Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: WgBOpUb9LhUVB787icaLvNzshA3RH/yBzLNmtwdvGyE=
Subject key identifier: 2C:6E:AA:DF:31:D6:74:43:23:ED:CE:E4:AE:60:1F:3F:EE:E6:91:EA
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019D99CFC8E206C86FD63989691E88F07859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: 270NjSg3otoHEPI4oHhy/g5xzTaNoCIN1KPi760DHhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c8:e2:06:c8:6f:d6:39:89:69:1e:88:f0:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=2c6eaadf31d6744323edcee4ae601f3feee691ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:9c:09:15:68:89:be:b9:e1:d7:4b:b9:4c:
cd:3f:21:30:89:9e:6a:35:e8:7e:e9:e4:e5:20:be:
77:e4:a9:60:b1:18:07:a9:a9:53:b4:aa:9b:60:46:
af:11:46:1f:07:99:c0:d4:da:ee:81:a5:00:c9:c8:
b8:36:f5:77:a4:17:70:00:cb:23:84:96:6a:12:75:
8c:52:7d:4c:77:ac:5c:c4:2b:85:2e:f6:b3:cf:ba:
ef:c6:e0:2e:a3:39:d7:92:eb:bf:d3:28:d6:2e:03:
83:b4:f0:44:d3:e6:a1:ad:61:e1:b1:99:4a:ca:ba:
7c:5f:a7:d2:40:2e:a1:b8:51:90:3a:2a:a0:16:f0:
94:9f:17:ee:35:2b:7c:e2:5e:71:75:b0:22:85:78:
a2:09:b2:6c:2d:8a:8a:29:13:58:c8:76:4b:69:5d:
47:38:37:df:27:ff:7f:52:70:ac:22:5f:eb:bd:d2:
02:74:9a:c3:f8:42:8b:34:f6:da:7f:71:db:fc:89:
9a:27:2b:14:db:42:a1:15:c3:13:75:fb:14:09:7e:
26:6a:ec:2e:35:7b:52:d1:8b:0f:04:ed:7b:3a:9d:
40:5b:01:92:50:fe:eb:75:da:24:5b:33:ea:05:52:
20:e5:b1:62:30:e9:43:32:52:13:de:bb:e3:28:b3:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:AA:DF:31:D6:74:43:23:ED:CE:E4:AE:60:1F:3F:EE:E6:91:EA
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:96:d6:43:04:19:b7:f2:2e:d3:c3:4b:31:4f:e3:6c:16:
99:8b:42:39:c6:f7:87:76:f1:ff:59:79:11:2f:06:3c:a0:ca:
f2:83:17:ff:12:f6:39:c1:8e:77:66:f5:b9:2c:86:d3:a4:c4:
6e:32:c5:ea:a1:4e:33:c4:30:86:86:36:31:bc:3c:f6:c4:c0:
41:5e:c7:32:30:42:39:80:c4:eb:ed:4e:3b:0e:78:ce:23:db:
08:61:7e:d3:fa:9a:70:fb:87:11:b2:a7:92:32:41:35:88:44:
a2:ea:c0:be:39:85:ed:20:b0:7d:76:e6:44:d4:a1:cb:17:32:
6f:72:f8:a8:a8:26:dc:6c:c9:ca:18:1a:da:c7:d7:36:51:33:
f7:cc:c1:40:92:dc:27:5d:52:a2:e0:75:d4:98:7d:b7:fd:59:
0d:89:0e:42:b2:a5:91:ba:91:45:ce:8f:04:e1:c0:ce:f9:4c:
6c:fa:a5:0c:e0:2b:ab:a9:7d:46:ab:8f:26:8c:76:82:85:3e:
7d:19:53:39:0a:41:17:37:70:9b:26:6f:29:0e:a5:d0:11:96:
b6:35:4a:30:62:fb:d3:ce:ef:0e:3c:a9:2c:f5:74:00:c3:8d:
65:f9:63:c6:3b:0a:f0:0d:81:08:ee:b4:a4:3b:ee:19:69:33:
35:f4:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:54 2026 by rpki-client