Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json)
Hash identifier: MU1YPNXqNhwbTXTcTB2cZ/JikWrDCQ3LaOFjKHYhd/M=
Subject key identifier: CB:1A:67:5C:6C:89:53:2F:27:C7:88:3B:50:72:60:80:8D:D1:26:0D
Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Certificate serial: 019D99627F6934902B12B65746F2E81F13BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
Manifest number: 0EC4
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: SlqPPgEgT65qnw6zCw4B0OdKOjIrzkJdIOIJGoeJZ7Y=)
2: zSlKzVB4Na3PSrvxBdB_0eJnzzM.roa (hash: cuiATN6CsW6UrYic6PJvMAevjZeViQMrG4aNtH1vYrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7f:69:34:90:2b:12:b6:57:46:f2:e8:1f:13:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=cb1a675c6c89532f27c7883b507260808dd1260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:66:89:68:3b:c8:1d:68:2a:8e:e9:27:98:
c9:c3:44:62:9d:0c:df:71:9f:e9:b3:7d:d6:a8:6c:
79:af:cb:3a:60:3b:0f:54:5e:b7:fb:e1:ed:08:cc:
92:8e:a6:a3:06:d9:a5:4e:55:72:5c:39:f8:7a:24:
76:c0:8b:72:2d:2e:03:d0:36:6d:10:7c:e9:5c:10:
9e:9e:4b:2f:47:7c:b8:ed:7c:ab:f9:d2:51:f8:9a:
01:13:8f:bc:de:bb:a3:ee:37:d2:e7:58:2e:ff:64:
9a:83:6d:4f:30:bb:ee:0e:a5:53:2c:65:fe:13:d8:
3b:0e:98:57:cc:53:ea:a3:b5:d9:31:dd:cb:22:7b:
08:31:42:e8:cc:2e:2b:29:ad:c7:f0:ab:42:3c:e5:
04:d9:ac:1d:f7:2e:9e:66:44:bb:b7:1a:97:d0:fc:
37:80:61:fd:0c:76:8f:d9:87:73:86:1f:cd:19:20:
22:58:78:4f:4f:80:de:3f:f9:d2:16:19:65:1d:04:
95:c4:1b:84:c8:24:01:ae:99:1d:e6:01:3b:98:91:
0c:94:1e:8e:8b:10:c6:bc:4d:a5:0f:5f:7c:bb:21:
33:65:31:e8:03:5c:8b:2a:2f:85:79:8f:d6:5e:c5:
a6:d8:87:41:dc:3d:d0:41:c4:3b:13:f0:cf:64:eb:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1A:67:5C:6C:89:53:2F:27:C7:88:3B:50:72:60:80:8D:D1:26:0D
X509v3 Authority Key Identifier:
keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:df:f1:f4:8e:db:4e:77:9f:d5:d9:5c:17:58:7a:99:6a:
2e:81:b6:6c:2b:c1:de:41:3f:18:60:98:f9:df:05:0c:ed:8f:
a1:19:1a:f6:f9:64:2d:41:6c:4b:20:82:d8:ac:09:31:92:d2:
8b:92:0b:29:67:ba:36:a3:c9:82:c1:d1:aa:34:75:2e:7a:36:
7a:d5:c4:76:6c:e4:16:37:46:b5:84:fb:a4:ee:c0:11:dc:1c:
70:4a:b3:e4:6d:75:78:07:cc:e0:66:15:40:39:02:28:6f:0f:
d2:ca:02:c2:fd:ce:9d:09:a6:1f:a4:4b:3b:ff:d2:a6:e3:c0:
68:94:41:da:37:08:4f:ac:bc:77:ae:02:af:3c:7b:dd:5a:b9:
92:9d:4c:20:7a:90:56:d7:cd:a6:cc:05:23:d5:0c:0b:58:8c:
65:45:79:72:a2:8d:be:b4:b6:79:1c:bf:27:b5:fb:97:db:f2:
3c:e3:d0:35:eb:67:1f:49:23:08:16:58:1f:87:1c:01:05:a9:
ff:bd:4d:b8:25:4b:43:dd:0e:52:66:5e:af:94:27:20:94:b2:
3a:9c:d0:06:d6:94:df:b9:f4:47:2b:69:98:c0:e8:91:16:ea:
97:9a:2d:e5:cd:d4:70:36:12:26:4f:b8:41:88:8b:e0:80:3d:
aa:92:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:37 2026 by rpki-client