Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: iUUcbEtQW9zopjK4H/t6KGxgIE2Bnk9pqUf5pxQeiuM=
Subject key identifier: B6:4D:7C:1D:CC:97:34:13:E8:42:4C:EA:30:5E:8F:58:D7:16:E4:2D
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019D9886ABBBB09820D66321E3F25AE5A290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:55 +0000
Manifest this update: Thu 16 Apr 2026 23:00:55 +0000
Manifest next update: Fri 17 Apr 2026 23:00:55 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: mr3O67dxsUz9wr/0GAd4f5NS2STMyIY71Nj/ioHbQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ab:bb:b0:98:20:d6:63:21:e3:f2:5a:e5:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Apr 16 23:00:55 2026 GMT
Not After : Apr 17 23:00:55 2026 GMT
Subject: CN=b64d7c1dcc973413e8424cea305e8f58d716e42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:65:81:89:e5:25:65:01:72:f7:19:b9:25:
b2:66:a1:52:ab:b6:dc:21:3d:b3:ba:45:96:6e:df:
3c:a2:9e:35:a1:0f:01:84:72:d6:fa:09:e9:f4:88:
03:94:e0:96:2b:62:c2:d5:a4:c6:aa:fe:47:19:b9:
4d:ea:f0:ee:af:c1:c0:e3:bd:31:97:9d:ca:5f:94:
1b:59:3b:8c:96:d2:17:60:b8:a7:af:9c:3e:ea:6a:
6e:34:fe:1d:f7:5f:a7:93:63:45:bc:f2:74:58:91:
2c:bc:1b:b8:3e:2f:64:48:52:02:ff:e4:98:55:72:
c2:ea:e1:3f:62:41:df:4e:e2:b0:9e:42:cc:21:9d:
77:06:22:9d:4b:3c:88:07:7e:8d:73:b2:aa:f8:35:
d0:25:1c:7b:03:ed:a1:3b:e9:de:7f:ba:11:b2:92:
9f:72:fa:e7:0c:3f:84:76:f5:14:6e:98:46:cb:90:
3c:ec:19:f7:ce:2b:7a:96:9a:10:af:39:1e:a1:2e:
ef:bf:51:d6:fa:9d:94:15:75:b5:de:50:52:e8:93:
b9:60:b4:45:1e:c5:45:42:67:72:29:90:30:a3:0e:
36:27:05:7c:c4:1e:f6:12:1e:9a:2d:f0:b7:e2:ef:
29:41:f0:79:75:46:5f:5c:85:fc:c2:56:1a:a3:2e:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:7C:1D:CC:97:34:13:E8:42:4C:EA:30:5E:8F:58:D7:16:E4:2D
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dc:03:3f:7c:16:53:19:4a:6a:c0:36:94:4b:1c:70:37:a9:
c3:d0:23:f9:a9:40:8e:4a:29:eb:7b:2e:50:f6:ba:85:67:30:
da:a1:d4:05:2c:45:5a:90:5d:fd:dc:97:bc:60:54:10:3e:ea:
77:88:ef:1e:4b:01:d5:29:fc:7a:b6:64:8d:49:2f:b9:b2:d3:
27:00:c5:fe:b3:a2:4e:b2:be:f3:6b:b0:97:57:1d:fd:7a:f3:
69:84:ce:5f:8d:63:cb:dd:db:90:62:27:4b:9d:13:88:12:7b:
89:fe:1b:03:bb:f3:85:c8:e2:a2:fd:05:c4:47:91:fa:a2:3e:
99:c3:77:5d:0f:bc:4b:93:84:3d:69:87:91:66:35:34:ba:f6:
61:8e:d9:f5:26:6c:1b:89:4a:84:fc:0d:cd:ba:ea:df:f3:a2:
ef:39:4d:0b:1c:c9:0e:fe:80:a8:df:68:b9:1f:3c:90:f1:48:
d9:de:da:8e:f4:af:59:13:57:3c:52:47:83:40:6b:4e:72:3f:
2e:88:ac:5a:4c:6b:eb:3d:91:bc:c3:d9:98:2a:fe:00:c8:a1:
a5:8d:b4:34:cf:ea:f6:24:48:67:28:84:f3:79:a4:31:f5:e8:
68:d0:23:24:eb:06:62:68:d8:0d:4c:a5:66:d2:3b:a3:2a:3b:
bb:fe:78:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhqu7sJgg1mMh4/Ja5aKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy
OTljODcwHhcNMjYwNDE2MjMwMDU1WhcNMjYwNDE3MjMwMDU1WjAzMTEwLwYDVQQD
EyhiNjRkN2MxZGNjOTczNDEzZTg0MjRjZWEzMDVlOGY1OGQ3MTZlNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJxlgYnlJWUBcvcZuSWyZqFSq7bc
IT2zukWWbt88op41oQ8BhHLW+gnp9IgDlOCWK2LC1aTGqv5HGblN6vDur8HA470x
l53KX5QbWTuMltIXYLinr5w+6mpuNP4d91+nk2NFvPJ0WJEsvBu4Pi9kSFIC/+SY
VXLC6uE/YkHfTuKwnkLMIZ13BiKdSzyIB36Nc7Kq+DXQJRx7A+2hO+nef7oRspKf
cvrnDD+EdvUUbphGy5A87Bn3zit6lpoQrzkeoS7vv1HW+p2UFXW13lBS6JO5YLRF
HsVFQmdyKZAwow42JwV8xB72Eh6aLfC34u8pQfB5dUZfXIX8wlYaoy6DkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZNfB3MlzQT6EJM6jBej1jXFuQtMB8GA1UdIwQY
MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt
MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3
LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNwDP3wW
UxlKasA2lEsccDepw9Aj+alAjkop63suUPa6hWcw2qHUBSxFWpBd/dyXvGBUED7q
d4jvHksB1Sn8erZkjUkvubLTJwDF/rOiTrK+82uwl1cd/XrzaYTOX41jy93bkGIn
S50TiBJ7if4bA7vzhcjiov0FxEeR+qI+mcN3XQ+8S5OEPWmHkWY1NLr2YY7Z9SZs
G4lKhPwNzbrq3/Oi7zlNCxzJDv6AqN9ouR88kPFI2d7ajvSvWRNXPFJHg0BrTnI/
LoisWkxr6z2RvMPZmCr+AMihpY20NM/q9iRIZyiE83mkMfXoaNAjJOsGYmjYDUyl
ZtI7oyo7u/541Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:12 2026 by rpki-client