Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: Ri3KxrMXvhcjuMthhs4vchH4GRgagv/A4iMSqAL+nYc=
Subject key identifier: 7C:07:17:94:16:2B:22:3F:52:82:F2:7E:0A:EC:9A:D1:45:E3:6D:82
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019DA5D4CCD3744200286100E382F30D519C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 03A1
Signing time: Sun 19 Apr 2026 13:01:19 +0000
Manifest this update: Sun 19 Apr 2026 13:01:19 +0000
Manifest next update: Mon 20 Apr 2026 13:01:19 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: XU4UFUEBZE8dv7ovG59z57NKtzzb5sQlcqVKXqedInk=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:cc:d3:74:42:00:28:61:00:e3:82:f3:0d:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Apr 19 13:01:19 2026 GMT
Not After : Apr 20 13:01:19 2026 GMT
Subject: CN=7c071794162b223f5282f27e0aec9ad145e36d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:7a:06:61:fa:d4:e0:20:28:a2:e5:ba:be:
57:88:6c:f5:6b:eb:0c:b5:1f:b6:52:76:ba:d0:e6:
e3:59:ef:57:c8:0f:99:f5:2c:4e:3b:6f:af:1f:9b:
60:f4:7d:2a:19:fc:8c:f8:bb:57:9f:cb:76:df:31:
5f:89:1b:09:73:6c:b6:65:19:b4:9c:9d:77:22:f2:
42:e5:3d:c9:96:9c:a7:f4:2f:6e:de:c8:f1:aa:93:
fb:f1:87:07:93:24:9c:47:10:7a:9d:cb:07:b3:e0:
70:80:88:40:17:a1:c5:dc:79:97:68:0b:16:d2:6f:
38:52:4e:dc:61:8a:d0:db:32:6b:99:94:d9:d2:cc:
05:c5:c6:c3:ad:1b:2b:fc:8a:1e:f5:31:c8:a7:90:
e0:b4:d1:57:77:ca:e9:c6:94:35:7a:64:76:43:72:
db:33:45:40:53:e2:0d:80:7d:66:0f:0d:9a:07:a6:
f6:4b:e3:bd:67:49:05:71:ba:35:b0:9d:ec:57:7d:
38:bf:5a:f9:ac:c5:5c:2b:05:33:f2:1e:95:b0:0e:
4c:bd:5d:6b:37:d6:24:cc:bf:71:fd:08:33:6f:79:
43:cd:bf:69:e1:78:f2:44:2c:69:d3:da:3f:4a:fe:
2d:ae:34:89:07:64:27:b2:3b:9e:38:31:d9:ba:ba:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:17:94:16:2B:22:3F:52:82:F2:7E:0A:EC:9A:D1:45:E3:6D:82
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:30:a3:64:27:6e:74:2b:0e:93:b5:62:df:24:b3:3c:83:
fd:3e:3c:c6:70:e2:f1:d8:ff:7d:a3:53:32:82:d2:77:44:1a:
0b:f4:8b:db:ba:0c:4b:fd:1a:8f:45:04:06:f4:e5:31:03:bf:
a3:76:e3:06:b6:24:cb:17:b1:c2:e9:87:17:93:07:1e:6a:81:
fb:6b:43:4a:ee:a0:9b:ab:00:76:8c:47:d0:a3:bf:b5:5e:1c:
8f:d4:40:db:29:66:52:df:d9:1a:4c:4f:db:74:fd:33:99:fb:
dc:a4:a7:32:39:df:f0:43:33:43:f3:9a:be:d5:3c:a4:19:6f:
fe:5b:cd:6e:3f:c3:62:95:e6:a7:e7:05:fc:51:d1:b5:10:11:
b8:91:a9:3f:8d:b1:a4:17:fa:58:39:a4:27:d9:54:e2:5c:2d:
28:8a:2e:d8:d9:cf:de:30:11:33:8d:b9:8f:c4:3f:0f:ef:80:
24:64:84:36:3f:4e:b9:25:72:20:f6:a5:ee:a1:3f:fb:03:17:
de:71:ae:13:b3:2f:9a:bd:cd:a5:b9:51:64:dd:8a:42:79:01:
5c:ed:90:06:27:0e:6c:35:88:21:f3:54:ab:6a:1e:82:8c:d2:
6c:7e:4e:7e:c2:81:d8:1f:51:87:de:7f:b7:cf:26:6d:13:2b:
a3:c2:99:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:09:14 2026 by rpki-client