Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: ugZCau41D4b8ip3We/xsMt076ecthPOD9pKG+Cv6U0Q=
Subject key identifier: FC:90:3D:9A:0E:F2:92:8F:E0:3A:14:7C:B7:E9:A1:68:AD:22:DC:7E
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019D992B8DE1F70D1B2F39443943E6A267C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0E0C
Signing time: Fri 17 Apr 2026 02:01:01 +0000
Manifest this update: Fri 17 Apr 2026 02:01:01 +0000
Manifest next update: Sat 18 Apr 2026 02:01:01 +0000
Files and hashes: 1: 1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa (hash: P4rr0sjF2JMQ0Puk//ntxlDU0c1i5ZoIeElt4H2LfSA=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: d5G+SN/DjiDgahcrtYJBwD2GSjl32V7LS+ilIl4lYL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8d:e1:f7:0d:1b:2f:39:44:39:43:e6:a2:67:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Apr 17 02:01:01 2026 GMT
Not After : Apr 18 02:01:01 2026 GMT
Subject: CN=fc903d9a0ef2928fe03a147cb7e9a168ad22dc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:be:c1:66:8b:04:f1:a1:5e:53:3c:e0:25:
98:57:0f:e7:8e:a1:f8:4b:c1:5b:0c:f2:bc:15:a8:
a8:aa:a1:6c:70:80:77:f4:72:22:d9:cc:5c:48:fa:
62:95:d2:26:db:b3:7d:1b:4f:15:09:a7:b5:d1:e6:
fe:fb:af:c3:c5:d3:09:13:c4:b7:dc:fb:ae:34:43:
90:1a:e2:08:f3:a8:b0:37:6c:6a:15:02:37:3d:1b:
fd:f9:78:02:66:e4:44:87:4a:c3:96:84:45:45:54:
d4:1e:be:a3:42:ae:5b:c4:d1:ec:8a:bd:b1:9a:cf:
d3:eb:e3:99:04:07:dc:da:3d:d9:ae:98:43:38:42:
94:d9:d3:78:73:e0:6d:2d:96:3c:93:2c:e4:2d:2e:
3c:01:db:ba:be:be:50:87:44:17:ad:b4:da:99:33:
f1:8c:a3:ec:25:18:b0:43:1d:fa:85:55:73:99:2b:
d1:56:e8:1e:b3:93:dd:dc:03:57:68:b3:62:56:7a:
a9:20:36:b6:8a:a2:d0:d3:90:a6:26:e0:30:01:37:
a7:c0:49:bf:de:95:87:65:dc:7e:82:1c:da:99:c1:
d0:b5:b3:f7:ad:22:00:8c:51:bc:39:fb:b1:1a:6a:
12:be:96:d8:82:21:f7:29:c2:a2:02:42:9e:c9:aa:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:3D:9A:0E:F2:92:8F:E0:3A:14:7C:B7:E9:A1:68:AD:22:DC:7E
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7f:5b:d5:02:5f:3f:4f:f6:78:77:da:d2:5a:77:80:ce:bd:
ad:7f:3e:51:d8:74:a3:84:1a:22:7a:5c:d4:12:e1:78:c0:98:
45:7f:ec:93:0d:74:93:fc:01:11:c3:49:20:c2:de:a1:76:2e:
15:2a:a9:af:2c:28:f4:45:91:79:8b:ff:84:a7:3e:7f:2a:c9:
c2:be:38:a2:b6:94:d5:70:9e:18:52:38:b4:44:82:04:4c:3c:
f3:5c:5e:13:e8:79:77:34:04:04:1f:5d:2c:1c:98:a3:56:9e:
38:a9:02:32:8d:3a:59:90:12:5e:3b:3d:cf:6f:10:c1:70:0b:
ce:65:12:6f:39:9c:47:6f:26:60:1a:da:32:69:8e:32:47:9a:
67:d1:fe:56:fa:f3:01:55:b3:6c:49:06:4f:0a:54:69:17:a6:
71:5e:7a:fb:27:4a:3b:a2:b3:c1:05:01:ec:7e:65:5d:05:6e:
0b:b4:9a:70:e8:55:47:79:37:a2:c2:e8:a7:28:b5:87:e8:cf:
b1:a1:ff:d2:48:d3:00:3c:f7:35:f4:d6:8d:8d:36:ae:2b:74:
34:76:26:c1:b9:dc:2e:4e:a5:42:d0:e3:84:9a:42:7b:3a:a9:
88:d0:08:a6:2d:4c:89:70:6f:af:15:d6:ca:fe:25:b4:df:b5:
45:80:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:07 2026 by rpki-client