Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: w7lt1GqFvkXfhyHHj6O4MZgJLIcDRKfTMb1Y3Mt1Lgc=
Subject key identifier: AC:8D:C2:63:80:78:E3:DC:65:1D:08:69:E7:F0:29:18:91:C3:F8:F3
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019D99993217364E969ED256504F6CB61CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:00:46 +0000
Manifest this update: Fri 17 Apr 2026 04:00:46 +0000
Manifest next update: Sat 18 Apr 2026 04:00:46 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: Wo1Q58PWqS3s1uaREoQIFMGajR3zYEoHYLz0LcAmn/o=)
2: wd-oYNXbGl3iBZHEfglW7P_Xdoo.roa (hash: y4wg+I7p29l8Do6A3p1FTIrG+j7k3dKo1xpUB8J2zSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:32:17:36:4e:96:9e:d2:56:50:4f:6c:b6:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Apr 17 04:00:46 2026 GMT
Not After : Apr 18 04:00:46 2026 GMT
Subject: CN=ac8dc2638078e3dc651d0869e7f0291891c3f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:76:9d:70:70:b9:78:bc:ca:25:43:af:bf:
87:67:3b:d1:9f:9c:3c:94:e7:0a:a6:7f:1b:d4:a1:
cf:a3:b3:b6:1d:6a:9c:30:d6:99:db:58:14:f7:27:
e7:00:2d:4b:48:a0:28:3f:92:03:41:35:98:bd:88:
d8:8a:da:cd:4f:24:2f:1a:95:30:40:59:7d:80:c9:
b2:ce:6c:66:13:e9:e8:90:b1:a7:e0:b6:7e:6c:0a:
f9:a2:79:59:d9:15:72:7a:06:ab:7e:46:bd:c0:51:
e6:6a:21:ea:00:6b:fc:38:7d:2f:1e:ec:b5:9d:f1:
c7:59:c1:20:a8:eb:e3:eb:a7:9c:37:16:a3:24:87:
4a:44:73:08:f6:e1:93:21:03:d6:f9:58:12:b6:45:
2d:cd:43:0f:8b:60:12:00:fe:32:8d:01:6a:e6:b7:
42:ef:46:7f:c7:91:fa:d1:b1:10:35:b0:46:93:4f:
0d:23:f5:9b:42:98:e1:13:4f:ed:c0:ae:73:03:c4:
be:84:a9:74:12:c5:ea:f0:80:28:75:f2:f1:1e:97:
28:11:56:49:b4:3f:a5:56:67:28:b7:fd:0b:ec:78:
af:57:2a:3c:94:c9:35:1a:3f:2f:bf:04:74:d2:d2:
b8:49:1a:44:57:e1:72:08:83:f6:82:35:61:86:62:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:C2:63:80:78:E3:DC:65:1D:08:69:E7:F0:29:18:91:C3:F8:F3
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:27:fe:f0:af:b9:80:df:cb:3f:3c:46:9c:4b:27:9e:02:b1:
f5:cc:22:ae:0c:c7:93:da:d5:a7:5f:44:c2:12:83:20:5f:d6:
d6:9e:73:8c:35:28:1c:8a:e6:14:e9:70:41:89:6e:65:d9:c5:
37:66:52:04:1b:fe:d1:9f:7c:08:2f:b2:2b:5a:08:7f:59:c2:
d4:37:b1:c3:ba:49:e1:db:c3:7e:73:57:91:cb:c9:37:29:8d:
93:77:89:c2:4b:57:82:d5:35:9b:88:b2:19:b3:7e:88:c3:14:
af:97:26:a0:19:9a:aa:fc:a0:fc:b7:d1:07:3c:cf:6f:fb:42:
1f:55:36:04:0a:4d:09:1d:11:31:8f:30:9c:1b:60:0c:6d:b8:
ff:97:c4:c0:46:91:96:3f:0d:a4:06:cd:1b:dc:40:26:65:c2:
6f:57:b9:5e:a8:c1:76:9c:20:1b:7f:e9:25:23:f5:d1:17:35:
38:80:3d:6d:fe:59:34:d8:51:e6:d2:be:6d:d6:ce:0b:18:e3:
54:f2:56:e4:fb:2b:b3:91:c4:5b:c9:3e:4c:fa:50:2d:11:69:
dd:77:f6:b0:43:a0:42:65:d2:52:68:a3:82:30:21:f5:4e:02:
63:7f:dd:02:b3:3e:43:f8:8d:79:83:47:8d:08:62:eb:f8:49:
ce:08:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:10 2026 by rpki-client