
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier: MQC+gPU88VeHs1VZRD8ypPZdrDvNkSqtHSc/hlibqrY=
Subject key identifier: D0:D6:7C:83:EA:8C:3C:24:C0:09:A9:4F:E4:20:26:5A:D1:2C:4F:31
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer: /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial: 019D9A06FE7BAF0DE1E65E70C8C011F985D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number: 73
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: wULHtZ+EIwVNDwT8rPO8CakGahvAdVitrnhqZsB7qnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fe:7b:af:0d:e1:e6:5e:70:c8:c0:11:f9:85:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=d0d67c83ea8c3c24c009a94fe420265ad12c4f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:41:c6:60:f6:c5:8d:d7:79:22:9c:8e:b7:
2c:17:1d:5e:c6:19:a6:c5:b5:fa:6c:6d:c5:a6:79:
5b:8a:86:db:13:d9:04:ad:89:02:48:ec:10:33:08:
be:57:9c:58:c3:f0:12:ac:7a:11:46:bc:37:cc:ca:
00:62:6a:8e:e3:92:d5:68:87:c0:bf:86:6e:41:ef:
92:01:fb:f7:53:9e:09:29:ed:f5:b2:77:b4:3f:7a:
75:38:ba:9c:69:06:e7:09:d5:e5:e2:fe:a0:5e:98:
c7:2a:86:20:f4:5d:bf:9c:76:05:c3:f7:28:2a:f6:
ee:28:ed:c7:97:16:5a:0b:92:53:5a:8d:54:e0:6b:
44:a6:bb:02:b9:d9:a6:63:a5:23:29:ee:d5:50:de:
20:0f:88:df:db:39:a4:0d:f7:29:22:7d:b8:91:60:
2e:c9:2f:4f:9a:4a:89:a9:11:de:7c:ff:85:72:d3:
b1:61:36:fd:fe:f3:68:ec:72:eb:44:42:53:5b:e5:
d7:9b:be:0b:bf:f3:0b:74:59:6d:3a:52:fa:fe:13:
b8:f1:e3:28:d5:51:43:6f:e6:91:a9:14:64:3e:17:
ad:17:52:1e:ba:b8:29:13:05:9b:90:0e:ea:4f:c6:
d2:a7:0e:fa:6b:12:5a:0e:aa:b9:5b:20:67:1c:29:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:7C:83:EA:8C:3C:24:C0:09:A9:4F:E4:20:26:5A:D1:2C:4F:31
X509v3 Authority Key Identifier:
keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:92:0d:44:17:8b:e8:f8:17:a6:5a:b3:5f:52:a8:31:0b:92:
65:38:be:1b:42:33:a0:0c:2a:69:d6:ab:cb:23:5d:83:ad:be:
04:ec:4a:2d:3f:ac:17:87:48:c1:51:ab:2d:79:30:73:c2:a5:
29:bf:ef:cc:7c:9f:19:31:4f:37:6f:f5:89:21:fa:3a:90:66:
de:c4:3c:01:c7:8a:ec:73:76:ac:d7:13:22:a8:60:4e:71:8f:
25:15:cd:f4:88:50:53:c8:09:4f:c1:3c:f2:d0:d7:45:d3:b8:
6e:e5:2b:b6:6d:af:2b:82:dd:31:78:de:a8:20:bc:f2:1d:82:
45:f4:8a:18:90:f0:89:44:95:d5:45:0e:45:83:0e:24:04:e5:
d3:0e:b9:39:41:8e:18:9d:66:2c:e1:f1:84:c7:da:cb:9f:75:
77:82:20:f9:f0:6d:6f:0a:82:f4:80:16:5a:88:7d:b3:5a:06:
5e:07:b9:75:bf:2c:a3:e2:03:33:3d:c2:40:11:07:7b:b3:74:
a2:37:c2:55:7c:72:2c:86:76:6d:e9:d0:18:2a:35:ed:15:87:
7c:09:9d:33:70:2a:05:dd:4c:38:13:fd:47:43:00:48:70:69:
4e:2d:42:8d:c1:49:3d:2c:c1:e5:05:d1:31:7a:a1:1e:10:37:
22:58:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:33 2026 by rpki-client