Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: 7NLMlyy7VrYNsu2hvIpoHTV4J3WH3ZXtU8INjRszapU=
Subject key identifier: BB:29:AD:E0:80:BA:BC:22:A4:10:03:E0:15:93:28:22:7D:C8:3F:5B
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 019D99D0E7FD1AB7E4166C1B32E021D5FF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 12DC
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: aohgdwrz8QAzAff7mE1f3kiLv1RoTweg7I3m8GsSRHQ=)
2: YMwIWblxxdgG2PErs0i8hdeLN_I.roa (hash: MLrLMjAo1D27u4EH1t9gBEoOSZR3KZexjLZQqipMzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e7:fd:1a:b7:e4:16:6c:1b:32:e0:21:d5:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=bb29ade080babc22a41003e0159328227dc83f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:f1:24:86:79:25:8f:83:b8:78:a5:94:ca:
6a:c1:f8:4c:ec:95:5d:7d:74:2e:7e:3a:f8:f7:54:
a5:be:b2:c2:55:3e:75:be:95:80:d0:48:28:da:ba:
20:49:bb:c9:e2:2a:4d:92:40:09:5f:96:76:98:b1:
dd:93:4d:05:03:68:fa:48:b7:59:ef:24:ed:ea:33:
63:2a:85:54:8b:03:0b:54:e1:47:e7:71:7d:71:32:
9d:86:e2:74:ac:8e:45:d4:37:26:82:f4:65:9c:fa:
ac:d8:a5:95:b8:1c:0b:fe:94:c6:2d:26:f6:f6:0e:
b9:f5:55:d3:19:a2:f9:88:66:90:27:cf:f1:10:d9:
d2:48:64:24:6b:e9:8e:7c:c5:73:6f:fe:26:17:f7:
48:ef:f0:b7:0a:82:a3:54:9e:88:64:32:28:db:3a:
4f:47:55:8b:92:de:6c:c0:ed:5d:30:eb:08:47:11:
66:d7:0a:1f:df:fd:51:cf:1d:2f:e0:5d:c8:98:52:
d2:23:ec:83:c7:b6:a1:a3:2e:8d:f7:2f:29:c1:71:
ef:fc:e1:9a:e2:bf:a1:c1:ab:f9:00:62:3a:73:48:
5e:60:38:a2:37:b9:b5:53:96:e0:50:dc:dc:91:51:
24:db:2e:cd:10:0b:02:0a:f6:48:c6:db:9c:33:b8:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:AD:E0:80:BA:BC:22:A4:10:03:E0:15:93:28:22:7D:C8:3F:5B
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3c:3f:10:8a:3b:55:78:83:5d:63:7e:94:95:81:a8:e3:fb:
67:a9:af:07:e1:42:26:3e:93:8b:c4:6f:d0:10:7b:4a:1d:6f:
7f:fd:90:3b:09:f3:a3:9b:36:a7:fb:67:28:10:19:49:52:28:
6e:91:1d:06:60:9e:b5:6c:d0:db:df:25:8a:c7:fe:f4:3a:ac:
27:0e:a1:ac:31:52:79:fc:a8:ce:d6:fc:8b:cf:72:0a:55:c6:
a0:11:4f:08:7d:fc:41:48:60:8d:68:7a:62:a2:97:e8:f4:ed:
2e:6d:91:8f:43:8f:a1:e3:4d:63:cd:27:0c:b2:95:4f:dc:6c:
bb:46:67:58:0e:6d:33:ff:a5:a8:20:13:cf:64:d0:8f:e6:f3:
d7:50:11:62:e6:c8:49:48:3f:30:ba:3d:cd:c8:3a:37:45:2e:
d6:a8:dd:92:ac:e7:4f:38:af:50:e9:9b:59:de:57:b4:85:14:
53:19:c3:ee:fd:1e:14:9b:86:fc:b7:5e:e6:2b:f2:5d:51:d6:
3b:6c:de:54:af:5e:9b:ca:05:8c:11:da:b2:49:b8:07:c5:81:
ce:84:76:4c:cd:7b:36:b4:d6:a8:c0:9f:56:24:fa:0a:24:b9:
ea:36:97:90:40:5a:95:ee:0f:9b:92:5c:be:71:40:f8:e0:6f:
6c:08:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:19 2026 by rpki-client