Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json)
Hash identifier: 7WzdQ7Tbr8gHsEgZP31utkaxXcbYEaZgi7l+EqJCfs8=
Subject key identifier: 40:76:6E:A3:4A:8C:F8:22:CA:FC:5E:24:58:F4:CC:E8:7D:3C:31:07
Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Certificate serial: 019D9AABFCD230FF43D65EC7087E5C547AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
Manifest number: 05A9
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: PwrlOtm2P7bSTHPu4qJvSXidoSw.roa (hash: H6VRRV9xRJe9egiq6XVsdHUwEnyAitSMRcYsekBGIfk=)
2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: DoC/ReI739WqtLhnorAQuVl8mpA0XHYbFo/gNN7DXEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fc:d2:30:ff:43:d6:5e:c7:08:7e:5c:54:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=40766ea34a8cf822cafc5e2458f4cce87d3c3107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:44:b8:37:6f:a2:a5:df:3f:19:ca:5e:08:
98:1e:2a:d3:18:3b:23:2d:52:3b:bf:6f:52:8b:58:
35:9c:34:06:83:18:3a:b2:78:49:a7:ad:dc:9f:aa:
20:65:9f:0c:35:22:26:2d:14:3b:2f:2e:05:d4:95:
c1:e3:60:c9:92:a0:8a:e3:36:62:66:45:27:ec:d0:
8c:95:11:33:7c:db:f0:86:92:29:65:9c:b7:b7:60:
eb:93:ed:c6:75:3e:34:a1:82:e0:52:36:14:0c:d5:
08:01:94:13:a9:b6:21:0d:49:dd:17:87:95:28:71:
ba:7b:38:e0:8e:68:08:a0:db:d5:bb:71:4e:09:1e:
0f:85:ed:05:e8:4c:7c:3e:4b:0d:72:4e:64:48:f4:
08:6f:41:f0:63:d4:0a:6e:7e:1b:5b:95:c6:9e:2b:
c3:c6:5b:f0:a4:35:40:c1:17:91:2f:06:cb:ec:e3:
33:b7:be:b9:90:fb:b4:b8:14:ce:57:7e:3a:8a:ab:
07:f4:48:33:76:f9:30:fc:db:06:c1:90:20:d8:f9:
7f:3b:f3:d7:2c:b1:43:e9:2c:15:b8:0d:26:b7:c6:
ef:80:4b:1b:eb:5d:02:98:6f:12:17:9a:55:a0:c0:
02:bb:38:64:82:73:2a:d0:ce:e4:ba:67:a2:1f:f3:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:6E:A3:4A:8C:F8:22:CA:FC:5E:24:58:F4:CC:E8:7D:3C:31:07
X509v3 Authority Key Identifier:
keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d0:fd:cc:a9:63:06:7b:19:8a:22:96:ec:2b:87:7b:e4:26:
cd:95:0b:8b:09:de:a8:50:00:c5:27:9a:75:5d:6c:02:fc:33:
99:f2:2d:85:ff:d5:a5:70:b2:96:b9:80:f3:bd:10:64:38:41:
ec:ae:42:56:1c:94:5f:73:50:a0:b4:00:3b:93:cc:eb:10:13:
5c:e6:77:12:e8:02:cb:dc:3b:f9:ac:43:0b:a9:1f:2d:53:7d:
50:af:71:18:9e:88:bd:8a:ea:8a:7d:1f:14:50:d9:73:95:47:
d3:d6:9f:66:10:c6:d2:de:87:50:40:dd:6c:2d:dc:7a:dc:9f:
21:a3:95:e9:d9:8e:6f:08:11:46:76:f6:e0:6e:1a:88:6a:fb:
13:ea:e2:33:de:97:31:cf:67:99:d9:0f:96:4a:fb:ff:f9:e7:
4d:87:77:a4:0e:f5:b6:ed:08:0d:62:11:79:eb:1c:d9:5c:9d:
35:c6:31:f3:a5:e4:8a:a6:6a:76:c9:20:a8:b1:6c:88:ab:13:
a5:a6:cf:7c:c7:77:6b:4f:e4:24:3f:fb:47:23:85:75:ff:9b:
69:1f:62:f4:b2:62:69:b5:7d:99:66:e6:18:7e:8e:2a:df:a5:
1e:77:f5:25:2e:b2:dc:e4:ed:7a:a3:3f:b2:39:30:50:2a:ae:
6a:76:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:19 2026 by rpki-client