
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: wIcrJs0TX31T87oXVNUKeEJEkb2BW0BtlZX3wTWMWp0=
Subject key identifier: E9:F0:D5:6F:A6:B8:8C:90:25:BB:C5:3D:96:0C:BB:E5:64:11:83:31
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019D9D0801B9970DD4043E8A62DE4D8F39E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 92
Signing time: Fri 17 Apr 2026 20:00:40 +0000
Manifest this update: Fri 17 Apr 2026 20:00:40 +0000
Manifest next update: Sat 18 Apr 2026 20:00:40 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: 9Sx9z+eUr0uT1CSM3pMJ3+uX/Ugvp/a36630ZviCUrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:01:b9:97:0d:d4:04:3e:8a:62:de:4d:8f:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Apr 17 20:00:40 2026 GMT
Not After : Apr 18 20:00:40 2026 GMT
Subject: CN=e9f0d56fa6b88c9025bbc53d960cbbe564118331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:62:bd:35:db:55:60:de:6e:94:bf:d2:1a:
af:41:d7:d1:b7:3c:da:35:03:dd:35:f2:c7:46:e1:
fb:1f:1b:09:e3:af:4b:b7:b9:28:bb:04:d8:ce:aa:
8e:86:7a:0f:11:7b:a6:cb:62:13:c3:02:ed:f9:0f:
5e:e7:73:61:1d:19:ea:35:be:8c:61:d2:4b:ff:cd:
02:2e:42:44:d2:34:e5:9b:84:e8:02:d1:bd:93:3e:
16:26:ce:1e:c9:79:e2:97:a7:2a:84:74:75:ab:c9:
c2:b6:d5:eb:00:fd:02:1c:ef:f1:52:f1:fc:f0:ee:
b8:92:ff:cb:46:b0:52:11:c8:36:ff:b6:e7:d9:20:
b7:e0:90:27:50:5c:ff:9e:e4:50:8e:ee:31:98:19:
0b:69:c2:59:54:ad:20:88:f1:9e:50:08:41:59:e1:
c9:c1:a7:48:0c:2a:f5:18:0f:13:81:79:12:2c:5b:
c3:0f:fa:15:51:5e:3f:be:f1:cf:84:34:cf:5b:49:
60:c5:1f:81:a3:92:a4:ac:f7:1d:ff:3a:8a:15:cb:
9d:24:55:aa:36:61:8c:96:38:98:ba:6f:68:10:51:
f7:a3:65:6f:bb:e8:ad:7e:49:a6:ce:c0:c0:6b:3d:
0c:a5:e4:8b:03:df:ca:8b:a2:aa:2c:87:4d:82:af:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:D5:6F:A6:B8:8C:90:25:BB:C5:3D:96:0C:BB:E5:64:11:83:31
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9b:59:1d:fa:5f:3b:00:23:fb:51:37:d2:d8:09:60:16:f6:
a1:88:c4:55:1e:39:1a:11:68:e4:c4:72:4f:f1:c8:c7:d2:09:
7c:83:42:71:5b:af:f2:bc:c3:8c:8c:e7:f5:c1:73:19:40:df:
69:ef:0e:22:b4:47:bd:23:15:92:74:19:7a:cd:7a:a9:0a:bd:
a4:6d:10:54:54:6e:b1:e0:6a:ae:02:2e:a6:e1:e0:41:59:52:
47:f9:bf:bc:9a:89:2c:7f:55:f5:8f:3b:6f:77:be:7f:94:de:
32:1a:26:43:1b:c8:06:4c:4d:a5:84:32:40:5c:57:9a:86:95:
66:ac:1e:24:c7:28:73:3b:03:63:4a:33:25:19:30:c1:84:59:
5f:9d:90:36:3a:f6:5d:5e:66:2a:3e:f7:0b:0a:d2:92:53:59:
e9:27:e4:32:4b:fc:d6:e9:d5:3a:9f:9e:97:af:7e:55:59:94:
e9:74:07:88:90:f0:15:95:24:b6:36:0a:ee:b7:b4:e5:9d:d4:
4b:67:90:72:96:ec:6a:b4:14:4a:14:69:2b:3c:77:81:dc:43:
11:e7:e5:58:90:63:c0:b0:b5:2c:42:3e:59:13:b9:31:bc:49:
0c:ad:07:8e:eb:df:05:b7:63:41:64:53:4d:50:3f:a3:8c:94:
30:25:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:59:58 2026 by rpki-client