Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: FxPTWaEGl3IPkEMk+b9qpackr1X4Q3bGBTA+HqdrqK4=
Subject key identifier: 78:A5:02:D6:75:40:13:F2:7A:FA:18:9E:7C:36:8F:ED:C7:02:87:02
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019D9962A610F4C1FCA6471DB82560B653DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: K48HCtvDUbdasWitObjl0jOXSOGBdtkk8KqlHUR4Vog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a6:10:f4:c1:fc:a6:47:1d:b8:25:60:b6:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=78a502d6754013f27afa189e7c368fedc7028702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:21:46:41:10:be:c6:21:0d:4f:55:6c:bf:
cd:fc:96:07:f9:84:e2:12:9d:cb:2c:f7:5f:02:eb:
a6:5c:21:6c:57:93:ec:e3:9c:36:3d:3f:ca:6c:c4:
f9:c1:03:ba:26:5b:75:0f:54:01:9a:ca:80:3c:d5:
e3:05:ec:61:01:28:f5:75:f2:7a:fb:4f:e0:17:c6:
ab:c5:e8:74:52:ff:7c:de:70:51:3e:eb:3c:d3:31:
53:e8:65:56:fe:9b:28:2d:a0:40:9f:d0:83:71:79:
8a:db:3f:2a:bb:1a:d3:10:46:1d:b5:84:82:8e:d7:
70:a4:b7:58:14:e6:0a:91:9e:6f:c7:4f:26:85:96:
1e:87:16:74:4f:ae:1d:78:37:dd:c0:41:0a:d7:62:
f2:f3:a3:49:2b:5c:10:c7:76:cd:17:59:c9:cb:8a:
74:8e:24:81:6f:75:22:53:d7:22:38:e8:73:28:8a:
d0:04:75:e2:39:4e:39:a4:6d:39:6a:2f:c1:a4:e2:
8d:47:be:75:ca:1e:69:21:bc:e9:f1:43:4d:22:ff:
d9:09:3d:8e:af:c5:03:81:c7:e2:bd:8e:f2:99:e2:
b4:b4:58:d7:89:e0:8b:f3:14:ea:80:09:68:98:66:
46:89:34:76:cf:9c:b1:67:83:da:0d:94:91:c6:d5:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A5:02:D6:75:40:13:F2:7A:FA:18:9E:7C:36:8F:ED:C7:02:87:02
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9a:44:88:d5:ec:c3:d8:85:e1:a1:cf:97:3b:af:4f:4f:c1:
33:23:10:0e:d7:91:4b:8c:08:1d:35:c3:95:c3:5b:b5:b0:47:
77:0e:be:e5:c0:67:6d:d5:a1:a6:7b:fd:1b:28:da:e4:3c:91:
e3:d5:41:c2:46:df:81:a5:b9:73:a5:31:01:4b:d6:5f:35:be:
77:56:f9:fc:19:1a:ce:cd:4b:07:bd:bf:45:b5:3e:ab:ac:1c:
66:ec:95:9d:2b:a0:f1:3e:7b:70:d9:fc:ed:aa:97:25:49:4a:
f6:21:73:4b:0d:19:f8:4b:f4:cd:83:f0:94:1e:89:0e:83:07:
14:9b:95:ac:6e:3e:a9:3f:43:33:54:4e:40:14:3c:27:a2:76:
ad:b5:ba:4a:25:8d:bd:3b:dc:85:c4:1c:c8:27:c6:a3:e7:63:
0a:7f:f9:91:cf:b6:c6:99:94:81:25:40:96:b4:8f:1f:f5:0e:
ca:83:b2:86:ad:5d:19:af:79:99:d8:5a:5f:f8:2c:e8:88:e1:
ac:50:83:d0:65:9a:e1:fd:5b:9a:a4:34:ba:30:5f:cf:16:0d:
c0:91:bc:1c:a4:8a:9c:d7:7a:a5:8e:a3:88:c3:51:8f:22:f8:
5f:2e:a5:99:95:2b:2a:12:d6:e8:7f:ce:34:69:b6:7c:17:d0:
e4:38:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:31 2026 by rpki-client