Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: AnRKV2nQTDa3NAa8iBb+Ytl3X4zxNcO3HE2m0ON1I4o=
Subject key identifier: 6B:FB:D3:DA:3F:83:B2:0E:A7:8B:E9:14:18:93:EE:21:D6:EF:1E:BE
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019D9D07C7FAF5B3E2620297B07EDDA11482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: 09
Signing time: Fri 17 Apr 2026 20:00:25 +0000
Manifest this update: Fri 17 Apr 2026 20:00:25 +0000
Manifest next update: Sat 18 Apr 2026 20:00:25 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: JSXXriIqtJ45x1lsSE7FPIYOuu0aLLDqDrWS/wJmk44=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:c7:fa:f5:b3:e2:62:02:97:b0:7e:dd:a1:14:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Apr 17 20:00:25 2026 GMT
Not After : Apr 18 20:00:25 2026 GMT
Subject: CN=6bfbd3da3f83b20ea78be9141893ee21d6ef1ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:47:6b:4c:c9:5c:57:ea:ee:6a:c2:da:12:
62:08:33:db:3f:62:84:6d:01:e1:66:1f:82:3a:34:
a7:e2:5e:94:39:c4:38:53:5f:dd:d8:e4:b0:ec:23:
0a:a4:7f:18:a6:1b:a2:0f:9d:49:96:c1:00:c6:90:
b2:2c:3c:ba:a2:ca:0b:08:35:55:89:81:d5:a4:1a:
76:84:46:49:a0:b5:16:da:43:d7:58:61:8f:9f:42:
51:e6:91:fa:b4:46:1b:ac:df:86:18:0f:09:1c:b1:
eb:02:96:89:e9:3d:54:9a:d7:03:3c:91:b7:58:3e:
12:52:c5:f6:83:31:cf:1a:17:90:ca:08:c2:74:54:
8d:9b:64:b9:8f:d9:f6:e7:3a:89:77:a4:a1:78:7b:
e3:a9:4d:19:e5:42:f0:32:90:21:f3:52:2f:fd:ac:
02:9f:64:29:63:68:a3:61:cb:e6:a0:ce:63:1f:26:
bc:c9:22:65:6b:b8:d3:70:2e:9e:3d:d8:ec:3c:bf:
cb:7b:c3:ed:11:28:ea:76:84:3b:a4:09:81:5a:be:
54:06:a8:7b:a6:65:f4:f6:66:4d:90:b8:c4:6b:2d:
98:f5:44:19:0a:c5:86:92:1b:cd:18:1b:0f:7b:68:
a4:f7:99:2c:63:f0:dc:d3:16:97:86:ba:31:77:0b:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:D3:DA:3F:83:B2:0E:A7:8B:E9:14:18:93:EE:21:D6:EF:1E:BE
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:84:69:a7:71:7c:1f:8e:2e:65:6f:e0:03:c3:30:21:13:6f:
63:a3:0e:e5:1b:37:74:31:b1:49:8f:01:d9:14:7a:f3:e6:4c:
c4:16:f0:e9:b6:81:00:fa:9e:bd:35:c6:fd:b2:6d:af:7f:98:
1e:5d:77:fe:b8:da:f7:22:8a:b9:ac:e7:3a:c0:2d:74:86:11:
57:0c:23:a6:2e:07:9f:59:c6:b7:44:dd:27:3f:31:ea:8e:f1:
2a:14:72:cf:68:0a:41:e9:e5:78:28:89:63:70:24:d4:d3:38:
98:19:d9:68:d5:99:ee:36:80:ae:92:a6:ce:65:01:d9:ba:37:
fb:b9:b9:37:1f:ef:72:fc:84:15:9a:c4:49:1f:b2:96:e4:66:
ea:57:ba:2b:06:ea:27:c9:6c:ad:4c:56:da:f1:ef:54:40:71:
c0:28:e7:f3:9b:1a:2e:ca:7b:51:bc:fd:74:9a:50:56:b7:04:
7b:2d:d5:b6:7f:81:66:77:50:35:f3:84:59:91:06:25:2a:8c:
07:9c:05:9e:4f:ce:d7:a8:25:54:5b:45:a9:94:6e:8a:a7:a1:
2a:7f:ca:8f:e4:f4:2d:ec:3d:18:13:89:91:5b:30:60:6d:7a:
0f:ae:79:fa:e8:51:e9:ff:41:e8:ce:fb:44:48:98:47:c3:ce:
73:a3:9f:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB8f69bPiYgKXsH7doRSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiODU4NmUyN2U0NTM2OGQzOTEwMWZlMmZjZjUzNGFlZDFj
NDZhNTAwHhcNMjYwNDE3MjAwMDI1WhcNMjYwNDE4MjAwMDI1WjAzMTEwLwYDVQQD
Eyg2YmZiZDNkYTNmODNiMjBlYTc4YmU5MTQxODkzZWUyMWQ2ZWYxZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBHa0zJXFfq7mrC2hJiCDPbP2KE
bQHhZh+COjSn4l6UOcQ4U1/d2OSw7CMKpH8YphuiD51JlsEAxpCyLDy6osoLCDVV
iYHVpBp2hEZJoLUW2kPXWGGPn0JR5pH6tEYbrN+GGA8JHLHrApaJ6T1UmtcDPJG3
WD4SUsX2gzHPGheQygjCdFSNm2S5j9n25zqJd6SheHvjqU0Z5ULwMpAh81Iv/awC
n2QpY2ijYcvmoM5jHya8ySJla7jTcC6ePdjsPL/Le8PtESjqdoQ7pAmBWr5UBqh7
pmX09mZNkLjEay2Y9UQZCsWGkhvNGBsPe2ik95ksY/Dc0xaXhroxdwsNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv709o/g7IOp4vpFBiT7iHW7x6+MB8GA1UdIwQY
MBaAFDuFhuJ+RTaNORAf4vz1NK7RxGpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzRXRzRuNUZObzA1RUJfaV9QVTBydEhFYWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNTUzZmYtZjRlNi00NWM2LWI2NDIt
MjhiNTAzNzkxOWQ4LzEvTzRXRzRuNUZObzA1RUJfaV9QVTBydEhFYWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iNTUzZmYtZjRlNi00NWM2LWI2NDItMjhiNTAzNzkxOWQ4
LzEvTzRXRzRuNUZObzA1RUJfaV9QVTBydEhFYWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4Rpp3F8
H44uZW/gA8MwIRNvY6MO5Rs3dDGxSY8B2RR68+ZMxBbw6baBAPqevTXG/bJtr3+Y
Hl13/rja9yKKuaznOsAtdIYRVwwjpi4Hn1nGt0TdJz8x6o7xKhRyz2gKQenleCiJ
Y3Ak1NM4mBnZaNWZ7jaArpKmzmUB2bo3+7m5Nx/vcvyEFZrESR+yluRm6le6Kwbq
J8lsrUxW2vHvVEBxwCjn85saLsp7Ubz9dJpQVrcEey3Vtn+BZndQNfOEWZEGJSqM
B5wFnk/O16glVFtFqZRuiqehKn/Kj+T0Lew9GBOJkVswYG16D655+uhR6f9B6M77
REiYR8POc6OfKQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:10 2026 by rpki-client