Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: i7gL7P7lvtK0brmx1JE/bsD8QmDl4ifOKTdncTDFllA=
Subject key identifier: B0:F6:13:8B:F2:A8:7C:C6:6F:4E:57:46:F6:9D:06:3D:01:E0:2C:5D
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019D9DACB0479FAE8944EAB23543BCC04E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 23:00:33 +0000
Manifest this update: Fri 17 Apr 2026 23:00:33 +0000
Manifest next update: Sat 18 Apr 2026 23:00:33 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: iejfOv7ouGIPEbgfYZc4Kk+xliVfNVvztKZXw2tKLnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:b0:47:9f:ae:89:44:ea:b2:35:43:bc:c0:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Apr 17 23:00:33 2026 GMT
Not After : Apr 18 23:00:33 2026 GMT
Subject: CN=b0f6138bf2a87cc66f4e5746f69d063d01e02c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:59:3e:61:99:b7:c6:91:da:da:3e:cf:70:
fc:e7:22:94:5e:3a:2a:84:69:72:fd:55:ee:13:3c:
2b:db:68:f6:4f:d6:ff:c7:d1:c4:96:2d:e9:3d:25:
42:5a:61:b0:cc:d8:86:b5:07:fa:29:ed:17:c4:db:
ec:dc:66:c3:ba:ee:36:3c:a4:b4:ee:b8:96:4e:b0:
72:46:3d:6c:07:ce:6a:6d:61:5b:3e:31:96:da:f1:
11:3c:38:af:ce:af:94:ed:ef:48:21:a8:41:17:95:
7e:e0:e0:b6:a1:84:f6:6c:eb:f6:88:7e:6f:da:68:
ee:9f:8d:7c:93:20:c2:48:e4:69:ab:70:f3:86:cf:
e5:95:77:80:05:68:28:ec:86:56:fb:e6:c7:44:1a:
24:d1:f1:67:03:96:62:6c:58:5a:e9:2a:e8:69:91:
58:2f:58:b8:d2:ce:d9:98:ef:e8:df:12:f6:7e:33:
06:85:60:77:ba:da:10:7c:45:fd:43:aa:d8:89:18:
d4:44:97:86:d7:af:a1:f6:01:ad:af:42:3d:7b:e5:
4b:10:ea:33:3c:d5:60:7f:7e:c0:bd:56:35:73:54:
d2:83:73:d0:2c:df:82:7a:d3:ac:ed:c3:0e:3c:0c:
5a:fb:58:ce:6f:ea:8d:89:33:5b:73:2d:d2:f0:43:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F6:13:8B:F2:A8:7C:C6:6F:4E:57:46:F6:9D:06:3D:01:E0:2C:5D
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2b:93:d7:5b:56:7c:33:df:14:f4:3f:33:33:97:65:f5:d9:
a0:8b:12:e2:26:d2:e5:36:32:77:bb:c2:03:2d:ae:b2:6b:cf:
ae:89:1f:1c:cf:fc:66:3f:bd:cb:4f:f3:d3:c5:d0:03:de:d8:
73:7f:48:30:36:e1:90:49:2d:16:8d:9b:67:63:d4:06:6e:8e:
e1:b7:03:ba:b9:77:cc:c3:e2:41:a3:f0:32:54:22:ec:0c:22:
ae:9a:56:56:0f:4d:03:28:bb:7d:b7:7f:15:a1:62:f5:50:0e:
92:a6:8a:3e:4a:d0:ec:e0:3b:1e:d8:31:8e:30:69:cb:a7:e4:
73:2d:c9:51:6b:43:94:b4:6b:72:16:0c:89:d6:52:8c:02:dd:
61:a0:96:c8:34:50:51:9d:20:2b:c4:9e:aa:0a:29:e1:ba:4a:
89:88:4f:24:21:07:f4:f4:38:44:81:d5:a5:87:a6:41:78:5d:
da:e9:58:3b:36:2b:95:3c:23:2c:ea:3e:59:80:fc:b7:cd:18:
a9:49:e2:0e:0f:77:20:c0:5f:fd:5d:2c:ff:c8:b7:cb:94:d8:
3b:30:bc:5e:9e:65:e7:4f:47:da:2c:8a:9a:1f:93:ab:be:49:
5c:8a:58:45:55:32:95:20:a6:1b:f2:3a:98:50:2f:c3:48:d5:
a8:73:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:03 2026 by rpki-client