Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: dnQkN6GZRupvbEoFiSfUdvJ265sYeO9c0LPerUqShxk=
Subject key identifier: 06:8D:00:43:BB:CB:E7:FB:BD:7A:9D:C1:02:67:76:7C:AB:B1:CB:52
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019DA3E6231CBCCA1ED2E04F099B4A997F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 03A0
Signing time: Sun 19 Apr 2026 04:01:01 +0000
Manifest this update: Sun 19 Apr 2026 04:01:01 +0000
Manifest next update: Mon 20 Apr 2026 04:01:01 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: ihIRhX/+QElTsbQLDrilFoyoqQp1TcPrFMSFRXW0Nk8=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:23:1c:bc:ca:1e:d2:e0:4f:09:9b:4a:99:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Apr 19 04:01:01 2026 GMT
Not After : Apr 20 04:01:01 2026 GMT
Subject: CN=068d0043bbcbe7fbbd7a9dc10267767cabb1cb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:94:26:ed:2d:2a:6b:54:6e:49:79:14:82:
d2:f4:12:62:d2:db:a6:a2:7b:1e:22:dc:cb:c1:14:
9d:f4:96:09:28:bd:fe:51:f3:1a:ea:f4:89:46:2b:
44:be:c2:f1:47:ec:62:68:df:93:30:43:87:29:ca:
a0:ee:1c:bc:75:10:0e:f0:ba:6d:aa:ec:75:5e:aa:
9f:2e:9f:c3:1d:85:19:fd:7b:8c:c0:c5:89:21:70:
b3:e9:be:48:3a:85:a1:11:5e:6a:33:af:09:97:9a:
39:f9:e1:b3:43:9f:a8:c8:4a:a0:8e:2d:61:78:93:
8c:10:db:6a:10:28:b0:aa:8c:3e:dd:fc:c6:5b:a6:
83:2a:12:75:ad:a4:b7:0d:cb:06:26:50:1a:8a:8b:
d8:9f:f6:e0:01:66:0f:c2:57:59:b4:60:cb:31:20:
38:db:02:d1:7a:05:7a:46:1e:6b:8c:e1:77:0c:e9:
da:88:26:85:6e:12:c3:22:9a:af:f3:ec:3f:20:97:
7e:e8:1b:d7:27:5b:35:13:eb:f8:8d:04:c3:ef:4c:
e0:05:40:f0:73:5a:ea:34:c8:3a:24:d6:59:94:cf:
2a:73:a3:69:15:0c:9e:bd:65:9f:7a:62:a9:9c:1a:
9c:3b:e7:9d:ed:1a:dc:c6:31:ed:89:8a:03:82:30:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:00:43:BB:CB:E7:FB:BD:7A:9D:C1:02:67:76:7C:AB:B1:CB:52
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:19:5a:97:dc:52:2b:92:18:82:d1:83:44:29:b8:78:cb:d7:
03:e1:99:60:58:13:a2:4e:6f:ac:8b:17:bf:75:79:9d:95:0c:
00:e2:f4:dd:2b:49:01:4e:c1:aa:36:b0:bf:12:00:04:34:43:
2d:57:c1:df:19:1a:9f:4b:91:d9:0a:50:ae:2b:9c:7c:79:70:
f0:f5:5a:2b:d5:98:6b:b5:44:49:6c:4d:c7:9f:58:d5:18:ec:
5b:b6:5e:fc:68:83:f6:7e:02:55:ae:29:ec:52:47:34:27:37:
89:31:9f:cf:f7:c2:0e:98:1f:85:b7:f4:08:4b:4c:68:a7:02:
ce:39:be:57:85:38:58:47:0d:8d:59:9a:84:92:21:0c:56:57:
c4:c5:f5:5e:e6:d8:ac:5f:39:d1:b9:66:45:a0:ae:76:88:c6:
9d:18:75:df:f5:2a:f6:ce:1a:13:61:b2:5f:72:c8:bb:bb:34:
53:30:4f:e4:ce:1b:53:14:10:fb:14:43:fb:57:be:ea:e7:13:
31:4d:e8:75:a2:34:7d:93:d2:77:23:11:ee:5a:92:af:ad:03:
ef:49:fe:ee:ab:87:93:ad:3d:72:3c:87:38:f3:d6:de:31:ea:
45:d0:02:9e:d2:2d:a2:a6:f5:1a:33:5c:32:6f:01:4a:e2:93:
39:65:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:54 2026 by rpki-client