Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
File: O-U4LPdsHE8EZFTfy45VXMlJXIA.mft (raw, json)
Hash identifier: +yLtT9SI4f9V16gxFoOoqRiDqQUdkQuo3z0rfYQgahE=
Subject key identifier: 61:A8:84:1B:61:27:C7:D8:F3:5A:AB:BB:35:16:AF:43:22:7D:A8:97
Authority key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
Certificate issuer: /CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Certificate serial: 019D9A07065DA69E7FCFBEC3ABC8134AA5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
Manifest number: 0119
Signing time: Fri 17 Apr 2026 06:00:44 +0000
Manifest this update: Fri 17 Apr 2026 06:00:44 +0000
Manifest next update: Sat 18 Apr 2026 06:00:44 +0000
Files and hashes: 1: 0UiKB-W2Swet4yZkwt-cEISTHm8.roa (hash: 21qXUq6giXIzo60sm+LjiePUKIsWVBi36a4kVBUwoeE=)
2: O-U4LPdsHE8EZFTfy45VXMlJXIA.crl (hash: Ll9jBq2CCxTqmW9a69eP6zitTtX3fEwxhzq4cYQz/S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:06:5d:a6:9e:7f:cf:be:c3:ab:c8:13:4a:a5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Validity
Not Before: Apr 17 06:00:44 2026 GMT
Not After : Apr 18 06:00:44 2026 GMT
Subject: CN=61a8841b6127c7d8f35aabbb3516af43227da897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:48:8c:d9:23:c2:d0:a7:a6:07:f3:6f:68:
ad:08:55:7c:1c:4a:4e:b8:20:ca:f8:b4:82:6f:d7:
d4:2c:c8:47:09:2d:82:8d:65:c9:84:d8:f2:61:31:
f0:5d:2b:0d:84:1a:aa:d4:43:9e:91:f3:84:b8:18:
37:bb:ac:ed:96:4c:3c:07:a9:07:1a:25:f4:9c:21:
35:d4:a0:be:b1:ce:33:d8:45:c0:ac:86:3c:03:fc:
ee:43:49:ab:04:a8:83:8f:c8:6c:45:f3:d8:5e:18:
68:3b:49:1a:be:21:0c:95:5a:29:dc:7d:f5:f1:6e:
84:1b:8d:89:d6:5f:1b:1d:64:cc:ca:6e:cf:19:fb:
4b:54:b1:65:96:76:73:db:f7:e4:3c:99:8c:ba:45:
4a:18:89:25:ab:cb:66:dc:c1:a3:66:c1:c0:29:82:
51:32:7f:5f:f6:f0:bb:72:e1:13:e7:61:98:3d:a3:
48:ce:53:e8:4d:5e:96:f3:fb:86:9f:fb:db:0e:a1:
0d:76:22:5b:a5:01:5e:11:99:3b:73:2d:ba:a2:62:
20:b6:69:dd:cd:4c:5c:e8:63:b8:a9:bd:b0:bd:3c:
53:0d:e0:4d:8f:09:98:34:bf:75:83:36:bf:30:d4:
96:fa:92:07:05:e6:32:86:fe:f9:66:7d:9d:f7:d6:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:84:1B:61:27:C7:D8:F3:5A:AB:BB:35:16:AF:43:22:7D:A8:97
X509v3 Authority Key Identifier:
keyid:3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:5f:ea:c4:e7:2d:33:ac:3f:92:f4:9d:51:c3:74:0a:0b:
2e:0b:36:3c:78:43:43:fa:96:41:63:56:ee:40:8a:24:eb:bd:
e1:8e:a8:75:a3:9f:85:49:23:b8:19:a9:d5:52:28:eb:79:37:
78:7f:1b:a8:0f:1b:c6:1f:76:39:5e:d4:94:26:0e:05:91:1a:
16:42:91:79:15:51:74:b4:4b:58:79:f7:ed:e2:af:86:f0:07:
c0:40:49:0c:b3:2e:cc:1d:98:a4:70:6b:b7:87:58:27:c2:9c:
85:e3:a6:db:1c:61:34:33:35:5e:64:9a:31:a7:29:a7:2a:45:
e3:e8:4c:0b:66:23:ba:40:4b:57:ce:63:44:b4:b2:ca:96:68:
d4:27:f5:87:21:0e:02:d4:4e:13:bf:a9:b0:a0:d3:b7:e7:48:
b0:8d:18:13:1e:12:7e:0b:38:a5:19:cd:35:69:9a:98:7c:a2:
40:3d:c4:84:9e:1e:da:01:db:dc:34:fd:7a:ff:59:65:78:3d:
3f:8f:d3:03:88:b8:a4:31:73:75:93:97:6a:2d:b7:d5:b2:0f:
6f:51:2a:80:8b:1b:3f:66:e2:16:72:e6:05:96:e8:5b:3c:5b:
1b:e9:96:3a:9b:e4:57:ac:53:29:0b:68:e8:e2:de:17:fa:3f:
2e:6d:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:26:19 2026 by rpki-client