Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: OCwGLDuNVVeNhGPlGa/+2w7bqOlaoaST9YPose9UT2Y=
Subject key identifier: 1C:04:28:1B:DC:21:74:E0:97:8A:0E:2C:55:DE:4C:82:3A:40:AC:3A
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 019D98F54F1FE9BF3A367956B40A6A5BCB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:46 +0000
Manifest this update: Fri 17 Apr 2026 01:01:46 +0000
Manifest next update: Sat 18 Apr 2026 01:01:46 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: sSJTJcOAmNO8CczvhckV/FIMS/5JY1r4WKwwr6g18y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:4f:1f:e9:bf:3a:36:79:56:b4:0a:6a:5b:cb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Apr 17 01:01:46 2026 GMT
Not After : Apr 18 01:01:46 2026 GMT
Subject: CN=1c04281bdc2174e0978a0e2c55de4c823a40ac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:fd:18:35:89:02:7a:fe:57:2c:4a:f9:15:
2f:55:92:2b:aa:2a:76:c5:48:a1:d7:34:68:08:7c:
19:89:19:98:da:78:7f:38:25:e2:52:50:00:30:81:
54:2c:28:3e:f1:62:ff:ee:d5:55:9b:b8:1e:3b:e7:
02:3a:9b:a7:53:f1:52:37:e6:c6:7b:4e:04:6d:5c:
b1:17:79:3b:9b:2d:c2:17:35:e0:e7:55:d1:a9:5b:
ac:0b:77:bf:4e:d4:b8:8a:3e:e3:ab:1b:86:40:db:
60:5f:30:df:3f:a4:33:c3:4a:a8:26:1b:95:ec:00:
52:b9:f3:a1:fc:39:64:f5:5a:3a:25:19:b5:38:71:
cc:14:b6:1a:10:fa:70:8e:91:29:c1:9d:10:07:e0:
71:ad:ef:83:ab:a0:65:05:9e:c6:5a:9a:0d:63:aa:
fa:7d:12:35:d2:5f:83:3f:94:89:95:fd:5c:a5:d6:
62:9a:50:89:9b:dd:d5:2c:b7:55:06:ae:94:c0:a6:
d1:7f:db:97:be:34:eb:eb:26:16:fc:a0:c7:3d:c4:
5b:41:b4:eb:e6:1f:af:dc:47:07:7f:39:7b:db:0a:
38:b7:b4:b9:6e:25:d3:66:c6:09:4c:63:6d:b7:fd:
b9:a5:a9:69:a5:8b:ce:fd:56:60:3b:e2:78:f3:5c:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:28:1B:DC:21:74:E0:97:8A:0E:2C:55:DE:4C:82:3A:40:AC:3A
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b9:08:7d:c5:23:a3:2f:2f:b7:a6:8f:4e:4f:fb:a2:fc:08:
21:ee:b1:e3:70:7a:3a:58:79:2c:d7:69:d8:e8:71:32:cf:a1:
00:cc:e3:4e:54:24:23:7c:50:af:b0:98:8a:a2:f9:b3:87:69:
c2:e0:41:7b:e1:2e:d3:e0:87:0f:9a:8b:8a:fe:0c:8c:33:bc:
17:a9:77:59:4a:b9:d7:37:7f:12:93:d2:07:dc:33:5b:05:89:
96:cd:b4:cc:3b:ad:21:45:02:f2:46:d8:7f:17:8e:0a:c0:3b:
00:f9:83:24:f9:d0:84:09:2f:69:1a:87:ee:69:a7:d8:0f:d2:
fe:ed:c0:56:e9:20:a0:2e:98:e3:ae:ce:7d:34:4f:de:ac:0e:
1b:40:d4:1f:e1:de:a8:c5:75:54:ec:36:49:ea:d7:8b:db:ea:
03:ea:a0:7f:e0:49:8d:95:ad:73:35:88:5d:fc:67:14:48:d4:
2d:3f:61:42:1d:90:fa:bb:f9:1d:40:8d:e4:51:44:e1:02:2c:
fc:da:29:59:dd:da:ca:da:7b:c9:3b:f7:48:23:0b:0b:9b:91:
c8:a3:60:f7:95:38:8d:b6:34:ac:23:76:83:76:0b:11:4d:ca:
8d:b5:9a:50:92:1f:db:1d:7d:35:bd:f8:45:b0:14:0b:c3:e0:
44:e8:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:48 2026 by rpki-client