Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 4OZMS0M15lh+0ElitSYt8k1pRKYKsLok5gwJ4DzQZN8=
Subject key identifier: 14:35:3E:4F:B9:1A:9C:9B:96:FE:56:6B:9B:6C:B8:54:96:4F:F8:46
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019D9B50E9E5E92C388CBE6FF00B1C038776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 10A0
Signing time: Fri 17 Apr 2026 12:01:04 +0000
Manifest this update: Fri 17 Apr 2026 12:01:04 +0000
Manifest next update: Sat 18 Apr 2026 12:01:04 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: xxa+BzOrMdIBEfC8+W50QQ/9Iuu3eHYGzHY6sM3bWHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e9:e5:e9:2c:38:8c:be:6f:f0:0b:1c:03:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Apr 17 12:01:04 2026 GMT
Not After : Apr 18 12:01:04 2026 GMT
Subject: CN=14353e4fb91a9c9b96fe566b9b6cb854964ff846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:78:2e:44:e7:0b:36:83:36:bd:92:9d:1d:
a1:9f:ed:6a:bf:da:f8:27:c9:ca:60:d7:7b:f6:2e:
14:7d:c9:8a:e5:f9:f4:b8:4e:ff:84:e3:d6:37:07:
40:2b:f8:4e:c9:66:77:67:87:8c:aa:86:b2:f6:a3:
3c:63:be:32:42:34:00:b7:58:08:a6:c8:a7:0a:10:
5a:01:5b:31:76:4d:8b:a9:3d:12:13:05:df:c7:71:
0a:50:87:cb:c9:36:66:ca:39:91:5d:a0:9a:d1:79:
1a:36:9e:2b:7c:0b:be:81:f7:99:0f:0c:b6:4e:fc:
c2:6d:8c:14:5b:f7:25:85:c5:2c:96:72:78:15:6b:
54:8f:19:81:88:89:d7:41:64:5c:a5:f1:16:98:df:
61:81:ef:13:68:4b:5b:33:30:28:87:80:11:56:5c:
99:d4:d2:34:22:a1:80:14:5e:d6:b0:cd:f9:e3:85:
2e:f0:0c:db:dc:96:e7:30:d4:12:1a:4d:30:9a:65:
06:fe:cd:bb:20:53:ef:69:37:0e:d8:c6:9c:cb:51:
0a:1f:96:e0:75:f4:27:d9:83:6a:89:de:bb:8f:6e:
46:16:67:d6:93:15:ba:30:f0:14:39:22:83:87:07:
ba:95:08:49:bb:a0:37:22:71:15:a9:be:ed:47:31:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:3E:4F:B9:1A:9C:9B:96:FE:56:6B:9B:6C:B8:54:96:4F:F8:46
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e2:a2:05:ab:df:ec:3c:21:37:bd:7d:01:f9:c8:0a:fe:75:
43:ea:0b:69:02:2d:7e:27:22:f2:03:5a:9d:98:05:59:4d:62:
57:66:38:c7:67:3a:d6:2f:34:89:68:55:e3:34:3b:57:e4:dc:
4f:82:49:ab:73:b1:c8:c8:e1:19:5f:c7:aa:6b:5d:e0:4e:8b:
0f:a2:27:15:0b:e9:71:4e:ad:b0:69:b2:84:f7:85:fe:f6:ad:
9f:47:b7:a2:0f:b2:27:68:c3:97:a9:c0:42:92:11:22:5d:45:
ed:b4:8c:03:dd:f6:69:99:83:b8:dd:af:34:6a:cd:da:ec:8e:
8a:48:ca:ad:21:1d:2a:46:c9:9f:00:f5:5a:5b:39:06:29:51:
98:4f:f2:5b:7b:01:6c:83:a9:dd:1b:2c:64:da:b8:a6:0f:ab:
f3:32:c1:b7:ea:cd:7c:82:3d:27:da:c2:3f:9d:71:31:31:a7:
15:07:1b:d6:90:60:3a:e6:87:cd:19:c0:17:6f:0c:37:58:e9:
ea:49:c6:bf:f8:ec:bb:12:07:cc:29:6d:61:c5:69:2e:a1:15:
33:69:71:1b:11:d1:31:ab:c5:8f:1a:69:99:09:81:62:02:14:
ca:be:4b:a1:f2:3c:e3:f1:90:6f:7e:f9:e9:a9:9c:69:f5:ee:
07:db:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:20 2026 by rpki-client