Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: i5WjFuovkrUIHqQXTcaX6MKzmPF+po3lmXSFgoOAu4o=
Subject key identifier: 47:48:A7:9A:3D:F3:D3:2E:0F:03:B3:5F:D7:9B:20:A9:1F:32:43:1E
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019D9A0748BE5D3B8BB5DA0E3607EFDBE320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 1300
Signing time: Fri 17 Apr 2026 06:01:01 +0000
Manifest this update: Fri 17 Apr 2026 06:01:01 +0000
Manifest next update: Sat 18 Apr 2026 06:01:01 +0000
Files and hashes: 1: DSJIzkN5q_rXnrR_sSD03uwjKLk.roa (hash: RgGL0auNuSKpj8cmVmNM1N0Gw/VXT4lpjwBiD7OAxgM=)
2: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: Q+eqtgj3/QqoNVM2vJgOi8dwfFYPcj54x3YtCgVmb4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:48:be:5d:3b:8b:b5:da:0e:36:07:ef:db:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Apr 17 06:01:01 2026 GMT
Not After : Apr 18 06:01:01 2026 GMT
Subject: CN=4748a79a3df3d32e0f03b35fd79b20a91f32431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:d5:74:06:a9:5a:bd:f5:ec:ca:12:a4:4e:
a6:dc:ff:3d:15:d8:f2:cd:a3:6d:80:0c:b9:ee:ec:
c9:ed:89:bc:8d:3d:2b:2c:d1:0e:64:d5:2f:71:18:
38:fd:a5:52:93:51:a1:bb:8d:92:c5:97:c8:38:37:
0e:6a:fa:fc:a5:dd:c0:ae:32:68:83:00:37:45:23:
9a:ad:b2:ed:eb:76:14:04:dd:24:08:46:9d:b5:1d:
1f:8a:81:c8:bf:0b:52:20:39:4e:84:55:36:43:dd:
e9:62:04:83:13:ac:3a:d4:b8:32:53:63:63:10:c6:
9b:c5:e3:00:01:bc:40:bf:cf:f2:27:fc:8e:08:11:
b1:94:1d:63:12:0c:bd:92:f3:27:2b:a9:40:4a:5e:
2a:68:7b:33:5f:d3:20:19:53:20:32:08:cf:e1:a3:
c9:84:52:cb:fa:82:a9:49:45:a1:bd:62:c1:f3:d7:
0e:6e:b6:49:25:0a:8b:69:ea:33:46:60:23:72:34:
0c:e6:ea:19:cf:8a:da:4a:f7:dd:99:18:60:89:9e:
de:e8:72:49:d6:c1:66:c5:10:21:fe:3f:34:df:22:
0a:c3:d1:b3:c9:da:75:6f:0d:ad:fa:f7:03:03:33:
5e:51:b0:b5:c1:ec:c6:76:ae:d9:2a:82:7b:7d:ac:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:A7:9A:3D:F3:D3:2E:0F:03:B3:5F:D7:9B:20:A9:1F:32:43:1E
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:58:1d:b4:95:92:5d:d0:65:6b:cf:e8:66:69:6d:41:d2:
05:06:64:ad:71:f2:61:d2:cf:a5:5d:06:76:86:e1:e2:98:be:
0d:0e:00:f3:2c:0d:59:be:0a:80:c1:e4:51:90:60:cc:29:6e:
82:9d:6a:0d:c6:8d:c3:56:2a:63:2b:94:af:a0:a7:aa:54:29:
74:0c:9a:15:f4:3b:cc:91:63:bc:9c:95:53:65:c3:26:20:40:
9c:72:24:99:f3:6e:bc:a2:90:d4:25:88:80:30:82:01:c0:dd:
37:3e:2d:99:84:28:29:0e:4c:13:02:c9:09:cc:a6:93:a9:8d:
05:0f:d5:56:c3:1b:2e:43:f7:c1:f9:24:eb:dd:a8:f0:61:9b:
e9:b6:47:c6:ed:1e:e6:12:82:1a:c0:a9:ae:a0:52:0e:b6:20:
e0:dc:27:60:35:9e:5d:98:c2:2f:11:4b:e7:a6:2a:67:1e:09:
eb:4f:ea:1a:3a:f0:23:60:0f:71:1f:7d:bf:16:8b:92:07:56:
6f:eb:d0:a1:17:81:c3:c9:9c:31:98:90:70:fc:ca:e8:d0:19:
ee:16:b3:bd:37:dd:b5:48:96:56:58:bc:4b:51:1d:00:c4:14:
b2:6a:69:67:83:d1:2a:95:94:98:ce:13:7c:42:56:a3:2b:e7:
ec:93:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:18 2026 by rpki-client