Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: 7eVpZRZAVzGjzhnmvnjVhUxEYjfRc8SMm5x3ZLqbun8=
Subject key identifier: 87:89:87:65:23:71:4D:C7:A8:72:3F:87:26:4D:69:F9:69:0F:F6:A1
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019D9AE3920FE4A21A82E5494A63203F2CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 160B
Signing time: Fri 17 Apr 2026 10:01:38 +0000
Manifest this update: Fri 17 Apr 2026 10:01:38 +0000
Manifest next update: Sat 18 Apr 2026 10:01:38 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: Ozccn+pvRMdrFkx76X82uWyCJbZKtmUKn5tFTlPrelk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:92:0f:e4:a2:1a:82:e5:49:4a:63:20:3f:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Apr 17 10:01:38 2026 GMT
Not After : Apr 18 10:01:38 2026 GMT
Subject: CN=8789876523714dc7a8723f87264d69f9690ff6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:9e:d5:c8:35:f7:11:55:0e:39:e8:ce:73:
ee:de:b3:e7:68:e2:a7:56:29:f1:c3:79:71:ee:35:
89:a9:d3:e4:f1:51:72:cf:36:a0:f0:27:52:71:0e:
ee:3f:c2:58:db:59:10:dd:4e:f2:24:fe:f9:7d:d2:
24:5f:6a:93:eb:62:fd:51:03:d5:6c:bc:48:89:06:
95:0c:5a:78:03:d3:9d:d5:c4:a5:84:75:61:66:d0:
99:ba:e1:30:96:6a:8e:4a:e1:24:11:63:cc:67:fe:
be:64:03:24:18:65:90:00:5b:9d:77:7f:53:49:d6:
00:1d:84:c0:3b:d1:97:a4:45:75:17:0c:a8:5b:25:
fe:30:b5:cd:7c:1a:bd:1b:d3:62:9b:2e:e8:30:07:
5b:ec:61:82:b4:af:c0:40:b6:55:b2:03:ac:72:16:
89:22:1b:aa:a4:0f:b9:d7:e5:2c:dc:b5:4d:a0:ff:
49:1f:79:dd:c4:00:b2:d4:70:ff:0c:df:79:c8:a4:
69:6c:2b:b0:2d:1b:99:2a:85:80:cd:87:8c:94:ed:
fd:c9:99:08:45:18:42:27:15:f4:5c:01:bf:2e:58:
57:c9:b4:29:b5:0d:4c:3f:ba:70:8f:9a:9d:8d:12:
34:96:9d:3c:fe:e2:7a:e5:89:bf:2c:a5:1b:f3:df:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:87:65:23:71:4D:C7:A8:72:3F:87:26:4D:69:F9:69:0F:F6:A1
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:ce:24:1d:5a:82:f6:1a:e7:1d:ae:7d:55:31:6d:ce:28:
59:47:60:c3:20:ff:32:87:37:56:26:96:44:8e:f6:24:a0:63:
fb:74:53:16:ce:87:82:ab:bf:d4:56:1d:ad:f4:83:c8:f0:4e:
f7:83:a9:48:8a:e3:dc:80:fd:05:9c:82:7d:a9:10:c1:2e:94:
2e:a0:84:3e:c1:38:35:79:c2:df:9e:b8:13:f7:44:35:38:bd:
27:ae:27:65:a9:3f:d6:67:9d:20:ba:25:65:18:06:65:d5:fc:
f5:71:e8:79:d0:5a:83:7d:e9:15:44:c1:67:c4:0c:32:b1:0f:
67:7b:72:db:d0:09:98:31:d2:0d:8e:36:68:57:f4:e1:08:24:
02:a8:d3:98:27:97:fb:74:46:1b:43:0d:8c:67:d5:66:3e:59:
ae:dc:01:1e:fe:ed:5d:a9:28:8a:b2:96:52:2c:d3:7a:0a:ac:
71:5a:e5:3d:e5:af:1b:e3:67:95:1a:b4:c7:02:ab:9a:44:fb:
d5:03:e7:cf:e9:5c:df:56:43:d8:7d:99:ed:b6:46:49:88:d0:
69:6b:28:ed:b9:3d:37:55:f5:69:37:0a:42:8d:f7:ae:e9:5e:
e8:3f:5e:cf:c4:9e:22:4d:18:34:44:84:f6:40:61:47:67:bc:
69:4c:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:30 2026 by rpki-client