Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: p/EtsDcVsGyxZoFthOnSPDQrDC72FC+7ZDr2R/vW6jc=
Subject key identifier: 91:09:9F:6B:EB:16:22:A5:AC:B6:FD:7B:B3:85:76:8E:67:3C:1D:29
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 019D9DE40862FA1945F42800E82F7D1CB937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 18C4
Signing time: Sat 18 Apr 2026 00:01:00 +0000
Manifest this update: Sat 18 Apr 2026 00:01:00 +0000
Manifest next update: Sun 19 Apr 2026 00:01:00 +0000
Files and hashes: 1: OU2kt5pP9LNwwlGwfRZGFyH5hzI.roa (hash: 6flWuRYE3Zk0uPFYWYiQzcnSra7IhOrzHZC3EVLgp5s=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: Nn2kkB1kYxopmqAmGSajy+xfGvIrpVcx6y9A9CvaHMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e4:08:62:fa:19:45:f4:28:00:e8:2f:7d:1c:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Apr 18 00:01:00 2026 GMT
Not After : Apr 19 00:01:00 2026 GMT
Subject: CN=91099f6beb1622a5acb6fd7bb385768e673c1d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:88:fd:54:69:ca:f2:ec:c9:00:5a:3b:60:31:
5b:02:e9:02:88:2b:61:9b:b0:0c:b0:e9:4c:48:22:
d7:a7:28:b9:bc:07:b9:7d:72:20:99:c7:fe:ba:af:
24:7e:96:b6:88:f3:ed:7f:da:bb:a0:e3:d4:fa:ef:
19:33:82:6f:0e:21:2d:94:2f:1c:4c:ff:fd:84:a5:
91:d5:6b:2d:f5:87:a3:a2:eb:3c:7b:f4:1e:dc:d7:
fb:ce:b2:77:46:35:1b:e1:3a:e0:68:71:1e:fd:15:
99:91:15:f2:b4:6f:b3:68:c6:6e:81:ab:05:eb:b1:
19:c3:d9:c0:47:7c:26:90:3a:f6:5c:e1:20:86:5a:
90:ed:98:43:23:d7:1f:1f:a3:37:36:c7:81:99:10:
3c:83:e4:f9:8b:00:9b:f7:d3:48:75:4d:0f:3f:a1:
29:00:18:37:57:41:e0:03:2d:8f:30:26:48:08:78:
63:12:56:97:82:ae:8e:61:cf:6a:56:e4:a1:92:97:
89:aa:92:e1:40:06:b4:4f:5a:43:1d:03:f4:2e:22:
31:5c:a2:2b:17:db:78:8b:7d:6d:43:44:d8:1b:09:
3b:76:08:f0:6f:24:11:a8:35:32:c1:5f:74:27:41:
ae:3c:25:32:6b:d1:40:27:67:54:f4:c9:a7:bb:d1:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:9F:6B:EB:16:22:A5:AC:B6:FD:7B:B3:85:76:8E:67:3C:1D:29
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:aa:c3:fe:c1:ee:7b:94:e2:5f:9b:7f:06:98:51:5f:9a:ca:
ad:99:63:0f:e7:62:f8:a6:7c:9b:d6:29:58:c0:0d:ab:6e:4b:
17:c8:34:5e:72:96:61:1d:14:b0:5f:99:cb:5d:36:e7:15:f0:
18:ea:c7:78:13:3d:6a:05:fb:a0:68:63:b6:23:5a:66:74:fb:
b0:8a:15:f1:2a:dd:c3:9c:44:ee:b8:1c:f6:31:9d:79:7a:11:
06:fa:af:4f:1c:6f:f8:3c:c8:01:c3:a8:a1:23:cf:a4:6a:31:
fe:d0:9c:97:bc:ba:86:49:9f:f0:a1:6c:48:c2:ca:53:fe:a4:
39:f5:84:26:dd:60:b7:e6:c3:90:ea:50:2a:97:68:3f:9f:c7:
c0:a1:ee:f8:78:28:77:00:09:21:34:4f:a3:c1:c4:58:8b:5a:
60:70:e2:b8:52:16:9e:ed:80:85:ef:14:73:42:ab:06:ee:a7:
2a:97:27:6a:86:bb:31:e8:9b:5c:1b:54:e9:86:5c:0d:cb:39:
24:47:6d:98:89:ff:bd:06:a4:24:fc:09:71:73:4f:58:16:d8:
c1:cc:da:01:00:0d:39:12:57:7c:eb:69:94:a8:a6:7d:aa:88:
fb:11:36:91:57:a1:91:64:00:e4:dc:fe:c5:f4:c3:10:b4:64:
03:32:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:33 2026 by rpki-client