Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: ipCvb0PaqLEAfUX4zo660JfhMBntBmnuNYD9o8mxszE=
Subject key identifier: B6:42:83:EF:1D:E9:25:FE:4C:0C:62:C1:C3:98:52:93:BB:20:36:F7
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019D9962DC321BA074E5811689740CF610BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:25 +0000
Manifest this update: Fri 17 Apr 2026 03:01:25 +0000
Manifest next update: Sat 18 Apr 2026 03:01:25 +0000
Files and hashes: 1: A64W6614jSKOipagUq4esU4_VnM.roa (hash: xLqDioXNu9/ImV10GNbnXjX0lmGB/yXNEGDqLOMVfeA=)
2: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: N0yfTe7pIboPVuatKZ+cz1F4yn+M2JRc85oSKYbFYBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:dc:32:1b:a0:74:e5:81:16:89:74:0c:f6:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Apr 17 03:01:25 2026 GMT
Not After : Apr 18 03:01:25 2026 GMT
Subject: CN=b64283ef1de925fe4c0c62c1c3985293bb2036f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:6d:25:0f:75:9e:45:3a:9f:2e:4e:e4:63:
dc:e9:51:33:d5:78:24:5c:54:00:9c:18:d3:63:fd:
22:8f:f5:b0:64:db:03:23:eb:15:18:4e:34:ef:8a:
df:f0:a0:0b:5c:75:e2:45:55:e5:66:16:0e:4e:ba:
b0:fd:a3:f5:a0:c3:9c:8e:fd:23:b1:1d:67:9b:26:
c7:cf:58:cf:f4:7d:6e:22:89:a2:34:a6:ea:9d:b8:
8f:29:43:89:a0:8d:80:ff:41:5b:9e:1b:f7:8e:5d:
ed:b6:bd:80:0f:d2:af:cf:c2:4a:2a:10:d6:8c:39:
da:b5:e9:9d:97:07:f4:db:cf:35:d4:25:1f:74:86:
00:cb:da:2a:d9:5e:c5:76:dc:fc:d6:b1:95:ee:3b:
d0:2f:a6:9e:5a:58:66:04:42:a5:97:09:c8:dc:bc:
75:a7:1a:10:25:cb:7a:08:c3:5b:5c:18:56:58:44:
da:c0:1d:28:df:33:f8:d9:b6:73:5d:7e:6a:dc:d1:
19:e2:3c:76:cb:69:b5:9b:18:a2:bd:20:3e:62:51:
0c:8d:26:e2:62:8a:b7:8b:4f:56:6c:4c:ca:d8:c2:
f6:b5:18:0d:e5:f2:02:87:31:f7:16:d2:32:9a:7f:
d2:70:76:59:08:63:bb:13:b8:12:e5:e6:17:4d:d4:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:83:EF:1D:E9:25:FE:4C:0C:62:C1:C3:98:52:93:BB:20:36:F7
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fb:97:c0:df:66:87:b4:ca:b7:b0:f7:bb:ea:66:a0:11:94:
21:08:f2:9d:05:64:14:83:9e:cc:a7:8a:a5:c8:c7:c3:bc:b2:
3e:89:12:78:cd:07:ed:cf:cb:e2:e2:dc:cd:bc:f5:b0:0b:c0:
ab:3c:93:33:ec:fa:39:a8:ea:f8:f5:8d:5d:b5:17:0b:22:38:
d6:77:6f:9a:bd:73:74:1f:25:67:ee:e1:42:1b:50:4d:e9:6f:
62:96:5c:54:88:57:50:e8:6e:70:08:9a:7a:89:08:13:04:33:
d4:86:fb:2a:dc:26:c7:2e:01:c2:d5:94:c6:5a:e5:18:64:48:
d1:29:ec:00:f5:98:89:54:f9:fe:2f:c8:07:c0:10:6a:c7:b2:
64:8a:41:f2:63:ff:8b:d3:d4:e0:0b:9b:2c:e4:f1:4c:0c:e2:
33:fc:3f:1f:7c:d1:c4:4a:8f:66:52:a3:3e:c1:b4:06:15:a3:
e8:0c:39:ad:e1:10:c5:e1:39:a1:0a:c1:f5:a1:ae:29:0a:3b:
13:44:fa:31:be:bd:30:f8:1a:2f:47:1e:49:b4:c5:11:b3:12:
82:2f:ac:26:e7:2a:4c:34:bc:82:07:de:d1:2f:4c:65:80:72:
01:64:23:5d:87:ac:da:67:32:b6:fe:3c:d7:06:97:05:b6:27:
7a:0a:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:10 2026 by rpki-client