Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: /fjeNUBX1gVBBr5NIkgCweNsYVqZt8GCYZZoy2ctBIg=
Subject key identifier: 74:22:51:7D:40:CF:0E:CA:40:74:19:27:FB:28:F2:AF:56:44:A6:A8
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 019DA453E06A992DE754C3E649CD2F08649C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 06:00:53 +0000
Manifest this update: Sun 19 Apr 2026 06:00:53 +0000
Manifest next update: Mon 20 Apr 2026 06:00:53 +0000
Files and hashes: 1: MuBqNt1syXndOYY-i5CsiyzlTpI.roa (hash: ePoNVRZGhSsK8En0WwtEIpiiLLOOy80WDIwT7dGHkIU=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: u5EZ1eAJCCn/GkTsXU6sFwYvuJBp623qEd3BC//hyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e0:6a:99:2d:e7:54:c3:e6:49:cd:2f:08:64:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Apr 19 06:00:53 2026 GMT
Not After : Apr 20 06:00:53 2026 GMT
Subject: CN=7422517d40cf0eca40741927fb28f2af5644a6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:99:f8:6d:33:27:d8:15:40:b2:65:a7:3b:
0c:b4:cd:c9:22:9e:83:56:ed:37:a8:f8:77:73:04:
f6:2c:4a:b9:d5:7c:21:f9:a4:03:9c:1d:7e:a1:38:
b4:92:75:e2:63:58:e8:82:4a:2b:9a:55:2d:47:49:
d8:2e:d9:f3:c9:ae:8c:5c:1f:a1:bf:db:a7:f5:36:
93:89:9c:ec:66:91:ae:25:b0:f1:69:73:0d:92:5c:
24:08:53:13:b2:51:ab:ec:c0:8f:6e:f6:74:b0:b4:
b2:f8:3f:ac:1b:1f:78:77:a5:4e:69:0f:a6:9a:68:
45:3f:83:82:1f:7a:32:b7:16:b5:af:ef:69:b8:0e:
71:91:c9:78:68:f0:d6:e4:19:74:86:30:80:19:a6:
87:e6:8e:20:a1:ad:9a:69:82:ce:f2:1d:22:38:14:
ad:2b:47:ba:1c:94:d7:14:89:35:3c:83:f3:5a:37:
d0:25:76:ca:65:7d:ab:d2:61:49:8b:f6:97:94:56:
56:20:36:63:bd:f6:b1:6e:dd:35:2c:0f:e2:c9:11:
1b:5f:98:72:40:09:49:d7:fd:35:e3:60:49:28:00:
49:65:63:7d:5c:27:80:85:d6:61:63:ad:35:3c:01:
18:f8:8f:cf:8f:9f:5e:cc:41:53:c7:a7:ea:7a:cc:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:51:7D:40:CF:0E:CA:40:74:19:27:FB:28:F2:AF:56:44:A6:A8
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:2a:8c:0b:5b:bf:dd:da:b7:f0:43:43:16:e7:37:50:b2:
ed:e6:eb:67:8d:31:32:2a:42:8c:71:02:47:84:71:48:07:e9:
b6:8f:5a:fd:07:8b:93:c9:01:4f:08:e6:3f:e5:57:fd:43:f7:
b4:70:9d:75:a5:e7:4a:36:13:41:77:53:3d:9a:fa:0a:33:c4:
f6:cf:fe:8e:b2:1c:e8:f2:61:8b:96:9f:54:93:7c:51:76:ab:
a9:22:52:5d:ca:70:c9:53:cd:06:93:05:10:5f:96:10:49:b1:
fd:f5:00:7c:ba:be:e6:a0:24:13:94:92:98:6c:aa:7d:ce:92:
4f:fb:f5:aa:32:3d:7d:e5:2f:3a:4a:90:20:ea:9d:91:e0:75:
90:96:c7:f0:b8:60:69:4f:31:84:76:fc:9c:55:5c:f9:8f:bc:
dc:ac:2a:29:72:2e:ca:37:e1:70:43:22:f0:d2:d7:b6:3d:bf:
d6:80:85:24:5c:e8:13:37:0e:f2:7a:45:ae:51:c1:b1:da:82:
64:25:50:e9:8f:be:1f:1c:4c:f7:fc:84:08:10:31:82:ee:7e:
59:7a:f5:42:80:f3:69:b2:0d:df:b0:e9:18:ae:83:c0:0d:b7:
a9:72:10:4d:3d:65:c0:c9:df:97:f4:38:87:ac:9f:8e:cd:4e:
bc:ce:04:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:58:49 2026 by rpki-client