Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: 1PCqnMRLAya0wr4A0fM/krebmHBb8Ccjd2wiMP9gIX8=
Subject key identifier: 75:B7:23:80:8F:42:DF:79:38:19:3A:A3:50:EA:E9:33:CA:71:87:A4
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019D9A06AE74379247E9C685A356B131ABA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 18D3
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (hash: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs=)
4: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
5: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
6: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: qA+Bu+RdcK3JryZ0dh4+yjJS1MkGk1DME+ABZZDXCag=)
7: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ae:74:37:92:47:e9:c6:85:a3:56:b1:31:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=75b723808f42df7938193aa350eae933ca7187a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:a8:47:1c:71:87:8e:2c:ca:d7:ce:a1:4d:
0d:7b:d7:05:66:9e:b8:76:d7:51:50:df:09:37:ec:
bd:6a:41:a1:da:be:5d:a1:90:02:51:6c:83:90:ad:
58:94:40:02:35:1a:10:cc:8b:e4:cb:ad:e8:35:2d:
f7:97:27:49:85:6b:a7:12:1a:d5:00:92:cb:fc:cc:
75:be:de:54:9d:5e:af:69:67:17:c5:54:8e:81:13:
14:34:21:94:36:96:c5:48:75:47:47:fe:5f:4a:3c:
21:77:40:65:7e:64:98:8d:7a:ec:c8:0e:bc:4c:2d:
07:70:14:b7:22:da:fc:16:98:b1:d5:be:70:8f:21:
15:ca:60:60:fe:82:13:b5:fe:0a:0d:7a:dc:ba:bc:
72:8f:1a:dc:ed:6b:0d:09:36:2b:f5:f7:00:4e:f1:
cf:0e:92:2e:47:c1:95:16:e7:f3:d2:05:29:45:aa:
ac:97:36:90:cb:bf:f0:cc:6d:53:99:9a:c2:3b:71:
9b:a5:1e:c7:c5:0f:ef:03:82:8f:6d:17:70:fe:75:
0d:b3:47:b1:23:21:40:ac:12:b9:b2:c6:20:49:ca:
cc:de:5e:d4:8b:67:e9:41:8c:3e:8d:89:dc:9d:ed:
6e:d5:6c:ec:de:cb:27:8c:c4:3e:f4:8d:fa:4f:f4:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:23:80:8F:42:DF:79:38:19:3A:A3:50:EA:E9:33:CA:71:87:A4
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:db:17:99:d5:09:e9:66:02:6c:05:d4:fb:32:85:e0:c3:
c0:b7:56:d8:0c:ad:f4:30:ba:e2:1e:90:0f:27:81:78:70:01:
5e:37:38:0e:39:e4:7b:0d:95:d0:1e:a7:15:16:c7:4c:5e:78:
37:35:cd:1c:31:e6:e3:2a:01:74:18:e0:41:7c:c7:ce:e2:52:
9a:1f:af:75:91:31:a3:03:ad:30:8d:4e:f8:29:a2:37:ff:e4:
5b:62:e1:b6:54:03:23:90:8d:18:c5:13:29:7f:cb:c0:0a:bf:
8b:a7:0b:7e:1d:fb:6b:dd:11:c8:d6:58:fd:2e:28:3c:62:ea:
5f:6b:0b:35:0c:e1:7b:61:c3:52:14:83:29:b0:d4:5d:05:d8:
87:99:df:ce:5c:50:d8:1e:a4:ee:90:16:32:f4:ca:ee:ca:29:
96:93:6f:7c:69:23:78:80:e6:dc:f5:b0:bc:bf:31:bd:01:77:
b9:b6:76:fe:16:4c:fe:84:2f:59:a2:85:65:06:b3:1d:86:ab:
e0:c7:7a:b8:70:d7:c9:ca:82:8c:7c:6f:c8:64:de:63:eb:09:
35:b6:0b:e0:f9:45:3d:e1:87:88:9e:2a:d3:10:50:ca:61:15:
4b:47:00:e9:fb:bd:7e:16:a7:26:dd:92:11:2b:dc:12:36:14:
6f:3e:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:18 2026 by rpki-client