Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: DiyyMAMcJ1LG7gEVmnWwcpK9liX9wQCImWjQ64cidSY=
Subject key identifier: 16:CE:B9:D7:1A:FF:4C:53:AE:54:82:5B:75:67:FC:87:A7:D4:C5:BC
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019D9BBF547256766C1CDC078230A67F2B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 0432
Signing time: Fri 17 Apr 2026 14:01:40 +0000
Manifest this update: Fri 17 Apr 2026 14:01:40 +0000
Manifest next update: Sat 18 Apr 2026 14:01:40 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: KijvuIByKEnzjgwuauSVj7R2rkV0ilbe9b7aidkypaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:54:72:56:76:6c:1c:dc:07:82:30:a6:7f:2b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Apr 17 14:01:40 2026 GMT
Not After : Apr 18 14:01:40 2026 GMT
Subject: CN=16ceb9d71aff4c53ae54825b7567fc87a7d4c5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:c0:d5:b3:ef:66:ec:0f:93:a4:bd:fa:ff:
41:a6:c4:9a:07:b9:85:0d:9d:33:c9:d7:24:f8:e2:
6e:03:5f:f9:67:1c:07:7c:82:bc:08:bd:4f:73:38:
a7:21:6a:ce:a0:cb:67:a1:86:43:d4:85:80:20:38:
0c:6a:13:c7:73:dc:99:61:37:e7:36:3b:81:48:ff:
7c:e9:2a:73:89:1c:b4:8f:9b:d0:23:86:e9:9a:ac:
83:8f:1f:60:c7:a2:35:87:65:32:5f:a2:11:34:14:
e7:3d:e8:e8:e2:7e:cb:e0:a5:28:41:44:ee:41:eb:
b2:03:47:e0:c6:7b:98:d8:b5:8b:21:34:7c:2b:e9:
24:b5:5a:48:de:5c:eb:86:54:ed:9e:db:e3:88:bd:
d6:d4:f7:7c:b2:ea:db:52:a3:7d:da:1b:2d:90:d2:
32:84:6e:85:b9:a8:85:f8:b7:16:ce:d8:2e:c7:bf:
c3:1c:1b:84:a5:de:05:76:b0:dd:f0:30:55:74:d2:
f9:bd:85:52:61:b6:9d:cd:1f:7c:e5:9a:4f:f6:e9:
e7:ee:33:79:7b:cf:32:15:5b:a1:56:ac:0d:63:db:
e3:27:f2:7c:f7:bb:ec:cf:29:61:97:8d:ce:d3:ff:
88:46:50:72:8a:98:88:a7:11:d4:f7:86:59:87:a6:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:B9:D7:1A:FF:4C:53:AE:54:82:5B:75:67:FC:87:A7:D4:C5:BC
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d9:17:d7:72:f8:82:62:98:c7:1e:68:fc:73:df:3e:a1:03:
d3:2c:d2:11:22:db:36:4c:05:2f:58:cf:04:9f:07:40:e3:2e:
7b:58:ec:71:8b:e5:db:f5:7d:54:6b:00:46:18:f4:f2:92:0d:
3e:d1:97:2f:42:38:3d:4f:17:41:b8:8d:9a:ad:80:15:09:b0:
83:1e:f3:ac:88:4b:90:21:04:10:c6:d6:ca:54:7f:58:b1:31:
67:51:ee:8f:89:8b:61:2c:2b:af:79:45:5f:bd:c5:d6:bb:74:
00:48:27:99:dc:75:81:06:13:40:a3:48:93:6b:97:3c:5b:46:
1b:fb:14:9c:00:ba:2a:db:0e:b5:ef:00:2a:10:95:8a:22:08:
c6:cd:f0:fb:54:ae:36:f5:d8:9c:cc:e4:74:c7:83:21:fe:f2:
cd:6b:d4:8c:a2:12:f2:d3:41:a1:fe:65:55:d1:fb:d7:a7:f8:
76:d8:bf:f3:d2:ec:a3:75:61:7b:95:a8:f8:3d:f3:a7:82:ca:
c0:d3:76:92:29:39:32:7b:00:23:b8:e8:79:73:e1:35:5b:24:
c6:71:f1:cc:95:a8:31:d2:40:32:e0:34:16:9a:c7:87:c6:3f:
b6:08:a0:24:46:70:bd:1f:0e:dc:71:35:e8:26:ea:f9:31:db:
9e:2e:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:22:47 2026 by rpki-client