Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: I94CWyKBZ62/z5D2jAqTJxVEAynXcIOWmqx26h5P2fU=
Subject key identifier: E3:D6:84:1A:9B:7B:5C:5F:6A:F7:28:02:01:6A:63:1B:D5:EB:73:C1
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019DA60AEF9F8886BF5B8DB0CBF6725DBC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: ED
Signing time: Sun 19 Apr 2026 14:00:27 +0000
Manifest this update: Sun 19 Apr 2026 14:00:27 +0000
Manifest next update: Mon 20 Apr 2026 14:00:27 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: +7/S/h7McJWWR2mmH4El7ILkYF6FpwWD28G/N632C1g=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:0a:ef:9f:88:86:bf:5b:8d:b0:cb:f6:72:5d:bc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Apr 19 14:00:27 2026 GMT
Not After : Apr 20 14:00:27 2026 GMT
Subject: CN=e3d6841a9b7b5c5f6af72802016a631bd5eb73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:6b:84:4e:7e:19:00:44:40:6a:b1:a0:46:
c9:f6:e9:02:2a:d8:7b:b3:72:4b:5a:16:52:39:63:
ad:29:1a:5e:8f:58:32:01:d8:c0:9d:15:8a:d6:c1:
3c:d6:2e:84:25:b7:32:9b:b1:55:77:8c:92:d5:04:
59:a4:e2:62:f8:a6:a0:8c:50:85:18:d0:81:dc:93:
23:d4:97:ab:fd:2a:aa:03:9c:b3:06:57:53:32:79:
53:e3:25:b7:4d:6c:77:04:66:71:d1:38:67:3e:15:
92:5a:c8:28:44:fe:10:d5:e8:62:7c:7e:71:b2:38:
2f:08:44:84:bf:e8:38:07:3f:ab:27:5e:f8:f5:e1:
4d:69:e1:e3:d2:bf:d9:15:fe:d3:9f:6d:09:d2:89:
3f:b3:30:66:4b:a9:4d:9b:2f:a0:6a:49:b5:eb:56:
91:9d:bf:b9:6c:e2:62:fb:b2:01:d9:cd:ad:ee:b2:
df:bc:ba:6c:ff:80:9c:ab:2d:43:3d:3e:56:1e:ee:
23:55:05:60:ac:67:60:45:2a:42:9a:7d:2f:40:f3:
3d:5b:38:97:89:41:83:de:54:af:85:1f:d5:55:a4:
a5:58:99:42:69:bd:7e:88:87:49:e1:74:0d:da:34:
36:75:c4:89:1b:c7:22:e4:8e:ea:55:0c:92:8f:04:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:84:1A:9B:7B:5C:5F:6A:F7:28:02:01:6A:63:1B:D5:EB:73:C1
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ab:bb:f9:3e:c1:3c:74:4b:15:87:0a:94:a8:aa:41:d5:38:
17:40:90:ec:f5:c4:ab:0b:8d:ee:39:80:fd:c7:ec:1e:c1:77:
f7:a8:2a:fa:7e:aa:26:7d:36:d9:00:60:1b:41:cd:7f:f8:9f:
c8:60:0d:f1:41:fb:79:cc:ad:43:65:0d:eb:d9:ff:01:46:a4:
f1:f1:d5:f0:90:e5:fe:9f:39:49:01:b3:89:15:f8:91:36:93:
ff:fd:08:54:d3:a8:26:c1:28:17:55:f6:3f:df:e7:86:cb:9a:
32:cc:67:0f:b1:8a:72:40:cc:29:f1:a9:9e:aa:58:2d:c2:b2:
2a:cd:73:64:bb:50:22:2b:4e:50:13:7c:a4:77:40:df:91:83:
8f:8e:21:d7:1e:57:9f:3d:22:d0:db:02:74:54:4e:c8:3b:43:
ad:2f:dd:b6:37:b8:e0:65:80:a2:0f:6b:98:a1:87:49:3e:d2:
76:4a:81:7c:a8:3b:09:27:95:5a:96:4b:b4:a6:e3:1a:f9:e4:
7f:ec:6f:7c:e6:99:89:9a:df:b1:b9:8f:e3:99:bf:33:f9:45:
76:b5:7f:f9:95:62:20:30:03:e0:ca:cf:0b:f3:a4:99:d3:f1:
4b:8a:e0:ff:b8:a9:50:57:bc:f0:26:c7:e8:e8:ef:1d:6c:47:
6a:16:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:01:09 2026 by rpki-client