Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: HIgAC67Tw93BLRLLcpWxX1NKbjfQ5mTK9zHRD2b5euQ=
Subject key identifier: 57:EF:85:A0:09:2A:95:33:26:27:FF:87:8F:02:0E:41:18:95:1C:BE
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019D9AAC0D7F0D6ADF1E618B1FC86FC7BAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 32
Signing time: Fri 17 Apr 2026 09:00:59 +0000
Manifest this update: Fri 17 Apr 2026 09:00:59 +0000
Manifest next update: Sat 18 Apr 2026 09:00:59 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: M7ZTJWmZzwuFllzkNpi0nj2kX0rcdVnFpYTSqdza9WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:0d:7f:0d:6a:df:1e:61:8b:1f:c8:6f:c7:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Apr 17 09:00:59 2026 GMT
Not After : Apr 18 09:00:59 2026 GMT
Subject: CN=57ef85a0092a95332627ff878f020e4118951cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:e2:d5:bd:54:c9:8f:83:26:ef:63:3c:c0:
77:1f:91:a2:1f:88:b3:ed:49:8e:24:d4:4d:57:b6:
56:6c:35:95:8a:4c:89:93:64:96:c3:10:ed:a3:d2:
cf:1e:03:00:fb:fb:c1:a5:40:8f:7d:88:35:73:6b:
d4:96:cd:fa:b1:3a:9a:40:b2:e0:63:82:76:50:fa:
05:65:39:fc:c9:bc:81:45:61:de:ad:3b:ef:d3:fd:
6a:d8:7e:60:df:d6:ff:33:e0:1b:70:00:b7:95:ca:
88:be:50:85:7c:07:b1:c4:37:77:c3:74:63:64:02:
db:92:7d:e4:29:7e:ed:97:78:2e:cb:6a:d3:35:80:
81:4e:9b:55:1a:1e:29:64:d1:d5:cd:f5:f3:6a:3c:
c9:56:91:5a:a4:42:a0:f2:f3:98:9a:78:a6:dc:4f:
38:6c:a2:ef:3d:47:cd:75:b2:1e:82:5a:0c:60:a1:
2c:6f:95:b9:1a:40:42:a6:17:05:3f:68:04:e2:79:
8a:7b:9c:c2:10:ab:dd:60:92:80:ff:54:28:73:d7:
84:5e:bc:68:5c:5d:e5:c5:a8:96:a1:05:59:5b:0e:
b7:8f:08:5b:8b:13:ac:16:c7:94:3c:0e:65:ec:9c:
1f:d6:76:4d:ca:f2:18:a1:cd:ea:45:c9:10:02:43:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EF:85:A0:09:2A:95:33:26:27:FF:87:8F:02:0E:41:18:95:1C:BE
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:67:f8:54:68:99:3b:35:8a:88:d8:26:f5:a8:60:94:3b:
0c:88:db:ab:44:ba:8e:21:db:f3:f9:d4:6a:8c:6c:c7:fd:36:
98:3b:f3:76:34:09:c1:95:a4:5d:84:a4:03:d8:0b:ca:bc:66:
a2:cd:4e:63:4f:a1:47:6d:bb:91:fa:28:71:b2:20:12:26:1e:
79:04:34:71:d2:98:9e:16:9e:11:1d:05:cd:f8:74:65:8a:b4:
40:a7:6f:68:70:d1:02:92:99:20:5e:f2:e3:12:dd:b2:cc:d9:
9d:8a:a5:a8:6e:6a:fa:39:14:68:06:b1:01:53:4b:be:7a:f4:
e3:8e:73:22:b7:cd:1a:ba:68:0f:51:86:6b:24:9f:1b:0d:cc:
35:3d:71:2c:ca:a4:e6:d1:53:d4:51:aa:a8:62:60:4b:1a:31:
de:76:8d:82:72:5c:db:8b:8b:33:6a:02:1e:de:be:a1:ff:a3:
3b:1e:e7:87:f7:86:4d:6d:3e:84:9f:c5:f2:e5:92:f7:f4:6b:
27:5b:fa:ac:4a:8b:50:12:a3:c2:13:2e:a8:7f:ff:83:cf:cd:
53:94:fa:5a:48:43:56:5d:ae:78:de:1a:98:e3:a3:27:d2:0e:
28:02:0a:10:67:fb:0f:51:ca:1b:1f:9a:20:e4:02:0b:fa:1e:
85:4e:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:30 2026 by rpki-client