Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: qRU0rgSNS6lS2t+z9kzV3DLzpPtTGad/5fwK4Hvvec4=
Subject key identifier: E3:67:49:A1:93:D9:5F:17:48:00:74:C6:58:C0:5B:99:FB:AE:22:E6
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019D97E2660C6FC285EF0DE7779FF775FC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 20:01:30 +0000
Manifest this update: Thu 16 Apr 2026 20:01:30 +0000
Manifest next update: Fri 17 Apr 2026 20:01:30 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: IOO3IGbg3gm00rI1vRsCU8sKWe8.roa (hash: 0AcGRGmbErLkr9vaJN/WU2nLbROdp3GeVVZZ5PGFvPU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: 4Io2pvBRtOv9cg8aH+v1fVmzOigpmOkquyj0fx32JOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:66:0c:6f:c2:85:ef:0d:e7:77:9f:f7:75:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Apr 16 20:01:30 2026 GMT
Not After : Apr 17 20:01:30 2026 GMT
Subject: CN=e36749a193d95f17480074c658c05b99fbae22e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:f7:da:13:ff:d8:1e:b5:4d:16:0d:cd:f9:
76:b7:59:18:23:e7:e6:b8:79:64:44:5b:a9:eb:2e:
c1:f7:ff:bd:c8:a2:38:78:49:62:92:44:80:dd:25:
6d:4c:4c:ca:b8:6a:02:48:2f:9d:c5:b1:11:4d:ad:
15:03:09:37:10:a9:ec:d5:55:9e:13:06:43:d9:2e:
43:c1:4d:51:ed:6b:a2:f7:40:55:09:a8:66:ac:fa:
8d:ce:e0:5a:6c:b6:7d:67:2b:a0:2b:77:bd:70:7c:
35:0d:97:eb:0a:2a:91:c9:c9:59:b2:d9:20:2f:77:
60:02:da:d0:d2:45:03:e4:a4:6e:b0:14:e9:6c:40:
91:33:a2:47:19:c9:1e:8e:0a:38:f1:fc:77:11:78:
b7:7e:4c:0a:9c:20:2a:9c:08:bf:cd:b5:e0:75:97:
3f:ce:e6:4d:02:0a:50:02:be:77:3a:4c:6d:aa:d3:
57:86:a3:71:53:ac:27:85:70:fa:27:64:7e:d8:0b:
79:f8:2b:69:a8:da:09:b7:83:c8:c7:e6:e8:6a:91:
0d:0c:df:49:1f:90:57:1a:b0:6a:b1:f2:67:07:05:
fe:c5:96:cf:d8:f6:51:b9:7f:fd:d4:53:23:a8:bb:
2e:0e:e8:57:4a:9e:c7:aa:9b:d8:49:d0:50:91:72:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:49:A1:93:D9:5F:17:48:00:74:C6:58:C0:5B:99:FB:AE:22:E6
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:87:3b:0f:d0:2e:ec:2f:33:e9:a6:3e:aa:86:e5:09:a9:d7:
58:f6:7c:55:1b:d9:52:57:ec:17:44:fa:e3:b3:e0:5c:4b:84:
83:19:d2:f9:7d:3e:e5:82:9f:39:ee:5a:b9:3b:6b:9e:e1:b4:
b4:3f:8c:ea:85:7d:2c:17:3d:0d:10:28:30:62:8c:a9:c5:5b:
ff:78:38:0d:84:2a:59:de:80:e3:f1:71:43:52:fc:37:9d:3a:
76:70:35:85:72:17:c4:e3:26:f0:6d:f0:2c:48:15:61:6c:9d:
22:a1:e0:ba:e0:e8:78:46:09:3b:80:8e:4a:bf:f1:a3:5f:2d:
c5:23:92:5d:46:c0:77:e6:48:6e:3a:a7:8a:31:14:b6:29:5b:
bd:bb:86:9e:53:2b:0f:05:61:30:1f:4a:94:1d:0d:3b:f5:a1:
37:7d:db:bb:17:8a:33:bf:34:f6:0a:b3:de:1d:af:05:8c:ca:
e0:2f:ea:f1:29:84:92:ba:9d:90:3f:98:40:e4:48:c9:1d:93:
e1:42:77:8a:65:cf:67:89:7b:36:ce:59:0b:96:21:f7:65:96:
a0:7c:a4:32:cd:d5:b5:7e:17:b4:c6:95:c5:40:4f:c1:07:fd:
64:ff:f9:fc:e9:c3:2a:b7:62:3d:66:d4:c3:22:52:8b:9b:b1:
1a:e3:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:10 2026 by rpki-client