Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: lto3ZarLOJWbyU/eKv7eWVKNI4VuVpohq8MuEU5+QZM=
Subject key identifier: 1A:61:30:3A:27:61:43:73:79:27:24:ED:E5:2B:2C:C3:B2:43:40:B3
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019D9B5099A5A1B74D4BC700F59F21103B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 12:00:43 +0000
Manifest this update: Fri 17 Apr 2026 12:00:43 +0000
Manifest next update: Sat 18 Apr 2026 12:00:43 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: v2PX4MEsephwBEJ0RGGnE/sN/GC9gdCCpj8bt13Dv6c=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:99:a5:a1:b7:4d:4b:c7:00:f5:9f:21:10:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Apr 17 12:00:43 2026 GMT
Not After : Apr 18 12:00:43 2026 GMT
Subject: CN=1a61303a27614373792724ede52b2cc3b24340b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f1:ec:ca:20:6f:ed:78:ba:59:2c:c4:cd:e7:
5f:fe:26:1b:fe:55:6f:f5:c4:a6:a0:3a:84:cd:be:
d5:e0:e5:db:b2:29:8c:94:cc:38:ad:4d:3a:37:b5:
f8:b0:b3:ee:a9:d6:be:c2:9c:7c:79:52:ad:e6:60:
18:70:ba:e8:a0:e1:cb:d2:dd:9c:5f:ee:f7:3e:41:
14:3f:e1:f8:6b:b5:bf:97:c3:fe:fb:9d:e8:c9:ef:
43:b9:43:a6:3f:a9:48:23:28:46:b1:bb:82:42:62:
a3:ca:3f:5f:a5:50:81:21:cb:f5:f7:22:1c:f6:b5:
04:22:66:c0:43:eb:fb:4b:4a:0c:bd:c7:30:2b:61:
89:f3:32:10:4d:43:71:a3:a7:4e:43:37:b3:a9:f5:
42:ad:86:10:8e:67:81:94:68:ec:3f:8a:70:38:db:
0b:5e:45:27:15:8a:66:4b:0a:03:9b:7e:99:85:8c:
64:2a:67:78:97:2d:13:61:a1:6b:f2:61:a9:cc:c0:
12:d1:8c:92:dd:a5:c2:4a:7a:ba:d7:a2:ea:26:69:
42:4b:41:ea:fb:99:22:6f:cd:6f:ba:06:17:b5:9d:
2a:15:74:35:3c:cb:13:a0:ee:95:0a:0c:9b:60:e8:
82:6b:82:f3:df:8c:0a:35:3a:78:3f:de:83:72:64:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:30:3A:27:61:43:73:79:27:24:ED:E5:2B:2C:C3:B2:43:40:B3
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:23:33:b0:f4:a7:56:df:e2:a8:7e:fe:06:df:f4:97:fd:ac:
b9:40:c8:ac:a7:ff:21:6f:41:cf:3e:33:a3:5f:dc:18:a6:5f:
c3:05:15:32:15:6c:41:03:b3:0d:b2:b5:df:39:78:a7:18:0e:
e4:f3:79:50:8f:30:60:92:f0:80:49:91:cc:fa:f5:ed:cc:dc:
3f:ce:44:c6:93:38:1d:af:a4:1d:7c:9c:b5:76:18:3b:d7:8b:
7a:f3:0d:9d:d2:9c:a8:4b:aa:27:99:37:4d:43:e7:76:b2:e0:
63:80:fa:6d:6a:1a:54:f0:18:79:bf:78:86:40:5b:9e:33:71:
28:d9:da:76:95:da:df:f7:49:9c:8e:73:8f:6d:77:f4:5d:a4:
49:86:92:ff:c5:37:91:23:24:f6:e4:35:df:a7:17:3e:5e:75:
2e:70:4a:43:d2:68:52:4e:e0:85:21:bb:7e:c0:c6:5c:34:81:
11:18:cf:bc:4e:8c:6b:ab:a1:4b:1b:e8:fc:50:64:55:99:8c:
4e:7f:3f:bf:89:ce:96:7d:89:08:9f:42:c5:57:b4:fd:d9:92:
21:76:2a:ed:0a:90:23:a2:bd:47:c3:96:76:e7:8d:cd:e5:0f:
66:f6:ec:78:a0:9e:10:2a:05:83:b2:a8:41:47:a3:a4:a5:b0:
ac:ac:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:11 2026 by rpki-client