Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: cjCIgQOWasDlBq9K5GX1XYXsp2sU/Mimc4AnSJTF5pQ=
Subject key identifier: DA:1B:CF:84:4E:FE:5A:BF:26:8B:8C:90:54:AF:4E:42:71:5F:FA:73
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019D97AA82530E18C543C32004870817A8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 19:00:27 +0000
Manifest this update: Thu 16 Apr 2026 19:00:27 +0000
Manifest next update: Fri 17 Apr 2026 19:00:27 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 9HT1o04TMeSWPb+uGMMgBun0Hfwoeqq9xVhp7OPXZWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:82:53:0e:18:c5:43:c3:20:04:87:08:17:a8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Apr 16 19:00:27 2026 GMT
Not After : Apr 17 19:00:27 2026 GMT
Subject: CN=da1bcf844efe5abf268b8c9054af4e42715ffa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:e8:f1:87:1f:7e:28:51:52:5b:3c:2d:04:
65:19:63:cc:22:a6:03:c7:30:7f:b3:11:c6:1a:6d:
5e:a6:ff:6b:8c:1c:52:cc:33:df:32:f7:d9:77:81:
b2:ba:8d:3c:5c:ff:b7:8a:fa:ea:71:11:00:77:1c:
14:e3:47:22:08:b6:b8:b0:15:9d:d0:c3:40:1c:23:
90:2a:b6:d9:37:7c:50:79:37:cc:9d:e3:30:8f:2a:
c2:ac:dc:a8:62:a3:c6:06:a0:82:e4:4b:03:e1:71:
0a:3b:aa:71:94:18:79:9a:d9:06:41:13:32:36:b5:
2c:a8:69:fa:92:d0:76:07:70:2a:e1:36:da:8a:e9:
d4:d9:2e:3c:64:05:90:5f:17:9b:bf:c9:b4:e6:2b:
cf:a4:a1:be:ae:b8:f5:ae:b8:5f:fd:11:7f:ce:6c:
9a:c9:9a:b6:49:0b:ae:00:40:be:94:7a:dd:00:7c:
3a:9c:86:14:4e:52:5e:38:17:fc:8d:c9:e7:7b:97:
5c:cc:ac:15:9a:27:88:ee:ac:ce:d6:2e:18:97:42:
a7:ed:f2:4b:a8:a0:44:31:32:e1:06:53:fe:f4:1c:
10:b9:8a:86:35:99:53:12:c9:2d:0b:03:a3:a5:9a:
e8:14:cd:8d:4b:eb:9b:81:b5:2f:49:ed:1b:c5:50:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:CF:84:4E:FE:5A:BF:26:8B:8C:90:54:AF:4E:42:71:5F:FA:73
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:00:da:2d:7a:2a:b2:89:61:68:0a:d6:55:54:11:78:ee:02:
e2:b5:6a:22:b2:b8:cf:b5:9d:4f:df:ac:db:f2:6d:5b:96:07:
d6:ae:45:cf:3f:53:ca:fa:63:d3:c8:de:ef:1b:a3:7d:eb:28:
eb:a4:e2:39:44:09:55:56:59:af:25:27:78:76:94:9b:44:ac:
b1:f1:16:02:e4:d0:ae:e4:32:44:d0:4b:54:c1:97:9c:4e:c3:
e9:b5:d0:fe:a7:78:ff:1f:18:a5:48:3d:95:e6:30:ba:b0:55:
ab:c4:9b:49:61:51:4c:50:21:2b:a0:cb:f1:23:8e:ea:76:a5:
f5:f4:ea:78:65:bc:1a:51:e2:15:53:37:ad:c9:89:a3:4e:45:
8d:90:4a:2d:12:ea:37:50:40:5e:8d:43:a8:e5:50:11:22:a5:
c6:22:3a:4a:eb:57:ae:ca:50:37:d1:01:61:98:ac:06:fd:9b:
5f:20:30:c6:7b:ea:bd:54:0c:87:ee:14:71:b6:8f:71:10:ad:
0b:ef:a2:be:f8:07:b8:1b:6d:dd:c7:cb:24:96:b3:ee:6e:87:
fb:6f:1f:4e:a1:91:bf:0d:77:eb:db:9d:1a:5b:84:e5:23:bc:
f1:5d:04:df:67:0d:c1:34:90:af:ad:8a:09:73:c7:ef:66:99:
4e:34:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:35 2026 by rpki-client