Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: 1K7p+0ji1DUouVOuFW3P4y4e2J0xT0u+pb2+tNN0WaE=
Subject key identifier: 45:54:72:12:A1:27:6F:B6:8F:4E:7E:5F:8E:AC:0C:BA:E2:37:27:EB
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 019D9850403AE211FF13C508DB98F52A7DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: 0Uqlzj0wBudtuwo65E7ecBxR-5I.roa (hash: 3nBce/u/p8RQlISZvZNTZJ4v/xHNCVwY/ApDTxv5Cr0=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: DJ6UufuQP3AnqQOGw93WER8n7MCmcfzvirxwWIet0nI=)
3: pDNCrYaJz93_0ruXQrWKPUYVC7w.roa (hash: dZXhJB4noMnp9QFyGzeSZGgePn7dhbkhRF5jupjuOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:40:3a:e2:11:ff:13:c5:08:db:98:f5:2a:7d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=45547212a1276fb68f4e7e5f8eac0cbae23727eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:12:c5:af:4f:c9:18:73:68:03:2e:e3:d4:
92:c1:89:57:fb:8b:37:c3:b0:1f:0c:a1:ac:6e:6d:
13:0a:80:a6:77:6b:5a:be:cf:b7:a4:18:55:46:d9:
7f:4b:b8:b0:f9:ef:a8:9a:0a:cb:82:04:ff:07:3d:
30:bf:67:4d:ac:61:7f:c7:b2:a0:f4:34:db:09:9c:
7f:a6:ce:b7:ea:7f:e5:5c:71:00:be:ed:b2:92:c6:
7e:50:c5:9d:f0:f0:8f:a1:3c:57:a5:3c:a6:14:a3:
d3:a2:cb:26:6e:88:51:a3:11:5f:1c:f2:c3:51:ea:
94:fc:ca:e0:48:1c:38:c1:15:aa:73:77:cd:e7:e4:
44:f2:8e:14:97:1a:3d:00:9b:c7:74:f0:41:ec:97:
85:66:50:49:c5:16:81:79:ba:91:5f:0c:96:7f:16:
56:96:52:4a:29:ec:25:c6:4d:a1:5c:48:14:98:5d:
65:7a:fa:a6:dc:a1:9c:67:6d:3c:2d:d3:94:23:2f:
a9:f4:e9:1f:d1:d0:54:12:74:7f:b8:23:e2:bb:93:
c6:db:6a:5f:9b:f6:3e:51:77:7a:bf:09:82:85:9a:
f0:67:6b:f4:33:77:d9:e6:0b:4e:68:59:f7:da:56:
c6:9d:68:06:55:eb:42:03:f9:23:7d:de:10:4e:d8:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:72:12:A1:27:6F:B6:8F:4E:7E:5F:8E:AC:0C:BA:E2:37:27:EB
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:60:de:a3:1f:8c:d5:94:82:42:75:fc:75:4c:2e:68:d6:12:
4a:a0:44:4b:39:04:ab:86:c5:bb:be:5b:4a:8a:19:ef:ad:f8:
f5:96:14:aa:42:7a:b2:69:2d:db:28:5c:22:61:9d:ab:31:65:
5f:42:03:cd:e3:ce:71:51:c3:56:94:54:24:52:48:b5:1e:c9:
a5:b3:8c:c6:d7:15:71:a0:43:21:2e:39:8c:da:a3:fd:be:7f:
1c:df:b9:e8:d9:4b:26:c5:f0:a5:3e:3c:ab:f8:fd:47:13:91:
62:ff:df:be:b0:69:d7:23:58:bc:80:13:09:24:50:b2:b0:11:
a1:2c:2b:87:18:42:80:6e:41:d0:56:c4:7d:53:60:38:02:70:
ef:22:d9:25:27:79:d3:e9:31:55:b9:49:cb:1b:61:23:8f:fa:
be:94:d9:a6:ea:c7:19:fd:92:4e:e8:b5:71:b7:a6:c2:38:93:
fa:89:be:51:34:f2:43:de:be:2e:d0:6b:58:ae:ea:d2:df:ae:
df:82:2a:39:1b:1b:ab:b6:f4:b0:70:c8:e2:8d:fd:56:c1:cd:
89:63:42:ae:8c:99:b3:4b:61:bd:40:ea:00:c7:e0:68:08:aa:
25:35:59:d6:f8:c6:a6:a9:8e:ad:c9:27:74:c1:0d:7d:d2:e4:
71:03:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:56 2026 by rpki-client