Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: nCmv6/rSmrdz4pBSI7eaGJUWgvY+F5rSWXSh/uweOpk=
Subject key identifier: 4F:DF:16:A5:2E:1E:6C:2D:D8:0E:E0:0A:EB:1D:D0:84:78:0F:CF:28
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019D9C9A33A61E861490F487CC787DF5CFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 02B1
Signing time: Fri 17 Apr 2026 18:00:44 +0000
Manifest this update: Fri 17 Apr 2026 18:00:44 +0000
Manifest next update: Sat 18 Apr 2026 18:00:44 +0000
Files and hashes: 1: IZRU9aitBtasi5s8LfvUyXF6gJI.roa (hash: A+EvTFUEfhqDufK4w5HaH/h/6GcXexGhKX2pAinc5hA=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: 09kV4xVLsa1p6CPq7AaWy5kHoGmWcJaicxlqs08sSJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:33:a6:1e:86:14:90:f4:87:cc:78:7d:f5:cf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Apr 17 18:00:44 2026 GMT
Not After : Apr 18 18:00:44 2026 GMT
Subject: CN=4fdf16a52e1e6c2dd80ee00aeb1dd084780fcf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:79:69:30:5d:8f:ee:55:65:d9:15:db:03:
ff:73:c6:9c:6e:2b:5f:65:38:f9:fd:9f:d6:c1:1f:
a5:8e:f2:68:9a:23:db:4b:19:e6:83:8b:c1:ab:5a:
ee:f9:03:42:2d:50:79:f1:15:c1:fb:6d:32:d3:c0:
ee:92:5c:a9:a0:cf:c9:da:83:20:b4:6b:bb:4f:00:
8c:81:39:68:12:e0:21:e0:5d:cf:57:ff:b8:ca:93:
97:1b:4a:0f:ca:ed:da:1c:94:c8:5c:35:21:9e:f1:
87:6b:04:3d:6f:b2:e3:ff:82:1f:47:21:70:ef:c0:
06:ba:1f:fe:79:73:a0:37:32:1b:44:67:36:f0:67:
b3:d8:bb:20:04:70:66:19:15:c9:fe:26:e2:9a:ee:
94:40:54:53:dc:c7:98:03:19:7f:a0:c4:8c:d2:49:
18:74:9b:e4:ec:08:e4:b8:cb:26:9c:ef:41:4a:97:
bd:05:b7:ab:79:3e:f0:7f:fa:90:27:0e:10:5f:aa:
75:05:79:e1:c8:5f:34:d7:7e:b2:b8:c7:30:b4:fc:
21:2b:60:f7:ed:70:64:70:79:06:02:80:06:0c:f8:
b9:05:a4:7c:e4:46:dd:c7:54:09:1d:cd:e4:75:66:
47:6c:29:ed:20:7c:cd:6b:6b:67:9f:1f:b9:45:7b:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:16:A5:2E:1E:6C:2D:D8:0E:E0:0A:EB:1D:D0:84:78:0F:CF:28
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c4:c7:9c:9e:86:08:bf:54:7c:78:83:ae:a9:68:fd:f9:88:
ed:c9:fd:0e:7a:c7:05:5c:1d:72:ae:4d:48:f8:0f:b5:3f:cc:
05:60:0f:58:81:81:82:7f:95:5f:b6:be:9d:09:37:03:b7:ea:
53:93:39:7f:ec:c5:04:cd:51:d6:cb:9c:35:f5:05:45:17:5c:
5e:5d:7a:6a:ec:74:99:78:a1:91:3e:96:62:ea:02:d4:fe:46:
83:52:a0:71:2a:80:26:6c:1b:45:16:ca:45:32:75:f4:c0:6f:
13:72:37:6e:32:ca:95:fb:98:74:2b:93:e3:23:9f:91:40:9e:
79:15:a9:13:fc:15:03:67:d3:ea:51:06:b8:9e:0f:d4:19:2b:
14:c5:80:bb:29:ea:fa:14:09:5b:1f:e3:0e:d2:fa:d1:66:b1:
8d:5b:a1:fe:d4:b2:09:e6:f4:ed:ba:ff:0a:fe:61:f7:d9:e9:
91:ba:bd:dc:e7:43:a9:9e:1d:46:ea:01:f9:30:7a:45:93:61:
af:ea:7c:38:a3:42:fe:a6:19:16:8c:08:8b:fd:f7:a5:b6:24:
ac:c9:55:27:6d:a1:d1:f9:b1:2a:8f:7e:85:2e:13:de:71:e7:
77:0f:a4:48:55:fe:b1:30:98:93:4c:99:37:57:5d:b4:a2:ea:
95:89:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:42 2026 by rpki-client