Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: l6UGHuXLUszbbVbE/njosp6xWDUkBz34cxk8lLJtlCU=
Subject key identifier: EC:D6:45:D4:E1:68:72:B5:D7:2A:EE:E8:46:5A:15:25:BB:2B:89:5A
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019D992B70171B9932BC48493A1D602CA660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 1183
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
2: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
3: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: 5qJqLoIAKuAn2PaZfG8mszawrDwZLGtdd7s3AYJV7K8=)
4: ovUvt1pWliISM3HaoCAcadW0xKw.roa (hash: H639MxSrvwDoO2fDDqrmu0kQ4erJQr6FKFxoVbpwHPU=)
5: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:70:17:1b:99:32:bc:48:49:3a:1d:60:2c:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=ecd645d4e16872b5d72aeee8465a1525bb2b895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:ff:53:6e:de:e3:e6:ce:20:5c:05:dc:9b:
3c:98:f1:8b:ba:59:dc:32:e6:c6:96:f4:b6:a6:51:
21:3c:10:41:77:f6:fe:91:48:34:fc:7a:51:27:1a:
14:c3:bb:f7:eb:80:91:e3:75:03:10:1b:5f:fb:11:
41:11:36:82:13:52:b5:b1:8b:94:19:44:b7:82:e6:
88:6d:3c:75:96:64:ff:17:99:67:3f:25:ad:d8:0c:
69:fb:f5:d5:58:bf:90:ed:ba:b4:16:53:ff:93:6f:
c5:da:59:8e:26:4c:51:07:13:24:fc:93:71:84:8e:
95:dc:a9:90:6f:80:c8:a2:c8:87:e9:35:af:c6:28:
c6:26:7c:98:32:77:12:0e:c4:54:ef:5b:14:99:42:
4b:22:a9:6c:0f:6f:b2:6c:ce:2a:88:d2:1f:d5:93:
d7:32:a5:66:59:57:26:86:18:a6:ab:d4:d7:ac:08:
74:7c:96:66:de:0d:fb:56:e5:31:56:8a:d2:58:4a:
52:bf:ce:73:5a:d3:95:8b:6a:c1:45:db:20:03:fa:
9f:40:f4:ba:0f:c0:d6:47:5f:70:9b:a9:b0:9c:9c:
e2:8e:8b:80:d5:3a:13:b7:c5:80:3b:7e:ae:d6:dc:
b6:af:54:a9:43:a4:81:71:9d:c7:75:ff:a1:28:72:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:45:D4:E1:68:72:B5:D7:2A:EE:E8:46:5A:15:25:BB:2B:89:5A
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8e:32:ff:63:97:aa:86:d1:b5:df:23:6a:ae:40:7a:f6:c5:
96:fc:dd:1e:47:ca:84:03:e3:aa:40:b8:ce:f2:96:6f:40:aa:
b2:95:5b:1f:84:a3:d0:32:3b:29:47:5b:42:0b:d8:30:a4:7e:
e8:00:ad:f3:c4:c0:46:75:55:06:33:e1:e2:31:c9:19:97:28:
f0:6b:a0:1d:83:38:0d:1e:27:46:dc:7c:13:4d:84:5f:09:c1:
a5:4d:40:5c:04:4c:1a:19:d2:b3:a1:3b:ad:89:60:cb:7b:49:
9d:70:ad:9c:d5:df:ed:fc:97:27:ed:55:7a:78:dc:44:eb:55:
6e:9b:e2:31:c7:f8:f3:38:71:19:ef:31:01:42:99:b1:77:70:
cd:d4:58:28:e8:d6:15:bd:62:98:e8:71:1d:da:4e:e1:06:d8:
6f:63:cc:58:4d:91:42:ca:fd:ef:6f:86:1b:d6:dd:15:f3:e3:
51:2b:ed:e9:a2:40:75:5e:0c:ce:19:b6:05:39:f6:1b:53:22:
65:91:18:1b:89:46:9f:52:97:ec:ae:6b:6b:f2:af:ff:21:d1:
2e:7d:bf:5b:2b:9b:25:99:c5:f0:55:6f:eb:1d:d8:35:a1:2a:
9a:57:56:44:64:cd:f6:89:62:fb:31:3e:02:f0:2f:ce:34:82:
d0:38:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:16 2026 by rpki-client