
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: +hzraXdcqnp23PAsGq3d+1T7ae6eouoOvd/WQMhT/w8=
Subject key identifier: C9:CA:B1:74:4D:75:A4:B8:F8:DB:6E:65:D0:EC:DC:EE:26:3A:B8:DD
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019D992B59E69F54FEA0D8908E762B9F46DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 1829
Signing time: Fri 17 Apr 2026 02:00:48 +0000
Manifest this update: Fri 17 Apr 2026 02:00:48 +0000
Manifest next update: Sat 18 Apr 2026 02:00:48 +0000
Files and hashes: 1: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: IKHmPKLLFsBYGhUT+ZJCZx8uJ/CN7z9qroyN6o48o1w=)
2: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (hash: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:59:e6:9f:54:fe:a0:d8:90:8e:76:2b:9f:46:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Apr 17 02:00:48 2026 GMT
Not After : Apr 18 02:00:48 2026 GMT
Subject: CN=c9cab1744d75a4b8f8db6e65d0ecdcee263ab8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:27:c5:56:de:bb:cb:a3:36:fc:6d:11:af:
41:63:fc:cf:10:ec:ae:c0:2f:c2:3f:87:2e:c2:89:
d9:95:91:42:af:ee:dc:48:86:8f:f9:93:6d:d5:99:
01:0c:36:99:f0:cc:5c:38:84:21:10:a2:4c:40:f5:
ff:f8:f3:9b:64:14:f5:92:3e:0c:fe:d9:7a:25:f7:
f9:f3:b4:29:bb:c4:8e:86:e7:b7:df:5c:7f:3a:02:
d8:4c:fd:1a:48:6d:5a:83:2f:ad:7f:a5:61:96:20:
06:43:30:de:dc:b6:21:f7:e1:49:f4:2f:ec:ac:fb:
b4:6f:88:c9:ae:38:2d:cd:aa:1b:a3:14:b7:8f:ec:
92:75:7b:46:da:4e:4a:6a:dd:36:12:85:7a:23:8f:
52:93:5d:84:d5:d9:5a:bb:f3:64:6a:ae:75:b4:2c:
aa:f6:93:2b:0f:21:5a:e6:14:67:dd:9b:ea:70:b9:
88:86:cf:dd:41:bc:7e:c5:63:c8:1d:dd:02:e5:31:
3a:2c:e1:66:92:61:78:13:5a:c6:29:0d:0f:c2:f1:
26:09:1b:45:64:07:54:33:4e:76:db:7a:0e:eb:74:
92:97:d7:74:be:ac:dd:d5:09:34:5c:f7:5e:cc:a7:
1f:ad:5e:53:8b:3f:3d:69:99:e6:ff:cb:25:1e:89:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:B1:74:4D:75:A4:B8:F8:DB:6E:65:D0:EC:DC:EE:26:3A:B8:DD
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:04:61:66:9a:06:36:69:27:e2:81:09:24:f0:5b:aa:16:
f3:f4:7b:a9:72:4a:a8:76:0a:98:f6:e8:bb:b1:7a:4a:b8:21:
a8:ce:47:63:3f:98:14:d1:60:51:89:a4:f7:93:99:c7:8a:27:
18:36:cc:62:06:0f:78:80:af:65:e9:e7:d7:02:02:ac:d6:66:
64:cc:16:40:95:08:fe:05:ca:80:be:50:72:c0:48:f8:33:c8:
00:e7:22:8a:34:4b:ce:9a:d5:17:e9:6f:0c:47:0a:f1:f6:8d:
87:54:58:ab:2f:4a:a0:c5:aa:15:fd:f4:7d:7b:46:5e:37:62:
30:7d:91:5e:fd:4f:1d:87:82:29:00:db:9b:0f:f9:fd:d0:5a:
f3:78:8f:46:74:5c:d2:11:5a:89:8d:2c:34:72:99:9c:68:70:
c8:dd:71:26:45:16:de:df:99:94:59:db:35:b2:63:a2:66:56:
60:9d:f3:fc:13:61:eb:92:b0:b8:03:b1:d5:c5:47:c3:b3:97:
31:89:72:35:a2:98:47:79:a6:e3:75:8e:dd:9f:a8:8d:57:7c:
61:b6:40:b9:c3:61:d8:c3:11:00:62:bf:c4:07:63:c3:4f:96:
0c:99:40:cb:c2:37:1d:61:c7:ee:3a:f4:b4:d4:56:c4:5a:45:
9e:4b:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:50 2026 by rpki-client