Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
File: oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft (raw, json)
Hash identifier: INdqGkmYVYDgjdzijSXYMuV8/Jli68BBn7lwlTonGGg=
Subject key identifier: 6B:91:DB:16:45:28:67:9D:90:46:B6:56:D2:90:6A:11:FF:6D:00:F3
Authority key identifier: A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
Certificate issuer: /CN=a223d15344c02a551e63f831c604f80dbec4ba10
Certificate serial: 019DA48B7242082CCE124020B988CADC6B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
Manifest number: 0D1C
Signing time: Sun 19 Apr 2026 07:01:35 +0000
Manifest this update: Sun 19 Apr 2026 07:01:35 +0000
Manifest next update: Mon 20 Apr 2026 07:01:35 +0000
Files and hashes: 1: oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl (hash: +fZglNS/gjOMM2s6uH7nruFBSXTjAkyCLvQOSAaTutc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:72:42:08:2c:ce:12:40:20:b9:88:ca:dc:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a223d15344c02a551e63f831c604f80dbec4ba10
Validity
Not Before: Apr 19 07:01:35 2026 GMT
Not After : Apr 20 07:01:35 2026 GMT
Subject: CN=6b91db164528679d9046b656d2906a11ff6d00f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:72:dc:bf:ea:8e:28:1b:c8:0e:8d:62:0c:
42:7e:50:77:c0:6a:1e:03:ef:9a:ca:64:fa:1c:20:
b8:64:c3:ce:9f:14:94:d5:dc:e4:ea:bd:b3:55:df:
2f:1f:48:72:4b:e9:0d:45:10:50:52:45:1d:e6:ef:
09:aa:bc:d6:e9:f3:62:9d:7c:59:d0:cd:ac:56:b3:
4b:e8:ad:5b:b5:6a:72:a7:2a:e2:36:a4:81:b8:e6:
09:45:42:56:72:ea:c5:43:67:9c:b5:70:14:97:2b:
17:43:a0:cc:a0:35:0a:48:96:e1:15:67:0b:7a:44:
35:e8:a7:b6:7d:eb:af:c8:b4:6a:27:0c:9a:32:1b:
9d:a1:ba:dd:32:d5:0c:82:3f:c9:3e:ee:60:9a:6e:
0f:21:49:65:19:62:ce:03:b2:96:3c:30:cf:26:62:
c0:66:77:69:b6:d4:17:e0:c3:37:c7:d0:d7:3e:e9:
1f:3a:e8:11:ed:19:1d:9c:f9:ce:50:d9:f3:9b:f5:
98:1c:b7:83:76:d4:79:51:b3:ad:fa:2b:9a:18:3f:
e8:c5:93:d6:0f:2a:13:72:b6:65:c1:cc:a4:48:1d:
0f:8d:9b:49:c6:f9:4d:de:fa:c5:e0:b0:c8:ce:75:
6e:98:8f:2b:5e:f5:49:29:ad:14:28:25:20:5f:a8:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:DB:16:45:28:67:9D:90:46:B6:56:D2:90:6A:11:FF:6D:00:F3
X509v3 Authority Key Identifier:
keyid:A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:f3:50:9e:c9:31:7c:c0:06:21:6f:86:4f:cb:aa:39:3d:
e0:b7:1c:6c:1d:5f:63:1c:30:34:e4:2d:d8:40:72:8f:d5:29:
69:a6:d7:0e:66:18:5b:08:37:02:aa:40:de:a6:ff:2c:bd:b7:
5f:c5:3c:1e:7e:31:3a:46:e7:ff:59:61:3b:af:2e:40:a4:4f:
eb:43:36:99:d9:9b:03:30:63:f1:3b:e6:ed:12:f7:fe:29:33:
1e:f0:55:1d:bb:27:86:7c:ba:f2:5a:0b:a1:81:41:ed:8d:ad:
da:f5:b0:1b:d5:5c:5f:e8:18:58:4a:b8:c9:60:79:2c:55:f8:
b8:36:cc:ac:4c:91:92:96:e3:db:b6:aa:c4:e2:7a:5e:6c:e7:
c5:a7:ab:b8:5f:f2:45:8d:a0:73:cd:b3:7a:48:82:0f:68:27:
9f:0c:58:3e:5d:fd:f2:bf:8d:3e:6a:64:be:ed:6a:82:e2:80:
e0:70:4c:f1:8f:80:c8:88:c1:83:3d:74:25:45:c1:a3:aa:14:
a6:07:d0:c8:5c:ea:40:c9:61:67:11:6b:81:b6:8d:4d:e4:f8:
25:3d:d4:37:35:21:74:6b:34:ce:6a:a5:32:31:44:99:5b:3f:
2e:89:3a:a5:c2:57:08:32:ab:7c:d6:62:f2:48:6e:5d:0a:1d:
9b:26:28:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ki3JCCCzOEkAguYjK3GtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjNkMTUzNDRjMDJhNTUxZTYzZjgzMWM2MDRmODBkYmVj
NGJhMTAwHhcNMjYwNDE5MDcwMTM1WhcNMjYwNDIwMDcwMTM1WjAzMTEwLwYDVQQD
Eyg2YjkxZGIxNjQ1Mjg2NzlkOTA0NmI2NTZkMjkwNmExMWZmNmQwMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rhy3L/qjigbyA6NYgxCflB3wGoe
A++aymT6HCC4ZMPOnxSU1dzk6r2zVd8vH0hyS+kNRRBQUkUd5u8JqrzW6fNinXxZ
0M2sVrNL6K1btWpypyriNqSBuOYJRUJWcurFQ2ectXAUlysXQ6DMoDUKSJbhFWcL
ekQ16Ke2feuvyLRqJwyaMhudobrdMtUMgj/JPu5gmm4PIUllGWLOA7KWPDDPJmLA
ZndpttQX4MM3x9DXPukfOugR7RkdnPnOUNnzm/WYHLeDdtR5UbOt+iuaGD/oxZPW
DyoTcrZlwcykSB0PjZtJxvlN3vrF4LDIznVumI8rXvVJKa0UKCUgX6jzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuR2xZFKGedkEa2VtKQahH/bQDzMB8GA1UdIwQY
MBaAFKIj0VNEwCpVHmP4McYE+A2+xLoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YzJmYWUtYmQ0OS00YmY3LWJhYTct
ODA5YTJkN2ZmMzQ4LzEvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84YzJmYWUtYmQ0OS00YmY3LWJhYTctODA5YTJkN2ZmMzQ4
LzEvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEnzUJ7J
MXzABiFvhk/Lqjk94LccbB1fYxwwNOQt2EByj9UpaabXDmYYWwg3AqpA3qb/LL23
X8U8Hn4xOkbn/1lhO68uQKRP60M2mdmbAzBj8Tvm7RL3/ikzHvBVHbsnhny68loL
oYFB7Y2t2vWwG9VcX+gYWEq4yWB5LFX4uDbMrEyRkpbj27aqxOJ6XmznxaeruF/y
RY2gc82zekiCD2gnnwxYPl398r+NPmpkvu1qguKA4HBM8Y+AyIjBgz10JUXBo6oU
pgfQyFzqQMlhZxFrgbaNTeT4JT3UNzUhdGs0zmqlMjFEmVs/Lok6pcJXCDKrfNZi
8khuXQodmyYoog==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:51 2026 by rpki-client