Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: /GxQ3dl3Te/OinwcPDcVZwi0eOtDjdAaaTnMVdQVVzY=
Subject key identifier: 1B:D0:E7:94:49:B4:A9:FD:0A:26:74:71:D9:12:2F:65:65:CD:C9:30
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 019DA3780477CD80C58E96C2ED745B21B33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 0D3F
Signing time: Sun 19 Apr 2026 02:00:44 +0000
Manifest this update: Sun 19 Apr 2026 02:00:44 +0000
Manifest next update: Mon 20 Apr 2026 02:00:44 +0000
Files and hashes: 1: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: zFnI7AunxpKHk4YsBFs6SwDiRPrwILFDTDiWTPZF5nQ=)
2: i8r_KcfZKeFV_hgBzyCFH1FvU2Q.roa (hash: q7K3PKVBwmAslABYzD36Nuj0tVHPXSk4xv3r0eaKenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:04:77:cd:80:c5:8e:96:c2:ed:74:5b:21:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Apr 19 02:00:44 2026 GMT
Not After : Apr 20 02:00:44 2026 GMT
Subject: CN=1bd0e79449b4a9fd0a267471d9122f6565cdc930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:7e:f7:ea:49:53:b0:1e:94:d3:db:ef:ac:
4d:0c:36:a3:1a:66:2b:34:bc:3c:c6:42:be:9b:3e:
40:e0:d1:10:ca:63:43:eb:33:61:4a:2c:aa:e6:24:
e2:fa:04:24:ba:b6:8e:74:39:e4:3f:4a:6f:a5:c7:
60:0c:92:87:a0:bc:04:1f:45:08:e9:da:4e:85:45:
09:c7:2a:47:ac:a3:fe:09:9a:7e:f0:3a:c7:e6:2b:
7e:1a:e4:88:72:06:d2:9d:aa:eb:04:77:34:a2:1b:
26:4c:42:48:dd:51:dd:0a:f1:7a:10:5e:67:c3:24:
31:ed:f5:35:d7:0e:6b:e7:6e:fa:67:5b:76:20:df:
85:4c:19:e5:02:fa:09:e0:c4:82:12:78:22:3e:63:
67:50:2d:62:f2:fe:a5:29:fa:d1:86:af:c1:e7:30:
e3:97:a1:29:3d:fa:ff:16:07:8d:7e:da:a1:be:f9:
fc:05:25:ae:3d:1c:2a:9e:d3:73:42:81:e6:ca:58:
8c:b6:ee:f8:14:57:85:f4:71:ae:2c:78:11:5f:46:
69:eb:d0:09:ac:c3:87:c7:52:81:8b:0e:13:57:2a:
78:00:ba:14:93:85:2e:73:e6:f1:8e:b0:89:b3:31:
33:43:db:d2:a9:f9:ef:a0:ce:36:84:b4:ca:1f:87:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:E7:94:49:B4:A9:FD:0A:26:74:71:D9:12:2F:65:65:CD:C9:30
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:b1:83:a7:5a:e1:25:d1:78:fd:1d:87:05:42:7f:64:2a:
94:fe:3c:a0:ba:43:e7:4d:40:13:68:2c:73:50:46:a1:b7:cb:
a4:71:ab:46:61:61:bd:60:76:e2:d2:49:07:61:82:00:f1:4d:
52:41:b6:5d:95:71:1a:7f:13:16:ef:48:52:28:b2:cb:f7:a1:
d5:fe:c2:20:53:da:b3:30:9c:d7:6b:cc:aa:6d:db:b0:d4:7c:
88:1f:9d:ff:d4:22:de:fe:51:ce:7a:72:e2:36:71:4b:b8:00:
26:9d:c1:de:a0:be:35:d4:c8:d3:0d:10:e8:89:9f:98:4d:1b:
24:f0:21:70:76:93:39:a4:f4:75:b9:92:52:05:63:5f:85:b2:
3e:9a:4f:a3:b8:23:8b:e3:ab:0f:2c:c3:b6:58:d5:bd:bc:65:
85:50:0b:ee:73:c9:d6:f6:b2:74:4b:26:4f:38:8d:d3:9e:9c:
a0:fd:cb:fc:3a:7f:23:53:f3:5f:00:a4:d0:0d:3c:37:31:2d:
df:bf:36:27:23:0f:49:5d:b5:e1:77:9b:24:3d:c0:aa:5d:20:
7d:b6:1b:a3:e4:6c:9a:3a:0b:56:cc:71:d5:65:a2:b8:ab:00:
8f:71:6a:4b:e1:a9:a5:26:a4:40:4a:40:38:2a:7f:d8:6e:fc:
c4:42:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:00:13 2026 by rpki-client