Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: RjIzqHXoVQQVUlxr837Au7eQbfcw/AN4EGMJ5p5x3BQ=
Subject key identifier: F7:B5:13:86:B3:34:1F:FA:21:BD:AF:E4:97:31:CD:00:2F:A1:AF:B8
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019D97E1832CE89E59185421F08C4C98A1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 04AF
Signing time: Thu 16 Apr 2026 20:00:31 +0000
Manifest this update: Thu 16 Apr 2026 20:00:31 +0000
Manifest next update: Fri 17 Apr 2026 20:00:31 +0000
Files and hashes: 1: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (hash: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: G4pnEdXWaLxpJzMxf7EgJzKCADVzoreN01as/GJQhqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:83:2c:e8:9e:59:18:54:21:f0:8c:4c:98:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Apr 16 20:00:31 2026 GMT
Not After : Apr 17 20:00:31 2026 GMT
Subject: CN=f7b51386b3341ffa21bdafe49731cd002fa1afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:10:4b:68:00:b9:54:a2:4f:79:b1:7e:ad:
0a:57:5c:ab:11:1d:ac:0c:6f:53:7b:14:9a:bd:8c:
38:50:25:0e:c3:d4:10:2f:b9:15:5f:e6:99:19:2f:
21:8d:5f:37:b2:ef:aa:fe:46:62:53:07:cc:fe:62:
02:91:76:4b:ee:ba:96:b9:66:01:29:2b:c8:b0:2c:
aa:df:9f:44:27:f9:50:73:fc:84:ab:77:b2:ef:56:
f3:98:96:a6:f0:bd:02:cb:00:4f:86:09:93:d5:31:
5a:c9:80:b1:86:a3:d8:ec:e4:c9:ff:b3:b2:f7:6b:
77:02:79:c3:7b:4d:b4:3f:03:87:09:68:87:88:9b:
bc:c7:63:cf:48:c4:b3:89:69:0f:7c:c0:c0:b7:03:
05:88:6a:6b:f0:c4:e8:51:34:27:92:6e:b7:20:73:
90:f1:7b:ce:73:c7:69:2f:26:4f:c6:38:7b:c5:2f:
c5:a2:2d:12:7a:da:34:12:c5:ba:3a:fa:19:fd:67:
c2:36:e1:af:9a:4d:74:34:16:9a:22:58:d5:75:c6:
21:b5:33:b5:99:d2:05:22:e6:2a:44:ab:56:3e:fe:
0b:b0:86:76:b6:97:01:e6:09:8e:fa:bf:d7:07:89:
e2:17:e3:c1:20:3e:fd:1c:fa:8b:3c:ac:61:60:7a:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:13:86:B3:34:1F:FA:21:BD:AF:E4:97:31:CD:00:2F:A1:AF:B8
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:23:3d:5e:04:e5:ce:85:7e:a8:53:65:6a:d3:d4:2b:a5:4f:
14:a3:22:a3:09:0a:3c:85:5d:d4:ec:5e:0a:a0:9c:7f:a6:68:
04:a5:9a:18:ea:7f:7b:c9:9f:d2:0c:57:7c:90:b8:82:01:a8:
f4:02:24:33:e8:be:0f:c0:16:41:6c:a1:ba:d0:a0:eb:12:8a:
be:0a:fb:54:ed:9e:9d:38:68:48:c8:36:7a:74:98:ad:26:7c:
2a:4b:d1:85:db:d7:60:07:26:40:ce:53:a1:e9:96:a1:a4:af:
ba:f9:2f:9c:70:28:1c:91:3c:29:d2:53:80:41:b8:8d:26:e8:
9f:4d:9d:41:79:43:a7:be:3c:86:9d:1f:8b:1b:9c:ba:29:a9:
95:17:df:6b:6b:34:7e:f8:12:ae:dc:47:66:9b:dc:2c:5c:35:
60:92:b1:26:ae:df:2f:66:6b:96:07:20:ca:6e:00:53:8d:34:
3e:aa:f9:c5:e9:36:e5:87:50:c8:ec:02:de:d2:37:4d:81:e0:
6e:79:55:eb:aa:b7:5d:55:88:a5:d8:25:e6:a0:96:59:eb:ea:
0c:ca:02:15:64:18:f5:7d:63:d9:6a:d0:a9:c8:3a:0a:58:ce:
41:98:04:fc:af:9c:a4:de:8b:1c:07:45:04:42:87:b3:4b:bf:
c3:b9:fe:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4YMs6J5ZGFQh8IxMmKHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi
NDM5MGQwHhcNMjYwNDE2MjAwMDMxWhcNMjYwNDE3MjAwMDMxWjAzMTEwLwYDVQQD
EyhmN2I1MTM4NmIzMzQxZmZhMjFiZGFmZTQ5NzMxY2QwMDJmYTFhZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeYQS2gAuVSiT3mxfq0KV1yrER2s
DG9TexSavYw4UCUOw9QQL7kVX+aZGS8hjV83su+q/kZiUwfM/mICkXZL7rqWuWYB
KSvIsCyq359EJ/lQc/yEq3ey71bzmJam8L0CywBPhgmT1TFayYCxhqPY7OTJ/7Oy
92t3AnnDe020PwOHCWiHiJu8x2PPSMSziWkPfMDAtwMFiGpr8MToUTQnkm63IHOQ
8XvOc8dpLyZPxjh7xS/Foi0Seto0EsW6OvoZ/WfCNuGvmk10NBaaIljVdcYhtTO1
mdIFIuYqRKtWPv4LsIZ2tpcB5gmO+r/XB4niF+PBID79HPqLPKxhYHqFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe1E4azNB/6Ib2v5JcxzQAvoa+4MB8GA1UdIwQY
MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt
ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj
LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxCM9XgTl
zoV+qFNlatPUK6VPFKMiowkKPIVd1OxeCqCcf6ZoBKWaGOp/e8mf0gxXfJC4ggGo
9AIkM+i+D8AWQWyhutCg6xKKvgr7VO2enThoSMg2enSYrSZ8KkvRhdvXYAcmQM5T
oemWoaSvuvkvnHAoHJE8KdJTgEG4jSbon02dQXlDp748hp0fixucuimplRffa2s0
fvgSrtxHZpvcLFw1YJKxJq7fL2Zrlgcgym4AU400Pqr5xek25YdQyOwC3tI3TYHg
bnlV66q3XVWIpdgl5qCWWevqDMoCFWQY9X1j2WrQqcg6CljOQZgE/K+cpN6LHAdF
BEKHs0u/w7n+tQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:25 2026 by rpki-client