Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: OgxkctGemdKvVpvrzO7nN7AMvVkeeiv94l6V5NCZYro=
Subject key identifier: 41:65:A6:61:05:22:F5:5E:63:CC:1A:3B:C4:5F:84:EF:CA:8C:16:1B
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 019D9961FC47D8736FC0B24E4F470902EC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:28 +0000
Manifest this update: Fri 17 Apr 2026 03:00:28 +0000
Manifest next update: Sat 18 Apr 2026 03:00:28 +0000
Files and hashes: 1: XYUJ8YEpWRVKnEs1lud3ZGRwErY.roa (hash: ODygtNmaduKQgGbNRUfrQ+Q4mGtK3q6vsVkBCLpr8rg=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: aHa1hBhjKazw9CiiJXQF9us6ZYPRfjMu7RwEQkYTzOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fc:47:d8:73:6f:c0:b2:4e:4f:47:09:02:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Apr 17 03:00:28 2026 GMT
Not After : Apr 18 03:00:28 2026 GMT
Subject: CN=4165a6610522f55e63cc1a3bc45f84efca8c161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:cb:33:d4:c5:0e:fe:f0:e0:16:5a:52:1a:
29:67:de:11:7a:c5:88:80:fe:2d:81:d8:91:a4:4e:
ec:92:e6:43:c9:27:21:97:1b:bd:26:2b:c0:aa:89:
48:e6:fa:eb:15:ba:f7:50:de:54:7f:b7:ac:97:9a:
ab:8f:e4:b2:dd:7d:76:ad:e1:4c:21:29:44:44:22:
bb:33:46:11:d5:12:f5:af:e3:f9:44:27:8b:31:f1:
47:61:10:eb:a8:d9:51:ea:78:a6:b0:24:8b:99:f2:
b6:25:c8:26:22:7c:47:7c:bf:61:03:2f:75:45:23:
67:12:ea:5e:be:fb:95:b1:8e:85:3c:d0:c3:26:32:
d5:62:8e:46:e9:d6:20:8b:db:15:1d:72:9a:16:6e:
56:89:2f:14:0f:e4:be:29:1c:8a:c3:99:be:a9:03:
d1:55:64:c8:b8:8c:25:ea:ae:2f:c7:f6:61:d2:3f:
bf:fd:0c:e9:1d:24:be:24:59:c6:96:99:b2:c5:47:
de:bd:d2:fe:17:b1:a6:a7:8d:41:7c:33:40:b1:fe:
41:a3:14:00:78:81:f6:49:2b:a7:dd:00:0d:14:83:
a1:95:0e:76:29:aa:ea:78:0b:8d:b7:ee:34:51:88:
23:0f:a0:08:41:bb:60:40:60:aa:fc:b6:7d:d3:72:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:65:A6:61:05:22:F5:5E:63:CC:1A:3B:C4:5F:84:EF:CA:8C:16:1B
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:02:4f:ed:60:bb:89:62:20:cf:4c:a8:d5:e9:0b:c7:e5:
3c:28:34:9e:4f:27:f6:82:3d:ac:68:ae:46:80:67:77:9a:b7:
02:c5:bc:a6:c4:ce:d0:f9:cc:2a:2c:0a:72:57:fd:ac:23:a4:
d3:95:94:8d:ce:1e:ac:91:70:a8:bf:90:8f:ca:5f:dc:9e:47:
d7:64:0c:37:10:29:9c:f8:8c:0e:d0:2b:8e:11:b7:aa:02:7a:
7c:cd:a8:08:70:22:1e:23:ee:4a:5b:28:bb:30:e6:06:6b:18:
f6:50:df:1b:81:14:8e:be:7b:8a:73:09:4d:47:52:74:12:8b:
e2:c6:07:77:e0:26:12:48:31:3c:52:bd:56:b8:2b:f7:91:31:
c1:36:ef:38:93:7d:92:9c:b7:35:90:d3:0a:d6:26:a2:3c:36:
49:15:f4:9f:80:c9:e7:67:82:d8:c1:2e:cb:d1:66:a7:a2:2a:
b1:a7:23:8b:15:91:0e:96:4a:19:a5:9c:90:ce:db:5a:23:e4:
e5:61:08:66:c2:fe:c8:26:b5:03:32:0f:14:b3:5b:2a:e2:10:
46:59:75:c4:13:3b:80:4d:10:fe:fe:a9:61:df:c9:6b:75:51:
d5:8f:99:2d:98:2f:41:78:c1:4d:a7:ab:a9:15:e6:a2:bd:e6:
7d:2a:61:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfxH2HNvwLJOT0cJAux/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjlkNGQyNzU3MmVmNWE2YTZkYmVjZDc5MmVlZjk4Y2U5
MDcxNmQwHhcNMjYwNDE3MDMwMDI4WhcNMjYwNDE4MDMwMDI4WjAzMTEwLwYDVQQD
Eyg0MTY1YTY2MTA1MjJmNTVlNjNjYzFhM2JjNDVmODRlZmNhOGMxNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yjLM9TFDv7w4BZaUhopZ94ResWI
gP4tgdiRpE7skuZDySchlxu9JivAqolI5vrrFbr3UN5Uf7esl5qrj+Sy3X12reFM
ISlERCK7M0YR1RL1r+P5RCeLMfFHYRDrqNlR6nimsCSLmfK2JcgmInxHfL9hAy91
RSNnEupevvuVsY6FPNDDJjLVYo5G6dYgi9sVHXKaFm5WiS8UD+S+KRyKw5m+qQPR
VWTIuIwl6q4vx/Zh0j+//QzpHSS+JFnGlpmyxUfevdL+F7Gmp41BfDNAsf5BoxQA
eIH2SSun3QANFIOhlQ52KarqeAuNt+40UYgjD6AIQbtgQGCq/LZ903K5UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFlpmEFIvVeY8waO8RfhO/KjBYbMB8GA1UdIwQY
MBaAFKMp1NJ1cu9aam2+zXku75jOkHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUt
ZWUxNzg1NzhkY2I1LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUtZWUxNzg1NzhkY2I1
LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMI4CT+1g
u4liIM9MqNXpC8flPCg0nk8n9oI9rGiuRoBnd5q3AsW8psTO0PnMKiwKclf9rCOk
05WUjc4erJFwqL+Qj8pf3J5H12QMNxApnPiMDtArjhG3qgJ6fM2oCHAiHiPuSlso
uzDmBmsY9lDfG4EUjr57inMJTUdSdBKL4sYHd+AmEkgxPFK9Vrgr95ExwTbvOJN9
kpy3NZDTCtYmojw2SRX0n4DJ52eC2MEuy9Fmp6IqsacjixWRDpZKGaWckM7bWiPk
5WEIZsL+yCa1AzIPFLNbKuIQRll1xBM7gE0Q/v6pYd/Ja3VR1Y+ZLZgvQXjBTaer
qRXmor3mfSphOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:21 2026 by rpki-client