Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: 6Pg+tg2HgkzBGXvl1XY+QfHoxfkcE7XRFdwjkirasYw=
Subject key identifier: B1:44:32:66:E1:B3:2D:DF:00:03:47:C4:95:41:CF:14:9C:CD:D0:BC
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 019DA3AF530FCBC36776B73DE8868FF15629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 03:01:09 +0000
Manifest this update: Sun 19 Apr 2026 03:01:09 +0000
Manifest next update: Mon 20 Apr 2026 03:01:09 +0000
Files and hashes: 1: 27jrzr1xWogH3ddsATux5O5Jw1A.roa (hash: xfv2vIRKihnS8ExH9lEFM1xLctm/mcM8AdL4KJZKGlc=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: 65OhiX68VeICQYtGycQZS4dYzjKOXK2cYNSjiHRWNV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:53:0f:cb:c3:67:76:b7:3d:e8:86:8f:f1:56:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Apr 19 03:01:09 2026 GMT
Not After : Apr 20 03:01:09 2026 GMT
Subject: CN=b1443266e1b32ddf000347c49541cf149ccdd0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:02:d6:5d:00:75:cb:0a:34:f5:31:82:de:
97:01:2e:02:f2:85:bc:c1:92:41:7c:5b:e0:b4:c1:
ec:51:bd:51:69:fa:a6:9d:44:bf:46:4e:7b:09:60:
d5:23:62:a7:f6:89:3b:40:1e:c3:64:f9:37:7b:21:
0a:1d:32:44:08:6e:5a:a0:77:6d:bc:48:46:f4:ea:
5f:fe:cd:0a:64:ab:4e:57:30:c4:8e:d8:da:e0:78:
c3:ad:c0:35:4b:70:54:28:28:c9:a9:8a:e9:45:9b:
5c:62:a2:5b:9c:5e:f3:e8:cb:dd:ae:b9:10:76:d5:
5b:6f:4d:b7:72:78:00:5e:ff:19:2b:8e:5f:5e:ee:
a9:70:ca:98:8c:18:06:08:9d:37:4f:32:03:a5:65:
19:4c:a4:e6:27:fa:98:87:1d:16:22:93:82:97:99:
59:21:30:4c:7a:cc:75:30:8e:eb:76:00:a3:99:af:
b8:df:c5:84:b4:59:ee:67:03:e9:b3:ce:ac:78:0e:
03:1f:2f:a7:34:8b:9f:4e:92:2e:42:80:4b:e4:9e:
b5:4a:8f:65:9d:51:78:fe:6f:55:8d:1a:34:94:f1:
4d:56:3f:2e:40:35:ae:28:24:96:b2:99:94:4c:83:
c7:c1:f2:80:16:82:0e:39:16:1e:c9:ef:2f:7b:6b:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:32:66:E1:B3:2D:DF:00:03:47:C4:95:41:CF:14:9C:CD:D0:BC
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:2b:e6:45:d4:d3:cd:59:3f:9d:86:ef:70:d8:5c:47:3f:
88:5e:58:e2:cf:bc:b6:70:fa:b9:e0:53:37:4e:2a:31:ed:d7:
83:ec:0b:4a:ca:9c:98:a3:9b:2c:d3:44:46:20:f1:3a:a1:d2:
6c:87:5f:a6:dd:97:da:0c:6e:0a:7b:f4:9c:4d:39:a5:8b:2d:
60:a2:eb:3d:9e:5a:9e:18:80:d9:58:4f:72:3e:6e:e3:25:ea:
09:0c:e0:d2:b4:9e:69:1a:f9:e6:8c:7f:0a:46:2c:27:a8:30:
ac:20:5e:ec:33:40:4a:83:35:ca:1f:39:63:5e:a0:a4:84:06:
6c:a8:a1:e7:3b:78:5a:48:60:d7:ae:96:65:f9:2f:b6:81:34:
ab:b6:52:fb:09:44:d2:39:72:d9:2c:17:0f:84:ad:b7:64:92:
10:ee:10:5a:6f:47:d1:fc:43:5f:6c:82:17:c0:8f:e5:1f:5b:
84:60:67:3d:03:b9:ea:57:68:19:e1:6f:25:91:64:c4:20:7d:
84:51:0d:75:06:3f:11:85:ba:7c:4e:6b:25:d5:b8:c6:76:10:
7f:e7:75:ed:ae:04:75:62:bf:e3:91:82:93:18:c8:09:64:dd:
d5:2e:0f:6a:27:78:66:8b:d0:81:51:00:62:d8:1e:55:85:5c:
27:95:bd:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jr1MPy8Nndrc96IaP8VYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4
YTFmODIwHhcNMjYwNDE5MDMwMTA5WhcNMjYwNDIwMDMwMTA5WjAzMTEwLwYDVQQD
EyhiMTQ0MzI2NmUxYjMyZGRmMDAwMzQ3YzQ5NTQxY2YxNDljY2RkMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vwC1l0AdcsKNPUxgt6XAS4C8oW8
wZJBfFvgtMHsUb1RafqmnUS/Rk57CWDVI2Kn9ok7QB7DZPk3eyEKHTJECG5aoHdt
vEhG9Opf/s0KZKtOVzDEjtja4HjDrcA1S3BUKCjJqYrpRZtcYqJbnF7z6MvdrrkQ
dtVbb023cngAXv8ZK45fXu6pcMqYjBgGCJ03TzIDpWUZTKTmJ/qYhx0WIpOCl5lZ
ITBMesx1MI7rdgCjma+438WEtFnuZwPps86seA4DHy+nNIufTpIuQoBL5J61So9l
nVF4/m9VjRo0lPFNVj8uQDWuKCSWspmUTIPHwfKAFoIOORYeye8ve2vhbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFEMmbhsy3fAANHxJVBzxSczdC8MB8GA1UdIwQY
MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt
MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm
LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/Ir5kXU
081ZP52G73DYXEc/iF5Y4s+8tnD6ueBTN04qMe3Xg+wLSsqcmKObLNNERiDxOqHS
bIdfpt2X2gxuCnv0nE05pYstYKLrPZ5anhiA2VhPcj5u4yXqCQzg0rSeaRr55ox/
CkYsJ6gwrCBe7DNASoM1yh85Y16gpIQGbKih5zt4Wkhg166WZfkvtoE0q7ZS+wlE
0jly2SwXD4Stt2SSEO4QWm9H0fxDX2yCF8CP5R9bhGBnPQO56ldoGeFvJZFkxCB9
hFENdQY/EYW6fE5rJdW4xnYQf+d17a4EdWK/45GCkxjICWTd1S4Paid4ZovQgVEA
YtgeVYVcJ5W9HQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:09 2026 by rpki-client