Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: KMP4FeNe74tyv06ic5o7fCPwBOHBFIyQGXksCruFqvw=
Subject key identifier: B7:74:09:9A:5A:3A:87:67:B7:68:DC:C5:81:7D:1E:0C:9A:0A:AB:0D
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019D99D0F11CD1D1A7E45472F103CC06EF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 12A0
Signing time: Fri 17 Apr 2026 05:01:40 +0000
Manifest this update: Fri 17 Apr 2026 05:01:40 +0000
Manifest next update: Sat 18 Apr 2026 05:01:40 +0000
Files and hashes: 1: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
4: 5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa (hash: 8+JveaHaKY6ky/eCt3iJNlrey5awmCheN1pKka0rBh8=)
5: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: w3BBfVxLAEbiKDJn1Axe0rRIOF227UzA8Kvn/asZSHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:f1:1c:d1:d1:a7:e4:54:72:f1:03:cc:06:ef:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Apr 17 05:01:40 2026 GMT
Not After : Apr 18 05:01:40 2026 GMT
Subject: CN=b774099a5a3a8767b768dcc5817d1e0c9a0aab0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:55:0e:67:89:4b:3c:1e:a7:7c:f8:a9:5e:
06:4f:26:88:27:da:75:d8:1c:54:4c:f6:e7:62:e3:
df:2e:09:90:6f:07:fa:08:86:65:1d:0c:3c:2c:35:
83:d8:82:20:f9:f7:77:df:e9:a0:93:31:e0:84:29:
b4:7c:49:ae:81:b9:66:23:c3:82:b9:65:5b:9c:31:
43:1a:db:c5:2b:a9:bd:5c:af:f1:d8:0c:91:d4:fe:
c1:70:5d:bd:ee:9b:e5:44:ac:60:69:c2:a4:45:41:
18:3d:4c:4a:54:e9:d0:c8:40:67:b4:d1:2c:51:57:
86:d9:e2:ae:45:16:e8:db:1b:e5:b8:7d:b0:4d:3a:
04:79:ef:a2:2e:c8:66:bc:e0:21:b2:7b:6b:16:96:
5d:73:7b:c4:d6:fd:4c:d9:04:61:b4:44:da:f1:cd:
b0:70:c5:45:74:42:f3:21:07:bc:d0:c7:80:86:0e:
8f:28:5d:9f:41:5d:77:f2:4b:a4:bd:04:91:2f:bb:
e6:89:2a:51:10:a7:b1:7c:fa:ff:e0:3e:69:00:68:
05:46:49:be:37:1d:b0:af:6e:a7:aa:63:31:0f:81:
30:08:7c:94:83:b6:e5:58:9f:24:2f:22:24:d0:6b:
ec:b4:91:41:f5:cd:8e:40:3f:1f:80:cf:dd:80:a7:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:74:09:9A:5A:3A:87:67:B7:68:DC:C5:81:7D:1E:0C:9A:0A:AB:0D
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1a:94:77:ec:03:b2:1f:f5:7e:ca:ce:56:28:51:9a:4e:39:
91:5a:c7:1e:4a:6c:fd:bc:82:02:8f:da:4c:f0:4d:a9:6c:9c:
05:dd:72:4a:74:bc:cd:b9:2c:23:e7:75:57:bc:1f:9b:8a:fa:
f0:e3:9f:23:d0:92:f5:45:b0:db:07:ca:fc:11:18:cb:35:af:
93:ca:63:7e:51:af:e9:ed:18:17:22:1c:0b:b6:f3:34:68:4c:
38:77:20:db:23:cb:ff:50:6c:0d:d2:1c:78:69:a9:42:3b:aa:
ab:a4:a6:b2:d8:66:ef:72:6d:ea:96:f4:41:a2:2b:0d:f3:30:
2a:c3:db:45:ac:d5:b2:19:63:01:bc:77:4c:8e:69:c3:cc:0d:
5f:58:01:94:27:4f:73:4f:75:41:ea:7e:07:ae:39:7d:83:9b:
4e:8d:f7:3b:7d:7b:6a:b8:7a:57:23:24:b9:75:7a:ce:91:3b:
bd:0a:5d:8e:a6:a5:53:ef:cb:c6:52:21:3e:0a:93:73:24:ee:
c8:20:2c:c7:26:9d:e6:8b:2d:2f:e5:13:e4:19:99:40:9f:6f:
52:a1:7b:6c:df:60:6d:73:a2:45:ae:7f:5e:40:00:9a:0d:d7:
ce:65:34:eb:a2:bc:8b:10:e1:0c:81:3c:69:23:c8:d6:95:a8:
da:d2:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:53:09 2026 by rpki-client