Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: wo+uEvLtiV0XBqDlW9Yehlb6yE7O1diWnl/F4EJ3htY=
Subject key identifier: 79:48:74:E6:1E:2D:87:C3:9F:33:BC:42:9B:5C:25:26:51:20:DD:0F
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019D992AF520B94F15A8BA0B7D9EAB8DEC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: +wCGiswChSlPNWD1WHclFzOP4GrTOhK609uNr0/MA2M=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f5:20:b9:4f:15:a8:ba:0b:7d:9e:ab:8d:ec:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=794874e61e2d87c39f33bc429b5c25265120dd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:a1:f0:4d:45:79:b4:b6:ab:07:48:a8:b1:
97:bd:ce:4f:b5:03:b9:9e:c3:a0:1d:62:ba:55:e4:
48:f5:f0:14:73:f0:60:86:e0:37:4a:b8:8b:af:a8:
2a:f7:30:b2:cc:d2:27:1d:23:94:67:b3:3b:aa:34:
83:93:b7:16:69:a0:18:f6:9b:f5:1c:06:25:03:8f:
16:2b:80:74:1b:8e:a2:00:a0:28:39:d2:a4:3f:84:
ce:25:2f:92:1f:f9:1a:13:14:6f:9f:26:d9:b9:ae:
f4:e7:19:38:f9:ca:96:e5:50:92:81:69:2e:03:99:
52:a8:75:fc:17:28:cb:5e:64:3e:d6:83:e6:3c:26:
a1:0d:75:9b:44:58:d7:78:03:b9:be:62:68:b5:5f:
95:c9:36:05:9e:26:0a:d1:91:68:bc:ba:3d:95:f0:
f1:27:de:78:f2:28:63:58:80:23:4c:0c:7d:54:36:
3b:c0:b5:f7:a1:32:d6:d9:ae:6c:9a:1f:3f:27:06:
78:a1:e5:a9:12:be:1c:54:1b:d2:c8:65:6f:7f:85:
e5:ac:5a:9a:2b:43:b5:52:a6:9d:fe:71:de:8a:02:
0c:46:f5:d7:dd:c3:b7:84:55:cc:94:54:7d:33:55:
dd:bb:30:9c:18:0a:68:b3:a8:22:ea:74:1e:18:e2:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:74:E6:1E:2D:87:C3:9F:33:BC:42:9B:5C:25:26:51:20:DD:0F
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b9:b0:c4:bd:31:12:53:e6:79:f0:b9:ae:6b:91:a1:12:2c:
7e:f8:02:1b:46:ee:2b:49:9d:e2:43:65:44:31:5b:22:97:4d:
95:d1:9b:09:df:1f:25:c0:5c:68:71:2b:94:2f:6b:c6:a1:6e:
01:d5:a4:12:20:0a:cf:9c:2e:27:c4:c3:5d:0d:a6:2a:1a:3c:
55:ff:5c:35:ec:d7:31:d7:e0:0c:de:57:bd:d1:ee:31:54:18:
a4:fd:49:03:88:fc:1b:0d:83:9a:3f:ce:a1:dd:d4:6b:db:22:
7f:75:74:d3:38:07:61:0f:80:60:91:c3:c0:34:81:51:3c:98:
35:2d:92:7d:4e:3d:0b:57:e6:4e:a8:17:20:bc:94:a1:ae:be:
ed:86:9f:b6:71:ed:6c:8a:14:9d:0c:cc:86:a1:8e:e6:c2:ee:
04:02:c5:0b:e3:88:52:80:5a:7c:21:7d:a5:b4:59:7f:3a:c3:
22:60:0e:77:31:00:03:00:6f:d0:27:ea:15:e9:3f:cb:b3:b4:
52:df:e2:dc:c4:66:a2:72:a5:7c:ab:9d:29:52:05:4f:68:c5:
53:e4:e5:6c:d5:a7:cb:d8:ed:32:8f:2b:9d:0f:9e:32:8c:6a:
c7:db:5e:65:e7:bf:20:0e:a5:aa:ae:83:6f:eb:70:88:d6:f6:
18:e0:d5:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKvUguU8VqLoLfZ6rjewTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0
YjZhMmUwHhcNMjYwNDE3MDIwMDIyWhcNMjYwNDE4MDIwMDIyWjAzMTEwLwYDVQQD
Eyg3OTQ4NzRlNjFlMmQ4N2MzOWYzM2JjNDI5YjVjMjUyNjUxMjBkZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ2h8E1FebS2qwdIqLGXvc5PtQO5
nsOgHWK6VeRI9fAUc/BghuA3SriLr6gq9zCyzNInHSOUZ7M7qjSDk7cWaaAY9pv1
HAYlA48WK4B0G46iAKAoOdKkP4TOJS+SH/kaExRvnybZua705xk4+cqW5VCSgWku
A5lSqHX8FyjLXmQ+1oPmPCahDXWbRFjXeAO5vmJotV+VyTYFniYK0ZFovLo9lfDx
J9548ihjWIAjTAx9VDY7wLX3oTLW2a5smh8/JwZ4oeWpEr4cVBvSyGVvf4XlrFqa
K0O1Uqad/nHeigIMRvXX3cO3hFXMlFR9M1XduzCcGApos6gi6nQeGOLmoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlIdOYeLYfDnzO8QptcJSZRIN0PMB8GA1UdIwQY
MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt
NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh
LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrmwxL0x
ElPmefC5rmuRoRIsfvgCG0buK0md4kNlRDFbIpdNldGbCd8fJcBcaHErlC9rxqFu
AdWkEiAKz5wuJ8TDXQ2mKho8Vf9cNezXMdfgDN5XvdHuMVQYpP1JA4j8Gw2Dmj/O
od3Ua9sif3V00zgHYQ+AYJHDwDSBUTyYNS2SfU49C1fmTqgXILyUoa6+7YaftnHt
bIoUnQzMhqGO5sLuBALFC+OIUoBafCF9pbRZfzrDImAOdzEAAwBv0CfqFek/y7O0
Ut/i3MRmonKlfKudKVIFT2jFU+TlbNWny9jtMo8rnQ+eMoxqx9teZee/IA6lqq6D
b+twiNb2GODV9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:19 2026 by rpki-client