Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: WnxPco/GCY4FCrQPCqhjOvJG3pmUBQ8/YppPePYBCNk=
Subject key identifier: D1:69:E1:F2:D8:FD:5C:3B:38:B1:83:87:4B:9E:48:96:1C:2A:63:9E
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019D9A3DE4B8BAA38C9CF20B1191B5736F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: 3teoYnA06/v3gkaxGVB8wtWxjzDjjg6v2Z07m4CjYpU=)
2: QqdbypBpxrcLYznZBUaAaDr_z-o.roa (hash: SckJVSoL8gUL5QOdfT/4r5cTNoKe863XSPeR8+BnWmM=)
3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e4:b8:ba:a3:8c:9c:f2:0b:11:91:b5:73:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=d169e1f2d8fd5c3b38b183874b9e48961c2a639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:53:fa:7d:23:a9:3f:9a:06:75:08:c1:76:
9f:73:04:e0:bb:2f:9e:7e:15:ec:e2:70:01:39:0d:
82:88:ca:7d:5d:c4:94:56:d4:93:40:0d:cf:0a:78:
5d:82:87:60:a2:fe:b5:ca:1a:0d:26:44:16:ca:0e:
a5:e2:59:2c:2c:58:a9:b3:4d:07:cc:ca:b0:06:13:
ce:2f:d4:4a:ba:c5:6c:56:af:05:2c:fc:64:92:6b:
b4:8f:72:b7:99:1d:d3:02:57:ac:ff:3d:87:f7:17:
f3:89:f9:42:f1:ce:23:89:8c:49:8a:8f:61:48:ac:
2a:ca:60:4f:98:6f:59:7a:12:8b:e7:ab:11:a0:85:
a6:19:c0:11:85:4c:78:87:81:79:11:a2:48:d5:54:
50:6f:4f:26:0a:17:0b:78:91:38:db:eb:1e:91:3c:
95:35:2a:da:95:95:42:62:d4:75:cd:03:bb:08:58:
aa:4c:81:77:eb:18:04:23:c7:04:3b:bc:c3:53:5d:
70:20:66:d2:76:2b:5a:eb:89:68:15:d2:4b:92:0f:
d7:6a:0f:70:97:22:b0:bf:4a:81:f4:af:06:7b:04:
14:33:85:d7:e4:3e:7a:ea:17:ad:a0:73:e7:97:11:
03:f1:11:d3:6c:b4:2f:43:5b:cf:d7:9b:49:e8:d3:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:E1:F2:D8:FD:5C:3B:38:B1:83:87:4B:9E:48:96:1C:2A:63:9E
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:24:30:73:9f:f5:55:2c:fd:74:cd:0f:01:a4:56:a0:7d:
42:67:f4:2c:3b:c0:5e:83:ec:bc:6a:9b:5f:f9:79:ae:db:22:
86:28:7d:00:b0:31:7f:a7:9d:e7:c5:fa:d7:45:14:be:1f:3d:
47:63:35:4a:09:95:73:a3:20:63:b9:65:38:3d:bd:55:1d:58:
20:46:20:09:2f:a0:7f:89:84:08:8d:b8:d3:78:59:f5:60:ec:
c6:83:46:86:ce:d7:92:a6:d6:a3:f3:b7:3e:80:99:b6:6f:bd:
11:16:7e:c1:0f:e9:d4:6a:7a:3a:dc:7a:b5:67:d3:08:00:b6:
fd:3c:dc:03:c1:c0:1c:13:29:44:06:3f:a2:20:9c:a6:2a:41:
a0:a6:3c:97:c6:ab:5b:62:70:60:3d:33:db:05:e4:51:06:4d:
7f:7b:c0:c3:3f:70:25:c9:3d:d5:ca:f6:1d:f8:47:a2:73:3f:
42:71:5f:25:15:48:71:bc:d4:f7:94:ea:23:f6:a9:ab:92:43:
ba:69:6f:92:63:74:46:a9:08:cb:e5:fc:41:7f:90:1e:42:88:
bc:08:c4:da:28:15:32:c5:ff:6e:91:51:f4:1b:6c:bd:a1:a4:
52:8f:db:31:56:d3:ad:a6:b1:5c:a3:67:97:f4:fc:d8:91:ba:
0f:51:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:05 2026 by rpki-client