Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: w/plTggaiRvRRAx2ZJpWEygJb1FYEd7F5EfryAlFoeI=
Subject key identifier: D1:DC:53:84:22:1C:9A:B6:E0:B2:C9:9E:2B:D7:58:95:01:DA:EE:39
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019D9BBE5957513282E7987873847734F6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 12A1
Signing time: Fri 17 Apr 2026 14:00:36 +0000
Manifest this update: Fri 17 Apr 2026 14:00:36 +0000
Manifest next update: Sat 18 Apr 2026 14:00:36 +0000
Files and hashes: 1: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
4: 5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa (hash: 8+JveaHaKY6ky/eCt3iJNlrey5awmCheN1pKka0rBh8=)
5: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: eEChiU11DdNUXOi5DYG8XHArUioYIL6bcNMphnctlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:59:57:51:32:82:e7:98:78:73:84:77:34:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Apr 17 14:00:36 2026 GMT
Not After : Apr 18 14:00:36 2026 GMT
Subject: CN=d1dc5384221c9ab6e0b2c99e2bd7589501daee39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:90:99:be:af:59:91:42:9a:77:bc:0b:54:
9d:b4:6c:50:6a:ff:b9:e6:20:e5:2a:e6:a8:ad:86:
7f:22:4e:21:f7:0b:f4:a7:19:52:77:72:86:89:88:
3b:66:cc:95:21:90:94:ae:75:0d:a2:ec:60:33:68:
1e:78:0f:3f:d8:e2:8b:49:24:7e:28:15:24:1f:f6:
33:df:ad:d7:0b:82:20:ad:d8:f6:1f:55:6b:6e:40:
93:35:3b:4a:b3:78:62:61:32:b0:73:05:d9:0f:56:
cc:ef:ec:9e:7c:a1:63:d4:6a:d9:1e:0e:6f:08:e5:
0c:52:c5:dc:4e:8f:b8:d0:2c:38:6a:32:29:75:20:
c4:80:1b:63:a6:22:ba:55:4c:79:d9:0b:9f:72:05:
62:b2:37:32:5a:42:2c:8f:d7:69:8e:10:db:7f:2e:
dc:34:b9:40:06:fc:fc:f9:fc:f4:6a:9b:27:71:fb:
05:41:07:9e:98:46:fe:1b:a1:b7:8c:58:37:95:25:
a9:7e:5e:08:f6:77:90:91:6c:6b:84:3d:10:96:0b:
7c:4a:f1:48:33:85:d6:07:77:af:23:64:6f:18:5e:
f7:21:f5:95:95:c1:01:15:5a:f6:17:ed:ff:91:7c:
5a:e9:16:de:63:49:f6:f0:5e:81:33:20:0e:9c:e7:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:53:84:22:1C:9A:B6:E0:B2:C9:9E:2B:D7:58:95:01:DA:EE:39
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:54:01:a9:88:e4:e8:87:49:a6:4b:ee:61:86:f3:c9:db:f4:
25:ae:6d:72:84:09:6a:c2:e2:bc:bc:43:48:7b:19:3a:ec:72:
09:1b:25:cd:b9:c0:79:ee:0a:6e:5c:d6:48:c0:2d:09:b9:dc:
ce:6b:3a:b9:ac:59:9f:49:d4:ad:15:9f:9e:50:0f:7b:86:af:
0d:14:32:78:67:07:e0:6f:ba:ed:b8:e6:ad:a5:55:2c:90:cb:
c6:5a:d7:1f:65:18:86:82:9c:57:1e:2d:25:97:8b:41:25:57:
6a:66:33:1b:90:a6:d3:b6:0d:07:54:47:5c:2b:e6:ef:78:0b:
9e:4b:65:34:80:7b:1f:64:95:68:2d:c4:74:cc:07:bf:89:6d:
75:ad:03:95:b6:ad:fd:d5:7b:1c:f4:d9:89:2b:68:15:7e:2e:
5c:9d:55:9a:35:28:a7:78:82:1a:e6:85:6d:7e:eb:46:93:28:
ef:13:b8:37:e0:8a:61:03:e4:e0:f4:02:bb:09:e8:41:54:c6:
c4:76:3c:8b:50:af:f6:73:43:3f:62:41:2d:38:14:bd:35:a4:
9d:3e:de:a9:b8:d4:bf:fd:70:92:1b:41:58:39:2a:00:2f:2b:
ae:a9:c8:70:ef:d0:c7:66:e8:a0:fa:8c:c2:c3:5d:30:55:38:
e9:dc:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:11:04 2026 by rpki-client