Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: IRADwo8v8ewXWRT2Zmk6czYvfhMK7pgb/fMrNXyO1AE=
Subject key identifier: 65:76:FA:7C:D0:11:02:F5:45:FB:86:48:78:AA:78:74:12:FD:3C:B7
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019DA45446FC8890E55F127D938BA7DA3794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0DFC
Signing time: Sun 19 Apr 2026 06:01:19 +0000
Manifest this update: Sun 19 Apr 2026 06:01:19 +0000
Manifest next update: Mon 20 Apr 2026 06:01:19 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: 9SPFCaP/eq1cgqvAHpOHbA3SWlxXDpKNNQdAwUI2bWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:46:fc:88:90:e5:5f:12:7d:93:8b:a7:da:37:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Apr 19 06:01:19 2026 GMT
Not After : Apr 20 06:01:19 2026 GMT
Subject: CN=6576fa7cd01102f545fb864878aa787412fd3cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:32:b1:f7:50:66:16:02:d5:98:45:19:cf:
a2:b7:13:07:49:3a:5f:cc:4e:f3:8a:3f:ea:32:bb:
8e:59:98:0d:21:fd:89:b8:ae:cd:ee:22:10:24:6c:
ea:f1:d6:96:1d:2d:70:09:90:77:76:ba:9e:fa:da:
31:6d:9c:8e:b0:de:59:e2:55:98:a3:37:fb:66:46:
e6:f9:84:29:52:b6:99:be:4c:d9:64:96:76:19:3c:
c0:29:7b:4e:fa:ad:49:df:fb:90:ea:5e:4f:9e:1e:
b9:85:61:9e:82:56:83:de:56:70:ea:b8:56:04:7c:
2a:4e:03:43:62:66:21:3f:e1:82:4c:c0:1c:49:8b:
fa:22:8b:00:b6:94:fc:74:04:2c:58:23:8e:60:44:
f5:c3:ae:53:16:fb:8d:a4:a0:9a:33:d8:aa:7a:2d:
74:a5:e4:e5:52:c7:f6:9c:d1:b4:01:c6:bd:72:ab:
2d:9f:2c:7d:06:58:93:15:a4:a4:2a:d7:99:bb:0f:
48:a8:e7:82:dc:0b:33:6b:1a:75:1d:3a:e7:bd:81:
40:d2:f7:0e:2b:0b:31:bc:a3:b3:e0:26:ff:4e:49:
02:e1:0a:fb:da:95:63:f4:e1:10:e0:64:12:00:26:
a5:4e:32:44:1e:93:d6:66:0a:a7:0d:d2:c1:bd:3e:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:FA:7C:D0:11:02:F5:45:FB:86:48:78:AA:78:74:12:FD:3C:B7
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2d:91:8a:72:40:da:08:4b:e6:11:36:8b:1a:45:40:65:6a:
b3:64:42:ad:5b:a6:cd:cb:b0:df:60:dd:0f:0c:26:9d:4f:26:
76:12:2b:a1:a9:d0:ac:06:e5:ed:c1:29:da:f9:f8:ee:67:87:
71:76:f2:ca:3c:59:1d:e6:7e:22:3f:8f:4b:5b:3b:ab:3d:a8:
1f:06:07:58:b1:fa:ea:47:c6:da:8a:93:d6:f4:67:32:15:a4:
75:12:9a:e7:f9:40:e3:54:4e:b1:e9:31:7d:2e:08:33:a3:7b:
5d:8b:16:e9:3f:b1:3a:6f:6c:4e:ee:8e:c9:66:f9:31:2c:56:
fb:86:c4:6c:8e:ed:48:f6:92:ff:00:71:1c:0f:7c:2a:b4:58:
6e:5d:2a:2e:62:b7:8a:67:9a:8d:36:23:e7:2d:0b:c7:82:8f:
de:9d:04:04:d3:d5:51:91:d7:8d:8f:6b:6b:4b:be:d7:c6:03:
b0:96:63:13:e7:59:6d:ce:f1:c6:e0:b3:e3:d1:8e:03:ce:3d:
58:8f:88:a7:77:3f:36:5c:e5:b7:c0:90:35:46:53:3f:b8:e8:
a4:c1:e3:58:f9:a8:6c:96:c5:c1:2c:57:62:1a:46:96:8f:c1:
07:78:da:c3:96:33:85:25:87:c5:7e:38:19:d4:60:83:8d:39:
27:e0:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:05 2026 by rpki-client