:5b:2f:71:49:b2:2a:fa:71:aa:4a:b2:8f:b8:
c3:da:40:6a:0a:81:3d:41:cb:8d:6f:d4:0c:dc:d4:b4:f0:f8:
7b:a6:66:61:08:34:5e:50:24:e1:e1:5a:95:55:16:fa:bd:9d:
73:94:04:53:79:21:9b:56:20:74:77:82:40:1a:64:d6:9b:a6:
b8:ac:70:1d:90:c5:bb:ea:71:17:52:0d:c8:40:5f:98:09:57:
13:ab:1c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP7QbYvgDcaP6mDixJXJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5
NGFmNzQwHhcNMjYwNDE3MjEwMTMwWhcNMjYwNDE4MjEwMTMwWjAzMTEwLwYDVQQD
EyhmZjc3NjkwYmFhYTEyYTQwOWNhZjdiNzAxOTJhMWFmNGMyYjRhNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56OgqyGwv+mziywWmBjGbLriXSl/
1k4d3qPy+RKLflwgOt3QEz4EaoJOxWUWHMSiSA38FBiZ1dZ17epv+Hahf0Uqz+kz
MUiMMPM9Nr3imWIuNqXZGyv09Dzl2ktkjQrQlcDJj0m0et836tNjueucHvUagN+q
vokQvxPUBg7eI710Vh2hzH48JPZWK91rpHwdLieny91xt6TGcwEYf/vb3oywhULw
4lCLwkgQv9pECyQDcfyNWkl4QbpCW+8YX9v6KBoYN+trms2sp23B6cm78xDkwllD
TgCe8uKNv3su+CvdplDYi34AWxa04d0G3mF0VDr/YpYX8xR5O2MsduecawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP93aQuqoSpAnK97cBkqGvTCtKUWMB8GA1UdIwQY
MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt
ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3
LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnDbPvV2
/3T54spaYW0dg3vU0smauEJptkKucRJJpU1IwR9UNmkBh2P/PUa8104ZAiVxLvgA
K5VrXsxFY52djOJvSm8IuE6KCkHPYV2+GiBQHJNh+q5wlKKIpvMmJ/wUacTVFoUY
+ZM9RRcyxadBuQ4qqcbbhndhCMi9GmzaAhSgCgPexGl5f4P3uTolcnXyACmOcrj1
xVH7x7H7eT0Bza3ETrR5pLdbL3FJsir6capKso+4w9pAagqBPUHLjW/UDNzUtPD4
e6ZmYQg0XlAk4eFalVUW+r2dc5QEU3khm1YgdHeCQBpk1pumuKxwHZDFu+pxF1IN
yEBfmAlXE6scfA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:50:35 2026 by rpki-client