Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: oJtQFuddwGWZ0qkfF+dcnSuuE29W7TgEaU1vazP3P0I=
Subject key identifier: F7:EE:22:FE:B3:6D:90:86:D0:EC:79:06:9B:3E:36:3F:38:DF:DA:DA
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 019D9B50E42F859BD2B302F59EA90CAABDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: 5W8H3hdhAkKM671WDMnpy7cCJuY.roa (hash: NKgi04O8geWs7LDTxcDB8TiJxs4zQ7+9gL3r7rWfDxU=)
2: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: pOJTNJ+myi/IKsBHxG5VNrS1ti7SuMG1u/AI2lbVW54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e4:2f:85:9b:d2:b3:02:f5:9e:a9:0c:aa:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=f7ee22feb36d9086d0ec79069b3e363f38dfdada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:71:bb:d1:ab:1a:59:45:73:8b:f3:c3:f7:
8c:13:20:2d:dc:48:f5:8e:d0:a0:4c:64:74:2e:7e:
b8:88:aa:39:c7:6f:7f:72:31:eb:96:f2:9d:4c:92:
e1:fd:02:6a:8f:ff:c4:58:ff:6b:e0:4e:39:dd:3b:
70:ea:a7:ce:21:f7:4c:8c:6d:53:a6:32:12:39:bb:
eb:f0:5e:9c:f8:77:d9:96:9c:fa:5b:e6:a8:a9:83:
ea:87:13:0c:ed:85:d4:4a:b4:11:62:f9:1f:26:08:
f7:0c:40:07:76:34:aa:04:fc:a6:f1:dd:5c:91:93:
97:77:31:02:0a:7f:b7:54:bc:58:00:77:ee:3f:0c:
f3:08:67:e6:84:f7:69:37:c1:34:41:3c:1f:86:26:
57:a4:49:c8:18:e3:80:6f:b7:01:78:17:fc:c6:70:
13:0a:34:9f:ca:93:4d:dd:d2:a2:d4:ce:46:fb:47:
b5:86:b8:7e:57:97:c2:95:b0:75:e5:31:21:a7:cd:
01:21:42:62:78:d1:f3:3b:f9:00:0c:6d:fb:13:30:
25:b2:bd:fb:19:15:78:e9:37:2b:6b:f3:59:01:82:
91:48:2e:bc:3c:62:4b:61:cc:87:9b:3a:4b:57:da:
a7:e9:27:9e:bb:ac:2a:ee:28:b4:1c:21:d4:ea:f7:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EE:22:FE:B3:6D:90:86:D0:EC:79:06:9B:3E:36:3F:38:DF:DA:DA
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:20:7f:c7:b6:1a:09:56:9a:41:d3:9c:5b:d7:ce:78:2a:
25:5a:da:f5:e2:28:99:41:85:15:db:b9:28:cb:80:2e:e0:a7:
8d:62:e5:5d:35:d6:8e:1e:a3:1f:9b:a9:78:77:0f:1d:93:48:
bf:03:5a:36:c7:44:ea:ac:d4:20:cb:e0:0f:f9:51:df:44:aa:
bd:0c:96:77:ef:b7:55:92:99:50:f0:52:31:ce:a1:a4:7a:5f:
57:d6:92:5e:ea:36:bf:a2:18:da:b8:17:3f:22:f3:eb:b9:ae:
8b:03:5a:9e:e5:c4:b8:77:4d:76:43:35:2d:5f:87:15:fc:18:
9f:e6:10:3c:d6:31:5f:69:d5:6b:fb:02:49:94:7a:c2:07:4a:
5b:5d:6a:07:c2:3a:af:e7:fe:a0:6e:55:64:b2:cc:e6:32:e9:
2a:a9:3b:58:7e:f5:b8:dc:84:18:d5:0a:5b:98:4c:e7:c8:28:
3f:3a:5e:fd:82:bd:8f:ab:23:1f:0e:f3:77:ff:0e:c1:eb:8e:
28:97:2f:c2:43:9f:1b:07:08:de:93:08:0e:0c:1a:39:da:29:
ed:0f:59:7e:e8:f4:71:86:6b:48:ae:da:9a:48:cb:be:18:41:
e0:82:bf:cc:3e:4e:a8:a9:cf:36:28:ad:bd:f9:c3:ef:cc:76:
12:b4:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:34 2026 by rpki-client