Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: 4KiKzOaZ+/GcMF4pu4rDfUm/46XVwTrEeyL4CNZpdd8=
Subject key identifier: C7:92:C0:70:D3:BC:28:BE:CC:43:F1:53:9B:03:42:83:CC:64:DC:96
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019D9AE302312D8DF549A24506EBFD351638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:01:01 +0000
Manifest this update: Fri 17 Apr 2026 10:01:01 +0000
Manifest next update: Sat 18 Apr 2026 10:01:01 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: nl3nLIDLhA3Ah+gFAbgibHWfLMu7gKOEdhayQouGJr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:02:31:2d:8d:f5:49:a2:45:06:eb:fd:35:16:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Apr 17 10:01:01 2026 GMT
Not After : Apr 18 10:01:01 2026 GMT
Subject: CN=c792c070d3bc28becc43f1539b034283cc64dc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:2c:f8:81:a2:03:09:2a:6e:d3:bd:6e:7b:
ab:d7:21:5d:40:d2:ea:79:30:f7:3d:c6:81:c3:5b:
c8:3a:c8:5f:73:8d:52:ec:cd:52:fa:35:5f:6f:c3:
6d:84:83:b4:f5:ca:43:a3:2f:c2:94:a6:c1:e0:df:
df:bc:49:7b:79:27:3b:cb:92:ab:0f:da:c2:21:88:
fd:e5:17:d8:10:74:bc:a6:12:25:cf:a8:b6:f8:7c:
79:75:3d:cd:80:96:92:b8:3a:f1:dd:04:ab:b1:9c:
8b:8f:ba:48:c4:34:e8:0a:ad:15:a6:72:1e:10:74:
cd:06:a5:a2:f9:14:63:cd:19:60:37:ac:7f:47:ad:
0d:97:f7:9f:a5:2f:ab:8b:ad:68:d6:c6:fd:46:5e:
d7:1f:0e:3c:55:d5:60:23:0c:e7:52:97:99:4a:f2:
76:8d:cd:fb:c4:9b:e2:c8:ab:40:5a:03:4f:6d:48:
2d:aa:80:24:91:81:70:58:18:62:1f:43:30:6e:37:
e3:f2:04:d8:02:b3:1c:f3:ab:e7:52:22:10:54:bf:
61:d8:0e:21:91:ec:c2:5c:fd:7d:02:c4:2d:57:97:
e5:18:46:34:2d:96:f1:34:02:11:2b:4c:69:f5:cf:
9c:7f:02:25:46:96:42:4a:1b:0a:7c:d8:68:e9:b7:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:C0:70:D3:BC:28:BE:CC:43:F1:53:9B:03:42:83:CC:64:DC:96
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b1:e0:65:e8:01:df:e5:e9:7a:39:20:af:46:50:56:78:ea:
c0:d2:04:53:d5:1d:c9:d8:f2:3d:c6:c7:ce:39:29:81:df:21:
d7:2b:57:9c:bf:5f:31:80:55:fb:cf:e3:43:6a:51:9a:96:5e:
9c:22:73:03:c3:ed:bb:92:12:e3:09:24:3d:b2:d1:5c:34:45:
4f:6f:6a:f4:d3:84:84:0d:10:6e:62:c0:c6:be:02:a3:07:e1:
de:e8:ac:7c:5f:f2:9b:f5:00:e6:a8:b3:b9:c5:1a:ab:fe:ac:
5e:7d:b3:a7:b5:9a:0e:63:a0:24:10:d2:b9:b8:11:d6:62:5c:
88:9d:29:5c:77:6c:c0:05:9f:33:97:44:cf:75:8e:99:53:92:
25:fc:15:41:bd:70:71:eb:1d:39:9c:5d:6b:41:aa:14:46:57:
60:d3:d5:9d:5b:09:8f:d6:71:7f:39:67:bc:39:c2:0b:76:d3:
6a:cd:41:5e:10:03:81:25:9f:8a:33:89:13:69:b5:7d:e7:74:
89:bc:0e:2b:76:15:71:f3:39:14:41:23:d2:14:f7:88:5e:51:
b8:0b:98:4e:de:12:c0:98:8b:6d:49:79:e0:72:48:4c:56:16:
b6:d8:d6:31:53:bb:16:df:f1:19:f1:6d:fc:e4:99:1d:fc:ab:
fa:13:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:02 2026 by rpki-client