Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: JanJC1Ops1GObVGFhvPYrMJjrdWJ+auqDRpBUQ+5rGA=
Subject key identifier: E1:3B:C0:E7:B9:EE:7A:88:F0:75:83:E4:23:83:40:B5:F9:96:4C:6D
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019D9BBE3025F0EF4CCDCCFA06B0E79B6243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 181B
Signing time: Fri 17 Apr 2026 14:00:25 +0000
Manifest this update: Fri 17 Apr 2026 14:00:25 +0000
Manifest next update: Sat 18 Apr 2026 14:00:25 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: /dGlw8Qo7mmdIDN0fZu15OKoZZcxB7u4/NRBnQ4i6ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:30:25:f0:ef:4c:cd:cc:fa:06:b0:e7:9b:62:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Apr 17 14:00:25 2026 GMT
Not After : Apr 18 14:00:25 2026 GMT
Subject: CN=e13bc0e7b9ee7a88f07583e4238340b5f9964c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:01:5c:67:e4:59:81:1f:e1:cb:83:98:67:
3d:04:15:46:9a:b1:bc:ea:3d:dc:58:9c:80:1e:68:
1a:01:95:29:e0:0e:f7:6b:a6:43:5f:bd:d3:13:7a:
01:e8:e0:01:43:a5:f7:21:ef:e8:75:7c:de:83:bf:
dd:1a:a6:64:e3:57:ea:a4:99:81:69:7f:d0:8a:24:
3e:a5:fd:e4:0d:08:d0:62:aa:ed:85:98:4e:ae:03:
4a:ed:4b:9d:5c:15:23:54:cf:89:0d:27:39:5f:62:
b2:74:29:ba:8a:f5:2d:ad:4a:e3:2f:81:18:65:5a:
b6:02:1b:07:d5:59:30:7e:c1:96:da:95:fd:7d:13:
ee:60:86:62:2d:67:d0:6a:5a:46:ce:cd:91:27:e7:
d9:2a:37:1a:bd:e3:29:e3:e1:a6:7c:52:41:09:fb:
f2:64:72:90:01:8e:36:53:3b:1c:0b:bf:cf:b0:d4:
b0:06:9b:41:2a:e5:73:fe:e7:56:64:14:1a:f0:83:
3a:07:b4:0e:e8:38:5b:1e:30:a8:3e:b3:43:24:ce:
e0:0c:4e:4c:1c:54:5c:f0:bf:6f:ef:72:49:b3:52:
a3:79:e3:df:83:e8:31:0f:e7:17:c4:f3:8d:7e:94:
6c:32:1e:57:25:73:5d:9b:0b:e4:cc:92:a2:6c:dc:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:C0:E7:B9:EE:7A:88:F0:75:83:E4:23:83:40:B5:F9:96:4C:6D
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:72:fb:84:25:46:37:21:21:69:c2:64:5b:88:74:ef:87:e1:
cf:25:c0:76:59:09:24:0d:2b:4e:35:de:8a:0f:f7:23:b5:1a:
ee:20:9d:86:d5:12:81:7a:c7:78:1c:45:f7:25:e5:71:4d:bf:
34:02:ad:80:30:cd:f2:2b:c2:02:c8:65:d2:20:e5:35:a0:4e:
83:86:51:c1:2f:c2:5e:37:77:5c:66:25:c1:70:e1:81:8e:00:
ce:d9:69:b1:44:17:a7:95:4d:78:3e:f0:33:05:2d:5a:2d:ff:
81:20:d4:ba:06:b7:70:5c:80:b9:0f:2b:36:bc:57:b5:d0:5a:
c3:2b:29:77:d9:64:27:cd:18:6a:08:de:9f:0c:0e:d4:4a:d9:
db:5d:7f:42:27:39:7f:c1:24:8a:1d:94:64:2f:80:43:6f:b1:
a9:41:0c:0e:94:8c:bc:b2:1a:b5:4c:90:c7:d3:07:1a:0d:64:
31:4a:33:c7:de:c8:cc:c9:56:54:b2:0a:75:e8:02:2d:42:de:
99:22:19:a8:39:c9:f4:f7:8c:24:08:c5:8e:38:99:fa:aa:20:
38:d6:e0:18:ff:35:8b:b5:d8:10:9b:d1:c6:d3:81:4f:32:47:
8e:c1:f7:7c:35:32:e6:75:ea:94:9e:45:cb:45:8c:93:92:88:
d4:c3:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:29 2026 by rpki-client