Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: 4GMIv6Bz6WSKriyzFjKaimHKRN4+/9ecg0vEgqsZflg=
Subject key identifier: 35:D1:71:B8:C3:57:B6:19:E1:BB:E1:17:C7:EF:C6:90:89:DB:52:63
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 019D98BDBB492D5DC485523ED1BD28A9A187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: /D2vSA98xC0YcpfFkACJRUWZfhzacApaID8euUmtK9s=)
2: zhmEXTTO06gpLxWO64H29X0-CFk.roa (hash: 5E099Sh8nPjWGjRVAIGCRAKM5QSFykLo1AXb7NFz/x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:bb:49:2d:5d:c4:85:52:3e:d1:bd:28:a9:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=35d171b8c357b619e1bbe117c7efc69089db5263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:99:b1:35:fb:46:85:36:1c:a3:52:cb:22:
8e:5a:3e:ee:dd:57:33:66:69:f3:e9:d2:fe:c0:19:
68:cd:a7:e9:5f:3b:41:b3:6a:c0:35:87:b9:5e:32:
f3:c0:0d:20:48:f5:18:5e:e0:0d:ab:fa:3d:fd:8b:
13:f0:e1:7e:64:0e:10:54:27:ba:e9:c7:35:78:ed:
cb:d9:9e:f0:cd:d8:4e:a1:24:a5:f9:32:17:a9:87:
db:94:5f:59:20:ee:ab:15:66:0e:92:6a:13:b8:58:
cb:e0:ad:ad:95:db:e3:4a:59:a1:7f:a2:ff:70:5c:
33:76:5b:66:5b:fe:57:ff:ff:b7:09:4a:7a:5d:38:
68:4c:69:bf:5c:1b:c2:a0:72:b5:0f:fd:20:40:cb:
7d:26:fd:1e:55:20:2f:3c:32:e8:c1:c1:f0:92:28:
fb:f4:92:45:68:ec:d4:25:39:fe:27:8c:b7:d3:6c:
d5:42:f5:5c:08:09:1f:d4:1c:b8:26:4f:22:95:75:
0f:d8:31:5c:1b:0b:5c:5a:75:82:b7:31:94:1c:2a:
e0:57:d6:c3:c5:2d:3b:f3:b6:09:83:8e:cc:5c:8b:
47:42:49:a5:4a:41:84:4d:2e:b5:a4:58:f1:40:66:
a1:81:82:e0:0e:5d:7d:8c:65:66:64:aa:93:90:ce:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D1:71:B8:C3:57:B6:19:E1:BB:E1:17:C7:EF:C6:90:89:DB:52:63
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:55:69:e1:a6:f7:ec:20:5a:d5:37:d1:36:21:f3:63:c1:
ac:20:c0:69:42:9b:5b:53:8a:d1:19:b9:05:ee:0b:90:57:c7:
23:a2:ef:a0:04:2e:ab:c3:44:9e:54:07:ae:19:73:14:e7:6d:
41:e0:ea:42:f6:5a:06:ac:49:af:65:19:40:55:0a:84:76:94:
f2:25:1f:32:2b:8e:bc:af:4f:6b:a3:07:c3:7b:91:3f:36:14:
56:c3:20:f0:e6:39:04:0a:08:16:18:c9:a6:90:94:62:0b:7c:
0c:38:52:8d:eb:4e:cc:69:32:c9:e8:c8:fb:fe:01:40:37:a2:
74:a7:49:a1:c9:b8:8b:db:96:5f:2d:01:40:64:c1:24:be:1f:
d5:a3:87:1d:49:39:a7:17:5f:fd:61:d5:45:38:35:40:93:04:
ce:04:48:3e:49:b5:3f:f5:ce:ad:d7:d5:b8:44:2a:8b:92:80:
fb:53:71:55:25:5c:ed:6d:36:2f:12:b4:81:c5:f7:9e:19:88:
d5:7b:6a:2b:6a:b6:e9:8c:cc:7c:04:06:30:ec:37:f2:b4:01:
20:85:3d:f8:b1:76:7e:ba:2e:c6:23:d5:dd:1b:66:81:ac:dc:
12:0b:bb:38:13:1c:24:e8:5e:25:9a:58:b3:39:85:10:cc:19:
cc:f2:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:47 2026 by rpki-client