Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: pMGp/J+EpgeRiPO6qOZuZ5OP3Uk/dDKxfZIxq6q+7Yc=
Subject key identifier: A6:F4:3C:DD:F9:FE:03:B8:9C:6D:57:79:6A:A3:3B:60:76:B0:22:F6
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019D9962701A9F7971C27018CD06B38584C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1483
Signing time: Fri 17 Apr 2026 03:00:58 +0000
Manifest this update: Fri 17 Apr 2026 03:00:58 +0000
Manifest next update: Sat 18 Apr 2026 03:00:58 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: ccIuHbg7VNfc1VN+pXdRsXKdICOsJrqEQFZsBAJayqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:70:1a:9f:79:71:c2:70:18:cd:06:b3:85:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Apr 17 03:00:58 2026 GMT
Not After : Apr 18 03:00:58 2026 GMT
Subject: CN=a6f43cddf9fe03b89c6d57796aa33b6076b022f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:57:c3:f3:cc:02:28:81:e5:8b:63:9d:9a:
36:f0:1f:4e:46:18:56:47:3a:a5:db:e6:7c:67:b5:
9a:19:c6:53:fc:70:7c:bd:66:a8:f6:e4:29:0e:0b:
04:c1:d5:99:90:40:74:b3:72:64:6f:80:dc:8f:de:
b5:ba:bc:f9:57:76:87:53:c0:e7:71:47:bb:14:54:
5b:e2:c7:53:2b:76:0f:92:7b:4e:fd:ad:af:49:7e:
4e:bf:98:47:f9:a1:ed:87:6a:ec:c6:71:3a:26:64:
dc:5d:1e:56:41:df:87:73:6b:e9:b3:81:08:f9:b0:
f1:fd:05:71:c3:33:1a:d9:c6:14:21:f6:9d:f5:75:
28:58:d5:13:22:13:b4:b7:3e:60:97:89:1f:24:f4:
d1:7a:04:d4:b7:b0:e0:ce:3d:af:58:54:42:7f:56:
1c:97:fe:61:b5:64:d1:3e:78:53:e4:aa:e5:64:c7:
da:13:01:5d:83:03:64:71:e0:6b:e1:8b:19:26:28:
64:9f:c5:7c:ae:eb:2e:43:b7:00:d0:20:e1:a4:1b:
8e:34:0a:aa:0d:c7:fd:b8:bb:44:5e:65:79:2f:34:
83:fc:d8:90:31:fb:d0:13:1d:08:e7:a9:b5:12:83:
d9:fd:2d:22:1d:87:aa:23:79:56:af:82:34:26:a5:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:3C:DD:F9:FE:03:B8:9C:6D:57:79:6A:A3:3B:60:76:B0:22:F6
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c4:e9:c6:b1:53:a5:d8:67:d1:78:2c:49:52:d2:80:d5:0f:
18:d2:ce:02:80:00:6b:62:c9:77:7f:83:d6:6e:85:ba:22:8e:
ab:50:07:68:b4:0e:88:8c:65:2c:9e:44:d0:0e:e7:5a:71:20:
bc:30:f8:c1:79:b5:e8:ab:4b:43:57:66:9f:df:ab:f8:de:19:
51:26:77:c5:29:aa:40:1c:9e:b7:26:76:aa:22:76:49:6c:4c:
db:fb:7e:13:3f:0c:29:94:ee:da:fc:fb:6e:84:a6:7a:52:38:
5c:da:e6:49:0e:d9:a2:91:5c:54:ee:26:d3:db:dd:e3:53:e6:
0e:83:88:64:ad:d2:bb:fa:80:70:49:e4:d2:c9:10:38:df:03:
8b:c7:59:e9:95:13:11:9d:a8:d1:21:21:d9:f8:5b:a8:9b:71:
8a:e9:0e:96:8b:0a:2b:94:a7:f0:04:b2:6c:f1:7b:d3:bb:e6:
98:5a:e5:b5:ee:e0:d1:ee:14:79:b0:04:ee:e8:44:97:ac:68:
0c:59:0f:d8:0c:a1:89:e6:d1:a8:69:08:74:f6:45:7a:56:fd:
9d:c2:fd:e2:98:45:d1:d0:d9:bf:cf:38:95:5d:e3:c8:89:73:
1f:77:95:35:a9:55:95:dd:cd:d7:67:30:47:2d:d9:35:13:86:
f9:70:f4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYnAan3lxwnAYzQazhYTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGU0OTkyNDBjZWE1ODg1NDFhN2RjNzRmMzIxYzkxNDE3
NDRiYjYwHhcNMjYwNDE3MDMwMDU4WhcNMjYwNDE4MDMwMDU4WjAzMTEwLwYDVQQD
EyhhNmY0M2NkZGY5ZmUwM2I4OWM2ZDU3Nzk2YWEzM2I2MDc2YjAyMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNhXw/PMAiiB5YtjnZo28B9ORhhW
Rzql2+Z8Z7WaGcZT/HB8vWao9uQpDgsEwdWZkEB0s3Jkb4Dcj961urz5V3aHU8Dn
cUe7FFRb4sdTK3YPkntO/a2vSX5Ov5hH+aHth2rsxnE6JmTcXR5WQd+Hc2vps4EI
+bDx/QVxwzMa2cYUIfad9XUoWNUTIhO0tz5gl4kfJPTRegTUt7Dgzj2vWFRCf1Yc
l/5htWTRPnhT5KrlZMfaEwFdgwNkceBr4YsZJihkn8V8rusuQ7cA0CDhpBuONAqq
Dcf9uLtEXmV5LzSD/NiQMfvQEx0I56m1EoPZ/S0iHYeqI3lWr4I0JqX0NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb0PN35/gO4nG1XeWqjO2B2sCL2MB8GA1UdIwQY
MBaAFKFOSZJAzqWIVBp9x08yHJFBdEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEt
MzZhODA4ZjNkMTRkLzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEtMzZhODA4ZjNkMTRk
LzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssTpxrFT
pdhn0XgsSVLSgNUPGNLOAoAAa2LJd3+D1m6FuiKOq1AHaLQOiIxlLJ5E0A7nWnEg
vDD4wXm16KtLQ1dmn9+r+N4ZUSZ3xSmqQByetyZ2qiJ2SWxM2/t+Ez8MKZTu2vz7
boSmelI4XNrmSQ7ZopFcVO4m09vd41PmDoOIZK3Su/qAcEnk0skQON8Di8dZ6ZUT
EZ2o0SEh2fhbqJtxiukOlosKK5Sn8ASybPF707vmmFrlte7g0e4UebAE7uhEl6xo
DFkP2AyhiebRqGkIdPZFelb9ncL94phF0dDZv884lV3jyIlzH3eVNalVld3N12cw
Ry3ZNROG+XD0Ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:56 2026 by rpki-client