Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: ZfYKWZGkVBwZjvS5BYf8KAKZ7L5wWhUfZ47P4PFWyww=
Subject key identifier: 83:B1:59:7C:64:89:72:47:47:98:35:41:D8:AE:DC:E8:A2:FE:F4:9D
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019D9A3F09093B7619B1462A734FE6804C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 0208
Signing time: Fri 17 Apr 2026 07:01:55 +0000
Manifest this update: Fri 17 Apr 2026 07:01:55 +0000
Manifest next update: Sat 18 Apr 2026 07:01:55 +0000
Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=)
2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: yTpGufFTfGJ2dooeIT0GUsznFhIlfZczHAgWJUX8kYs=)
3: yxfGyEYWVoZFDcTt4Jv2iRkRwlI.roa (hash: JFc83iGMLXO8EMSMsHPQAAn1PO8Q9NwkH4mV2gRieGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:09:09:3b:76:19:b1:46:2a:73:4f:e6:80:4c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Apr 17 07:01:55 2026 GMT
Not After : Apr 18 07:01:55 2026 GMT
Subject: CN=83b1597c6489724747983541d8aedce8a2fef49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:ce:33:55:18:84:cb:86:61:1e:39:63:58:
cc:01:86:fa:42:37:ba:2f:6e:5d:0f:04:ae:ef:e2:
22:69:66:5e:c9:a1:a2:9b:7d:8f:0f:81:a0:0b:32:
f4:74:74:a5:bb:3d:cc:f3:ff:33:af:f6:e6:ab:bd:
14:52:33:49:80:4b:36:35:29:55:8b:4c:4c:d8:7e:
1e:b2:1f:bc:ff:89:2f:0b:67:e9:24:4b:01:22:bc:
19:e4:38:79:c0:c8:dc:93:2d:c9:33:91:d6:1b:20:
ea:e7:18:9b:46:41:e5:fa:fa:bf:81:03:07:1f:25:
5d:72:aa:db:45:ce:1e:3f:53:ea:1a:13:a6:61:3f:
f0:c7:a6:a4:eb:7a:18:89:16:c3:f0:72:8d:6b:b2:
f7:a2:b7:1e:7c:b6:86:ed:09:ae:0b:e0:55:7c:d5:
e4:ee:51:f6:ca:98:86:a9:e9:2c:08:68:8f:45:5e:
42:f3:e3:fa:d8:ac:0c:55:05:76:eb:c8:c9:ad:1f:
ea:5d:3a:b8:c1:dc:ba:45:38:c0:99:3b:af:92:43:
4d:47:44:d0:ea:d3:b2:5c:84:f7:8b:ac:1a:26:24:
00:0b:7a:61:a9:78:9b:2c:81:a4:25:80:e4:f0:07:
8f:71:46:f7:f5:d3:98:9e:25:d1:71:a5:8e:e4:51:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:59:7C:64:89:72:47:47:98:35:41:D8:AE:DC:E8:A2:FE:F4:9D
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:61:be:bb:0d:03:5f:b2:4a:b7:e0:ff:59:37:92:b4:e9:
64:be:59:07:df:b1:0d:c8:3f:3e:54:1a:6b:e2:c3:74:11:12:
56:02:f3:61:65:ad:24:9e:c3:a3:cd:4a:e6:7d:a9:51:a1:8a:
c5:94:39:e5:c3:f7:35:9d:ee:63:40:eb:d2:14:a2:9c:a5:13:
9c:7a:ee:ec:8a:0f:e4:38:c3:33:69:2a:9a:c0:f1:ec:94:9b:
af:b6:54:74:6c:7f:1f:60:3c:91:74:66:b9:b5:c3:8f:9a:16:
d4:be:05:ed:10:39:97:9c:be:ab:6f:a9:47:3b:db:1a:6f:1d:
e9:49:2e:96:40:d7:72:95:24:f3:d0:54:89:a4:30:1c:de:cb:
47:66:39:13:a4:78:4e:78:5c:97:7f:a0:35:7d:b6:7d:a7:7a:
54:0b:71:46:aa:6c:0e:59:ce:94:a8:ad:51:40:e8:78:78:e9:
73:f0:b6:14:3a:47:42:97:c4:10:e2:9e:80:2f:d2:06:92:fd:
af:1a:23:c6:43:a6:2c:13:6a:97:f4:6b:17:e0:39:8c:7f:5f:
1d:5b:4a:f7:6e:bb:a7:55:b4:25:0b:0c:0e:7a:0e:99:7b:de:
b5:6c:76:c0:41:7c:a9:35:f8:f9:df:3b:59:63:2d:c7:fd:12:
d2:a0:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:58 2026 by rpki-client