Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: WOttzwpUj734WpWgYWWhneWPVXRRg+q/Uu3cz6OW43E=
Subject key identifier: 53:05:9C:1B:33:42:20:0D:AC:44:D5:9C:E1:67:F3:B5:7A:E6:32:1A
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 019D992B4C64D794C077D4969A983A5A3ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: /bR0AFQ1EmBHm1mVJpPa2R2AiqXHfBXgCox8vMVt09A=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4c:64:d7:94:c0:77:d4:96:9a:98:3a:5a:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=53059c1b3342200dac44d59ce167f3b57ae6321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:a9:20:b4:4b:a0:58:b5:43:16:af:03:7b:
b2:f1:8b:3d:75:86:6d:79:e0:db:3c:e1:6a:28:2e:
5a:14:3c:1f:6b:f5:4a:2c:67:67:86:4d:c8:75:10:
56:44:c5:22:a0:10:99:09:29:80:4b:19:aa:29:3f:
d9:57:f3:89:41:98:8c:b4:c2:52:89:76:97:65:ff:
bb:e1:13:ad:99:94:61:fc:72:bd:a6:cc:06:b1:b5:
64:25:98:48:56:c8:ef:aa:72:aa:ab:32:14:4c:4c:
e9:55:a2:e8:55:e5:53:56:85:c6:34:9e:4a:b7:cd:
1f:bf:12:0f:73:0d:f4:87:b6:34:58:0e:af:d9:91:
08:be:31:93:9f:7f:e3:70:88:a6:10:b2:52:64:d3:
37:09:35:d5:24:af:16:58:8c:34:a2:db:5e:3a:c6:
44:ce:e4:c0:40:a1:8e:90:55:58:38:88:8c:32:65:
e6:f7:43:18:33:85:53:bc:09:ef:24:99:b3:b4:16:
d8:53:86:65:00:19:fa:5b:81:a9:31:b7:be:d6:f4:
41:39:75:f7:f0:1d:11:e0:52:4d:16:11:75:df:2b:
43:1b:4f:c1:bb:a5:ad:1a:d5:cc:70:9b:5e:78:3b:
40:ad:9a:2c:76:50:43:2e:e3:17:cf:10:62:ec:6d:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:9C:1B:33:42:20:0D:AC:44:D5:9C:E1:67:F3:B5:7A:E6:32:1A
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f1:4f:cc:5f:a5:19:e8:76:12:27:31:fc:0e:eb:a2:a9:16:
e9:1d:d3:85:7d:fc:aa:59:bd:ac:71:5d:a8:88:7f:8a:1f:e1:
da:16:da:6a:b2:45:ff:fb:fe:4d:d5:05:33:96:6c:93:d4:08:
ea:5f:c9:a5:cd:4f:cc:b8:4c:d1:c9:33:0e:b3:39:98:d6:ad:
bd:81:19:3b:e9:f2:e1:bf:99:9f:78:37:04:2b:a6:b4:6f:00:
bf:02:a2:40:52:a2:4a:9b:e4:da:c2:1d:ed:20:b9:7e:c3:c1:
d1:18:fa:37:8c:47:23:6a:3f:ed:36:65:35:8c:5f:cf:d5:43:
17:d8:14:6b:f9:ab:01:45:6b:a6:f0:60:51:8e:b2:f1:93:a6:
27:9e:41:3c:4d:1e:80:fc:5e:e3:4d:2c:93:4d:90:28:b6:49:
f9:0c:ec:b2:d4:94:ad:b4:b5:10:ea:70:54:47:dc:0e:1e:81:
40:69:67:31:35:51:5b:3c:12:87:e7:c3:17:54:60:fe:b6:dc:
88:68:6c:30:79:ca:6e:d0:c3:91:9b:f6:9c:b8:5a:9a:a2:78:
69:39:ee:48:bd:17:8c:ee:cf:33:71:cf:89:61:af:9d:43:11:
16:41:a3:09:de:16:d5:2d:f2:02:82:83:dd:ed:b3:77:8b:d3:
cf:13:e3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0xk15TAd9SWmpg6Wj7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy
MTVjMGQwHhcNMjYwNDE3MDIwMDQ0WhcNMjYwNDE4MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg1MzA1OWMxYjMzNDIyMDBkYWM0NGQ1OWNlMTY3ZjNiNTdhZTYzMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/epILRLoFi1QxavA3uy8Ys9dYZt
eeDbPOFqKC5aFDwfa/VKLGdnhk3IdRBWRMUioBCZCSmASxmqKT/ZV/OJQZiMtMJS
iXaXZf+74ROtmZRh/HK9pswGsbVkJZhIVsjvqnKqqzIUTEzpVaLoVeVTVoXGNJ5K
t80fvxIPcw30h7Y0WA6v2ZEIvjGTn3/jcIimELJSZNM3CTXVJK8WWIw0otteOsZE
zuTAQKGOkFVYOIiMMmXm90MYM4VTvAnvJJmztBbYU4ZlABn6W4GpMbe+1vRBOXX3
8B0R4FJNFhF13ytDG0/Bu6WtGtXMcJteeDtArZosdlBDLuMXzxBi7G3zUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMFnBszQiANrETVnOFn87V65jIaMB8GA1UdIwQY
MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt
YTkxNGUzY2UzOTQxLzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx
LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfFPzF+l
Geh2Eicx/A7roqkW6R3ThX38qlm9rHFdqIh/ih/h2hbaarJF//v+TdUFM5Zsk9QI
6l/Jpc1PzLhM0ckzDrM5mNatvYEZO+ny4b+Zn3g3BCumtG8AvwKiQFKiSpvk2sId
7SC5fsPB0Rj6N4xHI2o/7TZlNYxfz9VDF9gUa/mrAUVrpvBgUY6y8ZOmJ55BPE0e
gPxe400sk02QKLZJ+QzsstSUrbS1EOpwVEfcDh6BQGlnMTVRWzwSh+fDF1Rg/rbc
iGhsMHnKbtDDkZv2nLhamqJ4aTnuSL0XjO7PM3HPiWGvnUMRFkGjCd4W1S3yAoKD
3e2zd4vTzxPj+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:12 2026 by rpki-client