Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: mIfTc7kZfL1bZ2dUGX8s0NRN86ER9gUeG+Oqkf06Bh4=
Subject key identifier: A7:F6:20:EA:D4:F8:91:A7:99:29:15:D6:42:26:01:B2:6C:4C:54:85
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 019D98869F37C8B55072E2668246CF4FC571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 1819
Signing time: Thu 16 Apr 2026 23:00:52 +0000
Manifest this update: Thu 16 Apr 2026 23:00:52 +0000
Manifest next update: Fri 17 Apr 2026 23:00:52 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: 94D0Qv0fGKW+pF7RIFmwsBjnTJMKceY/vQqXWWqGpRQ=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:9f:37:c8:b5:50:72:e2:66:82:46:cf:4f:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Apr 16 23:00:52 2026 GMT
Not After : Apr 17 23:00:52 2026 GMT
Subject: CN=a7f620ead4f891a7992915d6422601b26c4c5485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:62:71:b7:73:3b:03:85:85:d0:11:68:01:
0d:71:fb:3d:cf:6d:94:ab:e3:fe:33:cf:12:ff:c4:
18:f5:3d:80:88:87:51:3b:f0:66:56:e1:bc:0a:5b:
15:7a:70:76:0a:07:08:d1:f4:ac:09:8d:99:66:e6:
11:cd:85:50:04:61:e6:1c:98:ed:c2:5b:f5:13:6b:
76:9e:0b:80:f2:bc:6b:68:00:2a:14:fe:cb:4c:cf:
93:b8:32:6f:5f:ac:05:d2:7e:83:31:f9:4a:14:4c:
55:5b:cb:ff:42:cf:55:ef:41:5f:c6:d0:d9:fe:24:
c3:47:29:2c:ad:bd:31:e8:89:d5:1b:4d:6e:dd:4e:
e2:05:cf:e7:ca:88:93:1f:80:ca:62:ac:56:3b:fd:
aa:93:50:50:7f:b3:f6:90:86:03:73:63:07:74:c3:
c4:7f:9a:59:d5:8f:3f:90:ef:82:22:2a:ea:4d:ad:
a9:02:a0:7b:f0:af:33:58:1c:cb:44:68:24:17:80:
7a:f8:ef:12:a7:00:a3:3a:5e:50:77:f2:3f:59:dd:
f4:79:f0:75:10:d6:c4:a9:fe:79:69:51:29:79:14:
e8:ca:e6:bd:e2:e6:e1:f9:65:0c:e8:2f:d3:e9:ee:
23:84:a4:ce:82:97:6f:7b:b5:c9:1a:ca:dc:2e:90:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:20:EA:D4:F8:91:A7:99:29:15:D6:42:26:01:B2:6C:4C:54:85
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:7d:b3:47:53:c0:77:ee:70:1f:5d:60:29:fa:66:5c:93:
58:7e:0e:88:29:c1:53:09:d4:5f:00:3b:2e:e0:3e:c0:83:c1:
ef:69:12:ec:94:8d:59:47:1f:2f:7d:33:f0:6f:50:5c:e3:2e:
85:dc:f0:83:a7:b8:46:6b:a8:a1:56:cf:84:35:ee:15:7b:ad:
2f:3b:a5:ef:b7:7b:a4:15:64:95:24:cd:b8:a2:6e:7b:a2:27:
46:06:2b:45:1d:72:5f:d8:58:1e:9f:a9:4d:32:4d:30:57:99:
e6:bb:27:5a:f2:b2:0b:5e:f6:aa:cb:92:31:71:fb:c2:32:f9:
45:90:4f:f2:f3:bc:e2:46:de:d7:a6:db:dd:44:70:77:64:7a:
45:27:ba:a8:dc:4f:bc:63:ae:ca:e6:09:9b:a7:a0:09:a1:d6:
5f:e2:e1:47:da:c8:44:6c:47:87:e9:3d:27:f9:e1:71:66:f3:
06:eb:02:b1:b6:10:f4:eb:50:6e:be:da:f3:aa:95:48:a9:f6:
de:9d:03:90:cf:86:b7:d1:2b:fd:0f:98:f5:9f:3b:2c:fb:4c:
a8:9f:a0:e9:03:a6:85:5e:06:4c:83:63:8b:96:4a:94:98:94:
3c:49:ea:99:f4:4d:f9:5c:b4:00:c9:df:34:bd:2d:33:b8:ad:
de:94:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:39 2026 by rpki-client