Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: IUI/wt1oqo/j5OMtSq+Scib4H3xVZiPfGJ5511K/0Q0=
Subject key identifier: CE:52:1A:2B:93:79:ED:04:16:FC:EC:C4:FC:94:2B:B5:C2:3B:56:53
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019D98BD99A80BC2521C973B666442C20A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0A94
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: T7H4Q2hvikNVcgtqdg7FEf5KRzGbfOjstvo/ncV22VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:99:a8:0b:c2:52:1c:97:3b:66:64:42:c2:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=ce521a2b9379ed0416fcecc4fc942bb5c23b5653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:87:0b:94:c4:67:db:d6:ae:54:ad:dc:01:
a4:51:85:d0:ff:95:96:6f:4d:49:55:27:7b:6c:55:
bb:92:af:27:5c:c3:15:9f:63:f8:1a:8e:cc:b8:1f:
92:e7:41:d8:3d:71:25:6e:ad:28:34:e1:af:00:fe:
7b:35:5a:71:3a:93:45:78:95:5a:c4:55:0f:ef:03:
5e:31:82:2c:1b:fb:89:ca:06:2c:7f:d4:ce:4a:b7:
50:98:13:57:2b:88:70:bb:4c:6a:19:04:fe:0d:31:
e9:ec:30:19:48:27:bd:88:36:0a:fa:f1:3a:e9:0e:
59:e6:91:08:95:4f:77:fe:b9:b7:42:0f:00:d3:61:
b8:a8:28:ea:a9:a1:e0:b4:a0:d3:41:3c:5a:bd:e6:
86:1b:77:71:e0:ce:db:72:19:7d:ab:f0:01:cf:c1:
b5:f7:c6:56:d9:45:8e:6b:8e:d3:0d:27:65:66:a2:
06:52:bb:18:d8:b1:fe:b6:e3:c7:1e:df:35:94:d1:
25:06:e3:8c:de:67:c8:47:94:b4:5a:81:af:a5:23:
6c:80:cd:21:ed:ba:6a:44:1e:d5:ee:00:4d:50:0b:
b1:10:8a:42:69:3f:71:2a:7a:f3:ae:9d:a8:a8:1b:
b9:90:12:44:28:e3:dc:b2:58:55:7a:11:a2:a6:ef:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:1A:2B:93:79:ED:04:16:FC:EC:C4:FC:94:2B:B5:C2:3B:56:53
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ac:cd:8c:09:68:0a:36:31:ae:ea:25:9b:39:a8:c1:2f:57:
6c:be:f5:62:44:8f:13:26:d6:46:8a:f9:5d:be:70:59:ae:fa:
7b:79:7a:3d:fa:94:be:ba:e0:02:1d:62:58:4e:0d:9c:5e:35:
f5:c1:38:44:c5:2b:b3:09:d1:bb:cd:6b:cd:80:f1:c8:32:00:
26:5e:84:aa:ea:97:da:9f:86:3f:1e:43:00:dd:9c:f5:43:45:
d9:5a:35:23:97:65:37:a8:d9:4b:d7:89:1c:fd:64:17:a5:f6:
c2:84:3a:1b:75:48:3d:c8:68:32:32:2b:ed:6a:a8:62:f5:f3:
04:41:6b:fe:d7:fe:a0:7f:a2:95:a0:4c:49:45:61:2e:e2:c5:
ea:f5:7a:6f:41:26:bc:87:43:f2:e1:aa:52:47:34:91:1c:3e:
6a:10:a7:25:43:b1:35:85:16:fd:90:f5:75:86:c5:2d:07:df:
9c:19:c3:f1:93:48:e2:16:8f:ad:4e:e4:34:cb:cf:63:4a:94:
e9:24:a0:63:14:a4:38:80:38:78:b3:a4:7a:21:04:6e:b0:34:
c0:46:56:e4:0b:43:05:7b:ac:f3:fa:4c:10:54:c9:39:0e:75:
7e:b7:5b:29:bd:bd:01:16:3f:fd:b1:e2:2a:3c:a7:b3:13:32:
a5:ed:ab:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvZmoC8JSHJc7ZmRCwgpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4
MjVmMGMwHhcNMjYwNDE3MDAwMDU1WhcNMjYwNDE4MDAwMDU1WjAzMTEwLwYDVQQD
EyhjZTUyMWEyYjkzNzllZDA0MTZmY2VjYzRmYzk0MmJiNWMyM2I1NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UqHC5TEZ9vWrlSt3AGkUYXQ/5WW
b01JVSd7bFW7kq8nXMMVn2P4Go7MuB+S50HYPXElbq0oNOGvAP57NVpxOpNFeJVa
xFUP7wNeMYIsG/uJygYsf9TOSrdQmBNXK4hwu0xqGQT+DTHp7DAZSCe9iDYK+vE6
6Q5Z5pEIlU93/rm3Qg8A02G4qCjqqaHgtKDTQTxaveaGG3dx4M7bchl9q/ABz8G1
98ZW2UWOa47TDSdlZqIGUrsY2LH+tuPHHt81lNElBuOM3mfIR5S0WoGvpSNsgM0h
7bpqRB7V7gBNUAuxEIpCaT9xKnrzrp2oqBu5kBJEKOPcslhVehGipu8RDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5SGiuTee0EFvzsxPyUK7XCO1ZTMB8GA1UdIwQY
MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt
OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5
LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeazNjAlo
CjYxruolmzmowS9XbL71YkSPEybWRor5Xb5wWa76e3l6PfqUvrrgAh1iWE4NnF41
9cE4RMUrswnRu81rzYDxyDIAJl6EquqX2p+GPx5DAN2c9UNF2Vo1I5dlN6jZS9eJ
HP1kF6X2woQ6G3VIPchoMjIr7WqoYvXzBEFr/tf+oH+ilaBMSUVhLuLF6vV6b0Em
vIdD8uGqUkc0kRw+ahCnJUOxNYUW/ZD1dYbFLQffnBnD8ZNI4haPrU7kNMvPY0qU
6SSgYxSkOIA4eLOkeiEEbrA0wEZW5AtDBXus8/pMEFTJOQ51frdbKb29ARY//bHi
KjynsxMype2rXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:33:02 2026 by rpki-client