
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: IkCMZQ1yjovfWyF5CdJoc134SmIKZ3/1teuWI6+vhJY=
Subject key identifier: E9:BA:9D:88:22:10:0B:4E:05:54:E1:D2:AB:B2:FF:D3:41:FD:FD:2F
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019D97E1AE2A21299B88F3AD6D2CE458A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 05B3
Signing time: Thu 16 Apr 2026 20:00:42 +0000
Manifest this update: Thu 16 Apr 2026 20:00:42 +0000
Manifest next update: Fri 17 Apr 2026 20:00:42 +0000
Files and hashes: 1: G-ttXU6LFqII2ZJb5Ai_tbTpvbE.roa (hash: yEHVYP+lRpz9AqpdBf+LceTLoHvG7cdnnGGEb99aDSo=)
2: o-XODVf1hZc2qeOEskGvrZ916vI.asa (hash: t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=)
3: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: Sef9S19UmPjjq/816PwCLjfRdvkNHD7jB2MHWKojQBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ae:2a:21:29:9b:88:f3:ad:6d:2c:e4:58:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Apr 16 20:00:42 2026 GMT
Not After : Apr 17 20:00:42 2026 GMT
Subject: CN=e9ba9d8822100b4e0554e1d2abb2ffd341fdfd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:11:e3:3f:aa:be:fc:20:a3:b1:be:53:f3:
66:a3:bd:df:99:64:ab:ad:20:60:16:57:89:24:f7:
9c:02:01:3f:99:7d:d7:4a:e5:37:26:81:e1:d8:4d:
9f:12:f2:8e:df:f6:48:06:3c:1e:4f:c4:47:c0:71:
0d:e2:ac:28:60:12:2e:c5:e9:8f:5e:e8:cd:e9:9a:
49:03:ad:5a:94:02:1e:fc:b1:a0:60:09:6d:af:d7:
cc:4b:71:ad:05:1e:68:48:bc:9d:04:7a:26:a8:48:
94:b2:43:71:32:95:02:8a:7a:08:4d:da:a6:e0:5b:
d5:c1:f7:60:7b:2f:6f:75:4f:52:1f:9b:77:7f:11:
9c:18:c9:a9:39:7d:12:d4:60:bd:af:35:9b:c7:eb:
57:a4:7b:e8:08:f8:a5:b7:42:e9:db:b2:99:d3:d5:
f4:0d:82:94:13:1a:1d:24:e0:5b:8c:ae:8d:ba:0a:
4c:89:b4:d3:5c:72:90:4c:7e:9f:9f:7b:8c:c7:7d:
72:f7:c9:bb:70:60:0e:3c:10:d1:fc:e7:da:26:c1:
2c:cf:90:50:20:83:c0:f9:81:d3:e6:bd:2c:df:b2:
da:61:3f:24:e8:1f:83:d1:5f:93:d2:8b:5f:de:83:
86:b9:c3:c9:8f:4e:4d:3d:12:10:4c:df:ce:7a:40:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:9D:88:22:10:0B:4E:05:54:E1:D2:AB:B2:FF:D3:41:FD:FD:2F
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f0:8c:bd:41:b4:a6:0c:f8:42:4f:a7:c5:d3:78:be:4c:91:
d3:fb:64:55:3e:a7:fd:5c:d3:d4:66:47:2e:43:6e:0e:f0:1b:
a7:09:0b:aa:6a:00:ed:21:39:fa:db:2f:da:1d:62:34:34:83:
f2:d0:39:2b:3c:98:dd:c8:92:4d:41:8a:6d:d4:58:3f:87:38:
cc:e1:b2:73:5e:ef:8b:68:5d:03:dc:03:07:20:83:8a:51:b8:
e7:65:e4:12:fe:a6:07:5b:7a:a1:24:a2:48:64:03:97:2e:d5:
74:22:61:92:94:b1:51:ab:46:38:69:96:12:c4:de:fd:02:c4:
42:02:0f:0f:a2:c8:cf:6a:f3:27:3a:78:7b:4a:f8:34:50:57:
c3:71:49:46:cf:08:ba:a0:85:69:f5:85:54:e6:33:6f:25:fa:
bc:a1:aa:df:a2:1c:cd:4e:76:ed:6b:d4:ad:9d:e2:cc:69:b3:
33:e5:19:9c:db:54:a3:62:8d:31:8f:d7:96:91:89:54:45:f3:
64:0a:d1:04:9c:e4:36:81:bf:31:af:c7:93:f7:4a:86:da:b1:
cd:2a:85:17:e5:5f:12:8d:9b:e1:bd:44:3e:f2:f5:00:a3:ba:
ee:0c:0d:1e:53:43:d2:ce:05:b9:00:cc:ad:16:77:2c:23:e3:
1d:f9:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:19 2026 by rpki-client