Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: bahhQcoPvj9j8PIQDpcfET34vQedWzfsJs/zWW0DCdE=
Subject key identifier: 39:97:AF:21:FC:FE:99:73:13:EC:A5:C2:63:42:15:16:54:5C:AE:A3
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 019D99622D5760AB49E0268BE046B6965292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 1455
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: EfrbbVNsRESDxPceTPw-5MN_E7s.roa (hash: 1V7YqzBGw+lW57pDGC7FJ9hb2upKEO6VdoiZzsqxDIs=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: OMbpxTKAfuhJxnnUlvqrFWOz2rQWRByv2jU//lzDrYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2d:57:60:ab:49:e0:26:8b:e0:46:b6:96:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=3997af21fcfe997313eca5c263421516545caea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:2e:32:32:41:ee:7c:4f:5b:3b:eb:2c:69:
86:45:f1:47:48:29:95:85:49:a8:60:f1:47:02:f7:
81:99:a9:07:9b:4a:c8:c3:92:01:33:8a:00:03:a2:
6f:9b:ec:fd:2c:69:7d:e4:14:2b:b0:6f:21:88:da:
d5:bc:a4:a5:d7:be:d8:c7:62:64:dd:08:a7:7b:9d:
07:9e:86:30:9e:84:eb:98:04:72:bf:8b:26:29:36:
f8:a3:28:8d:b0:e3:db:b7:a2:42:c5:3e:09:30:5c:
b0:5a:aa:91:44:82:bc:47:db:39:d2:12:35:f3:3a:
a8:b5:96:3f:d9:68:d8:8a:5e:e3:30:f6:8a:1e:ae:
51:1c:e2:e6:bf:85:14:9a:29:8b:e7:95:a0:d3:2a:
04:45:a7:0d:4c:17:0b:19:49:e7:e5:e2:9a:aa:8b:
df:82:b2:30:55:c4:c4:15:21:f9:d8:bf:a7:0a:13:
91:90:b5:ad:9b:79:13:d5:ac:03:67:e7:ff:c0:95:
cd:fe:61:40:1b:31:97:69:a3:b4:df:6c:7b:17:5f:
81:dc:70:ec:24:c6:55:92:cb:fc:a7:6d:e3:93:a9:
d0:33:e8:cf:84:4d:94:71:26:e4:e7:e1:e1:0e:1d:
73:91:0f:ab:d7:1f:a4:59:0d:d3:ee:37:9e:d3:a0:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:97:AF:21:FC:FE:99:73:13:EC:A5:C2:63:42:15:16:54:5C:AE:A3
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:50:7b:0c:42:37:2c:f4:80:6f:ed:c9:2e:15:d1:21:ef:
df:30:2b:ce:a1:c1:3e:ff:06:ef:0e:f5:87:d1:ed:5b:5f:dc:
72:73:92:91:a8:3f:3a:08:31:d0:5e:22:27:34:bc:e8:49:ab:
20:4a:d7:ac:9c:5a:60:12:70:a8:be:29:b3:79:c3:df:41:72:
02:39:9c:1c:98:f7:89:85:c5:0b:fb:05:46:1e:f8:1e:75:dc:
3a:22:92:97:37:fa:83:00:ab:41:65:db:1d:88:a4:b1:b7:fa:
b4:02:98:a8:af:a7:02:61:7b:2d:c5:3c:f3:17:e7:3c:73:1a:
d7:3d:97:e9:55:1e:2a:63:c6:14:21:dd:78:fb:61:88:29:14:
cb:9a:1e:98:b1:aa:5c:cf:39:b5:30:90:f7:b7:ba:e9:61:bf:
34:b6:ae:94:f1:c4:06:7c:1f:67:4a:dc:25:10:ef:48:f3:03:
bc:40:34:f5:54:da:b9:4d:7e:a7:d8:c9:36:72:7e:37:8c:db:
53:56:e3:89:af:4d:88:f6:11:94:6a:bc:0c:0a:30:d3:a3:ac:
49:ef:e2:75:91:8c:e9:29:49:fc:77:bf:6d:a6:ce:94:6f:96:
9f:54:31:0b:24:6c:2e:f0:7b:1e:d3:ed:20:f3:11:48:39:cb:
94:2e:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:04 2026 by rpki-client