Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier: 5BjxCcOd5Coz8gp+vr5doQE1kR7zKY84nAwHZj88rkg=
Subject key identifier: EE:34:80:7D:3A:6A:26:41:85:37:88:91:0D:B8:9B:05:B3:9A:D6:E5
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial: 019D9D3F07CE2DFFEE8686291E2D073B59C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number: 0177
Signing time: Fri 17 Apr 2026 21:00:46 +0000
Manifest this update: Fri 17 Apr 2026 21:00:46 +0000
Manifest next update: Sat 18 Apr 2026 21:00:46 +0000
Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: qHyHDsxmuiBr0EgaLnOaPx+6ah6wUq9bVjwds49+QAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:07:ce:2d:ff:ee:86:86:29:1e:2d:07:3b:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
Validity
Not Before: Apr 17 21:00:46 2026 GMT
Not After : Apr 18 21:00:46 2026 GMT
Subject: CN=ee34807d3a6a2641853788910db89b05b39ad6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:af:e3:5f:dd:5f:ff:18:bb:8e:33:59:82:
bc:63:b8:41:dc:20:d2:f8:68:e4:cb:e4:38:5c:95:
30:a4:3c:05:ea:80:39:c1:96:d2:6a:2f:19:0f:d4:
a3:d0:57:4d:6c:7d:ed:42:b8:88:0c:86:6f:bf:90:
49:7c:85:5d:4f:93:d4:bd:9e:94:4b:9d:57:3a:73:
56:c0:a1:05:9d:fa:28:e4:e0:bf:a0:7e:dc:59:91:
a7:63:c4:98:16:be:71:d3:5c:b4:f6:64:07:79:78:
3a:8b:f3:3a:47:b6:2d:79:82:4e:34:9b:12:e6:d8:
2f:b4:d1:3c:04:1c:11:d6:df:8e:0c:3b:38:14:21:
8c:a9:21:68:a4:05:ad:de:a7:83:d0:6e:76:c8:e7:
cf:39:b3:33:3f:3f:6d:d3:c3:89:3b:05:82:51:09:
95:80:55:d2:f5:d6:c2:51:a2:a3:bf:1c:7f:fc:f3:
0e:e0:a2:a3:9a:2c:50:3d:6b:28:81:b1:b8:65:06:
cf:d8:51:05:09:16:e2:ae:f0:da:2c:76:9e:3a:28:
10:a8:d5:ba:21:c4:9e:e3:fc:d9:56:89:89:af:00:
52:57:69:d0:b3:bc:4d:99:73:31:0a:48:35:8b:3f:
0b:cc:32:85:ce:2e:01:9e:bd:83:32:00:0b:9e:56:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:80:7D:3A:6A:26:41:85:37:88:91:0D:B8:9B:05:B3:9A:D6:E5
X509v3 Authority Key Identifier:
keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:32:03:1f:01:31:37:5b:15:3d:01:0a:7e:fa:59:9a:d6:ce:
e5:36:e7:e7:07:c4:65:bc:f1:00:09:1f:0d:5a:14:29:ff:7d:
35:df:52:83:99:8b:ff:2a:31:cb:10:22:82:20:e1:ae:50:01:
7a:92:27:9e:c8:20:73:ec:04:12:13:ca:e3:f8:28:51:44:fd:
3e:59:75:ed:d7:35:51:73:c8:ce:04:50:68:ac:91:9b:27:cd:
66:6f:17:a0:0b:c4:dc:af:5f:66:2e:ed:73:0a:ee:cf:03:28:
62:f8:1e:88:1e:e6:17:db:35:fb:ae:42:45:85:47:aa:28:10:
bd:47:15:66:35:4a:06:f6:26:81:8d:78:85:54:c1:1a:1d:4b:
5d:7a:d5:ff:b4:f3:94:6f:4e:d6:4d:3f:8a:c1:9d:b1:50:30:
1a:da:b3:4d:78:80:f9:94:31:c7:78:11:a0:8f:33:f0:97:6f:
ac:8c:b2:60:02:c6:54:6e:23:8d:f2:6b:28:18:94:38:6f:90:
86:7f:61:7c:0f:4b:ae:46:f9:ac:a9:c6:2b:f8:16:2b:2c:0e:
5d:91:e0:3f:63:3b:3c:c8:55:7d:22:f2:e7:3b:a1:f7:b8:20:
56:ce:56:90:7e:67:bb:28:e7:4e:57:b4:e4:f1:ca:5c:45:3d:
ea:e8:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:00 2026 by rpki-client