Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: oI6lpcxFFNsDmY6TPmgxl8oDto0yPhLNDyGhp6D5gAI=
Subject key identifier: 19:D1:3D:D2:BE:4B:3D:D2:0C:60:EB:06:0B:B0:B3:4B:9C:95:17:B3
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019DA41C8F0FE6528059064DFBC3FAA79471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: EC
Signing time: Sun 19 Apr 2026 05:00:28 +0000
Manifest this update: Sun 19 Apr 2026 05:00:28 +0000
Manifest next update: Mon 20 Apr 2026 05:00:28 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: OCktqUockDA/Jgh0eLfMc92GdCJdON+tPu90zouhvrs=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:8f:0f:e6:52:80:59:06:4d:fb:c3:fa:a7:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Apr 19 05:00:28 2026 GMT
Not After : Apr 20 05:00:28 2026 GMT
Subject: CN=19d13dd2be4b3dd20c60eb060bb0b34b9c9517b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:c0:50:8a:28:3d:ea:85:8d:f2:7a:10:00:
f4:4a:a7:24:81:74:39:1a:0e:ec:6f:cc:ad:2d:85:
91:1c:79:63:f7:63:76:02:a9:27:f2:86:b4:da:a8:
c7:75:71:84:dc:c8:d4:08:b7:54:fd:f9:d3:f1:47:
e2:57:84:1f:ab:bb:10:da:08:54:50:5f:c2:4d:89:
df:dd:cc:23:cf:28:8b:c6:44:62:c4:7d:7a:f0:c3:
50:7e:0d:7e:78:32:c6:b2:e5:9c:91:f4:4a:f7:0f:
5b:3d:b3:1e:03:33:00:1f:ad:ef:32:26:d5:31:51:
6f:d9:a6:34:1a:8b:45:29:5e:e5:06:f3:36:47:9c:
00:13:e1:ed:9a:bc:3b:c2:fe:b6:50:1a:f4:2f:2b:
09:9d:12:25:2d:28:1b:1e:ca:ff:b8:a1:0f:e7:3b:
25:70:0b:1c:46:e9:87:7a:67:8a:63:6f:58:bb:61:
94:dd:e2:7d:09:52:41:cc:68:0c:97:3f:08:8d:38:
fd:48:cd:bd:55:25:03:37:4a:dc:f4:66:2d:eb:29:
ef:55:70:ce:c8:90:6b:d3:86:27:b8:6d:d2:54:4c:
a8:69:b7:a5:df:0f:4d:5a:57:92:85:83:08:c7:9e:
a3:ad:74:67:7a:59:89:8a:98:32:49:81:b2:ce:99:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:3D:D2:BE:4B:3D:D2:0C:60:EB:06:0B:B0:B3:4B:9C:95:17:B3
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:67:f2:7e:da:c3:67:62:ab:3d:9d:e8:c3:6b:84:95:91:
78:89:73:85:f6:d0:05:07:fc:dc:ab:49:4d:dd:e5:6b:42:c5:
94:22:5a:ee:e3:82:c8:d9:13:e2:63:f9:b2:98:c2:2a:ce:ac:
d7:d8:39:a2:f1:e9:8d:2f:83:1e:ef:d1:6b:7c:38:fe:d6:70:
02:ea:d2:20:43:b5:76:fe:3b:8e:89:69:78:dd:17:bb:a1:b7:
16:62:00:e8:7e:96:d7:f4:e9:7b:38:1f:8a:a2:f6:45:e6:b8:
01:50:fe:56:c6:cc:4f:95:b3:45:ff:d5:0c:82:d1:25:e2:1a:
c6:90:0a:7c:ee:29:fb:64:35:4f:e6:2b:bc:70:13:37:63:1e:
16:83:3f:44:55:bc:60:6a:40:94:0f:02:4b:16:95:80:43:e2:
8c:29:fe:3d:ce:0b:e1:e9:fb:fd:91:89:89:4a:e9:3f:58:af:
13:dd:1f:e3:98:f5:f4:b6:c1:0d:36:2c:c0:28:8c:33:e7:d2:
c7:70:47:cd:1b:39:ee:91:54:e0:38:1d:16:79:0e:c5:37:03:
e6:6c:c2:9d:46:1c:d4:d4:ac:28:cf:e6:2d:bb:b6:74:94:1f:
3d:14:e4:7d:38:09:81:ae:26:83:76:c6:79:e1:b7:22:68:b3:
83:6c:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:33:17 2026 by rpki-client