
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier: fvsO6peNE+TMtjdrJzjnxnGQsMZ5v6c36iAma5Ubg6o=
Subject key identifier: 8F:68:16:A8:29:1C:DC:FE:43:12:7A:95:41:2B:53:78:56:E6:B0:AA
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial: 019D9B506510EEEC00BAC18C18DCC3F31B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number: 023F
Signing time: Fri 17 Apr 2026 12:00:30 +0000
Manifest this update: Fri 17 Apr 2026 12:00:30 +0000
Manifest next update: Sat 18 Apr 2026 12:00:30 +0000
Files and hashes: 1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: VGpEQPUhXiTi+g/o16YY+ZeZ6/JmyOMFu0P8pbjaBPQ=)
4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:65:10:ee:ec:00:ba:c1:8c:18:dc:c3:f3:1b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Validity
Not Before: Apr 17 12:00:30 2026 GMT
Not After : Apr 18 12:00:30 2026 GMT
Subject: CN=8f6816a8291cdcfe43127a95412b537856e6b0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:f8:19:13:1e:57:1b:aa:2b:9b:7c:ba:24:
ab:c2:d9:a9:dd:63:06:83:f4:f6:0b:78:72:c7:29:
b7:26:a7:e3:04:7d:7d:35:63:64:f6:35:fe:8b:00:
f2:95:6e:15:21:87:ab:c7:7f:d1:6f:d2:f4:d7:bd:
23:fd:d9:7c:09:7b:2b:84:da:24:1d:ca:b9:5e:e7:
9b:d6:78:06:13:a2:f9:1a:ee:f5:3b:8e:56:b4:10:
5e:52:b5:b0:d9:f3:d1:53:7b:27:57:c9:21:5a:3b:
2c:04:13:c5:7f:08:95:c1:8e:7e:3b:9e:3e:8d:f7:
38:0f:ef:ed:2e:df:25:88:ab:92:72:9e:01:67:ca:
3d:c9:40:57:bd:5a:8a:4b:c4:f2:05:fe:b7:17:f2:
16:5f:36:50:f0:7e:51:e7:93:a7:cd:7a:e5:f3:b8:
a5:06:6e:4c:4a:71:71:eb:0d:a5:3f:78:29:e9:d5:
84:b8:f7:76:63:f0:5c:88:a5:2c:66:c3:4f:15:5c:
ff:59:8a:27:7e:75:93:13:62:09:b3:ee:2e:7c:16:
4d:70:ed:35:a9:8d:a7:49:ee:7e:aa:cf:cf:c5:e9:
1f:c9:e4:d3:b2:7f:a1:7a:2d:09:fe:82:61:d4:38:
a7:66:d0:2d:6a:23:08:ac:a0:6f:b7:17:07:8c:83:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:16:A8:29:1C:DC:FE:43:12:7A:95:41:2B:53:78:56:E6:B0:AA
X509v3 Authority Key Identifier:
keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:49:e2:64:16:4c:ef:23:03:f2:a4:b3:b1:ea:a4:17:85:14:
c3:40:6e:48:58:aa:f2:97:e9:04:7d:b7:94:c1:cb:4f:16:fb:
aa:80:9d:e9:ce:06:b8:54:f4:8e:f2:47:4f:22:58:06:01:93:
70:00:a2:5f:95:ce:b7:5b:43:6d:56:b2:f8:5b:a1:2f:15:04:
8c:1d:26:96:c1:28:f3:63:06:fc:05:b1:78:2e:99:32:36:03:
4a:5e:ff:13:5a:bf:6f:0e:44:30:0d:6a:c7:3e:65:92:90:cf:
49:d6:39:6a:24:48:ff:9d:7c:3c:7c:88:3c:74:ad:f7:ac:1e:
4f:4b:a8:04:a5:ed:db:69:e8:7d:08:8c:03:3e:f0:7d:46:2f:
dc:6a:b4:32:4b:71:53:8e:2e:12:65:68:1f:53:f2:67:35:4c:
78:12:4e:73:45:a2:96:9d:9b:e4:f9:c0:f4:e0:8d:9f:19:9f:
c8:50:e6:44:7b:4f:5c:6b:b2:c3:f1:0b:74:1a:05:27:71:58:
ca:6f:68:f0:28:b8:88:52:41:11:38:c4:0c:0a:72:06:4b:7a:
61:60:c8:b5:14:cf:1c:d7:cb:9b:f9:76:d0:6e:fd:f1:bc:cb:
a9:7f:69:b0:78:76:78:45:bf:e2:36:b3:1f:2d:7c:b2:82:33:
75:d5:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:38:18 2026 by rpki-client