Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: ItiIGQhhKcosjNLuzwWJjuABNL1cgNNeTRFfqi71YFE=
Subject key identifier: 71:49:52:3F:D1:0A:3F:1B:23:BF:48:E1:89:0B:27:3C:4A:F4:6D:25
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019D984F905A0AC5F6323981A9AFFFD8AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0E07
Signing time: Thu 16 Apr 2026 22:00:44 +0000
Manifest this update: Thu 16 Apr 2026 22:00:44 +0000
Manifest next update: Fri 17 Apr 2026 22:00:44 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: ECCOLg763N6YiRg7jxcW4+LRaYBstaMJ9Yg4jS2atvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:90:5a:0a:c5:f6:32:39:81:a9:af:ff:d8:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Apr 16 22:00:44 2026 GMT
Not After : Apr 17 22:00:44 2026 GMT
Subject: CN=7149523fd10a3f1b23bf48e1890b273c4af46d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:7c:09:1f:04:ac:ee:eb:60:1c:35:db:59:
ae:05:66:d5:b3:fe:1c:f9:37:e6:d9:3b:ba:42:1f:
92:4a:a8:3e:7b:20:cf:bb:3b:d0:03:42:66:e5:81:
22:62:58:63:a3:79:b9:07:8e:6d:8e:61:fb:57:5f:
f0:3a:c7:67:2f:6e:d6:56:16:8a:e8:cb:7f:d2:d5:
2f:5c:61:2e:71:ef:c5:b0:26:f4:8e:dc:64:fd:da:
78:09:27:97:94:4c:bf:e2:56:a6:ee:e3:02:4e:37:
68:a8:f3:e0:01:e4:83:5d:11:ad:bd:6b:1e:71:b4:
5b:77:41:18:3e:cd:08:9e:15:67:4c:7f:0e:83:e6:
4e:cd:45:b2:fc:88:18:72:5d:98:23:ba:58:f5:96:
4b:8f:dd:4c:3c:96:40:de:6b:a6:d4:5d:73:d3:b9:
1c:11:b6:1a:90:3a:55:20:6a:32:12:f2:ff:47:3e:
8e:93:fd:7b:80:7e:0b:12:8e:b9:9f:7e:d8:20:bf:
6d:f8:a6:65:91:e8:89:a4:64:a8:e1:dd:04:9c:89:
42:02:56:89:7d:d9:cc:c8:69:e4:49:58:21:c5:fb:
7d:fd:76:76:a8:df:29:3c:4c:f3:41:39:d7:c4:2b:
75:15:61:29:5a:4b:6c:c5:7e:70:07:1c:f8:fc:ba:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:52:3F:D1:0A:3F:1B:23:BF:48:E1:89:0B:27:3C:4A:F4:6D:25
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d2:05:a5:b9:10:e4:dc:a8:df:c1:86:c4:d4:37:9a:da:77:
d9:31:e5:05:e4:bc:56:32:d6:89:89:4d:76:4c:82:37:0c:02:
43:a8:07:d1:1d:37:ff:9c:67:29:c4:57:87:82:30:d9:23:13:
a3:30:80:c4:37:d3:39:90:82:1a:e0:aa:f7:22:57:47:1f:b4:
80:f7:61:64:6e:26:49:a6:ab:44:3f:cd:ef:da:59:1d:5d:97:
92:63:8c:1a:b6:5b:55:f9:1d:32:52:76:62:6e:34:71:f9:0e:
ad:be:a3:9f:3b:1d:46:a4:de:9c:1c:ef:cc:e4:1f:8f:cd:7c:
a6:50:df:8b:42:3e:9c:c3:72:5d:29:74:2e:48:3b:b2:82:6a:
e1:9b:93:04:91:88:cd:78:19:e2:56:cd:66:7c:14:62:db:25:
1c:33:be:25:e2:c4:dd:cd:16:79:2e:7e:5c:35:09:4b:91:6c:
8e:96:cc:8a:ea:63:57:86:1e:00:44:f4:0a:ff:1c:74:68:48:
3b:34:71:1a:6a:9a:f2:3d:7a:ea:9d:40:20:2c:2c:53:4c:83:
69:d0:98:a7:e1:02:6e:2d:6c:91:55:2b:a4:fa:ae:35:b5:cf:
c7:56:ff:7e:ac:d9:89:ff:0d:60:23:a6:fe:07:ae:39:90:1c:
38:ea:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:42 2026 by rpki-client