Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: 4wWDBKqfNJ5tU2bNUWYJbt9bEFjzNvH/PhXTmn/2PUk=
Subject key identifier: 88:B0:75:62:2C:44:55:D5:59:D4:2F:01:45:E6:44:0A:23:B7:81:DA
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019D9B19F77362EA29AAE70F68C993F054AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:01:03 +0000
Manifest this update: Fri 17 Apr 2026 11:01:03 +0000
Manifest next update: Sat 18 Apr 2026 11:01:03 +0000
Files and hashes: 1: OsxR7yFdFRenycaE_q8hld1AbUQ.roa (hash: Fufnasj3vyQ/2zEL9UqegZtuU29Utyi2U8r5NLTadZk=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: Z/oowkseVqcrvvRbZEgpkJGjmzeu+idFEqasrUGQpKw=)
3: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
4: v09tww-7oHxZ6sHFn1E1sm8TLy8.roa (hash: b5FXRSJZMeoKM16WUIwE96LX1QoLUNfwWW43UIqRREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f7:73:62:ea:29:aa:e7:0f:68:c9:93:f0:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Apr 17 11:01:03 2026 GMT
Not After : Apr 18 11:01:03 2026 GMT
Subject: CN=88b075622c4455d559d42f0145e6440a23b781da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:df:4b:51:c5:d5:67:6e:6d:53:3c:61:30:
ea:de:88:07:ab:b4:ce:4c:6d:45:78:3d:b5:27:76:
a6:92:c5:91:84:5b:ca:7f:91:bd:ac:33:1b:5c:32:
52:db:e0:da:b1:96:63:46:ba:2c:75:3a:f1:46:66:
4e:c6:2d:95:80:f3:42:f0:15:82:d6:ba:d3:51:3d:
8f:49:8f:be:99:75:63:c6:d9:7d:64:9d:38:6a:0f:
68:6d:5f:a6:57:b2:0f:d9:76:58:5d:fe:c9:b2:5e:
36:ff:9e:c5:e8:7d:27:49:28:55:f1:43:b9:96:38:
16:0f:1d:c7:9a:82:05:d6:64:19:39:43:a6:c2:f3:
8d:5c:27:18:25:d5:b9:43:49:55:fe:88:41:fb:0a:
8c:24:2a:2f:f2:86:a3:e3:40:f3:b9:cc:0a:4b:35:
a5:48:68:21:dd:86:71:d8:ec:2c:10:03:b2:3c:76:
b5:68:9c:fb:b3:0d:56:a4:0a:d9:1e:35:ec:fd:25:
db:a9:a6:31:c6:10:c6:35:9b:e0:1f:9a:b3:b7:60:
2c:1b:59:54:68:bf:78:c4:78:6e:52:ac:72:be:2c:
f8:58:91:01:50:6d:fb:a6:d7:98:72:83:31:e7:de:
35:10:d2:d9:be:a8:28:f2:d6:d9:71:6f:72:a4:f0:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B0:75:62:2C:44:55:D5:59:D4:2F:01:45:E6:44:0A:23:B7:81:DA
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bf:83:a9:6b:6f:bf:f3:1d:a9:a2:0b:7d:a3:62:fc:07:7f:
b1:7e:63:f5:23:52:05:71:c1:de:d6:ab:e2:2b:a8:b5:c9:00:
4b:ee:d3:bd:43:ed:8f:c0:22:70:cd:db:71:eb:d6:ca:3f:94:
ef:57:6a:f6:7a:33:7a:05:c1:d3:e4:99:9e:74:0a:c1:ee:50:
de:c9:6e:c5:d6:df:99:4c:92:87:42:8e:43:18:56:22:1d:d4:
f6:8b:c0:2a:c8:7e:2c:45:2f:50:cb:ec:1c:46:08:99:2c:ae:
4f:08:2a:59:a1:22:b1:20:06:9c:ec:f5:c3:88:b0:6b:43:4e:
1c:52:cc:5f:f8:b0:5d:a6:09:cd:be:eb:87:6b:83:a6:ef:92:
bd:96:1e:d8:c7:01:21:32:d9:d1:34:f7:19:06:22:4a:b5:b1:
2c:b3:a4:31:d9:65:9a:4f:ec:a2:e5:24:0f:9a:e6:df:4c:ab:
7d:23:57:b5:e1:1f:e7:5f:39:0d:29:86:85:5f:e6:5f:ae:13:
2d:ef:4b:c2:e5:15:9a:d2:71:6a:09:a4:0e:92:93:87:6e:3a:
0e:4d:9a:42:2d:bb:66:82:e5:0d:cb:86:62:e1:08:c8:9c:48:
f5:bb:5c:05:25:b2:78:36:71:48:b1:6c:94:71:d8:b1:2c:97:
34:72:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:30 2026 by rpki-client