Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: NyM7FZh2BpPOc6CtmOSDhBn4+Q19Bpl6Taq5HmupJMY=
Subject key identifier: 3A:38:97:86:5B:AF:4F:EB:2C:B7:6F:FF:7A:11:8C:0C:4B:50:51:C7
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 019D9AE2BF4DE8B576C164AEFB5F320E44B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: m9r089+KFSRETT/pv12bEgntJFMty3BlxiXlqHImjC4=)
2: r2XaIkvbtNRIA7GDmackHk60QAM.roa (hash: 5qhD+1z/Ukex+udgPBqOlQgjbCAqwLAXHXdPV8FaxfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bf:4d:e8:b5:76:c1:64:ae:fb:5f:32:0e:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=3a3897865baf4feb2cb76fff7a118c0c4b5051c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:16:33:3a:96:63:5b:45:b4:c6:e2:93:79:
69:f7:23:6b:c2:ab:8d:f5:cd:92:66:ba:c2:d7:a3:
66:6d:68:ff:6c:94:e0:e7:7c:d2:e8:ae:35:6e:14:
81:82:ff:5b:e3:8f:ee:9f:70:ef:be:38:08:0f:4b:
9a:8d:50:35:6d:33:77:90:a8:e4:cc:1b:96:76:74:
40:31:8c:b5:d1:db:22:72:06:df:51:e0:2c:dd:ee:
e8:05:ce:bc:97:ad:6c:39:a4:fd:1e:06:ce:db:cf:
8c:ad:d1:54:d5:93:04:85:62:e5:e2:c0:f1:fc:bd:
29:a2:ed:9e:6f:a0:64:83:22:97:b2:84:66:72:46:
f1:25:1a:53:18:92:ec:85:8c:db:25:21:6a:33:52:
18:68:ab:87:03:f7:24:d5:3c:cb:a8:7f:67:e4:de:
be:0c:a6:ad:f3:2e:9c:ce:10:36:b3:cd:1f:a9:5b:
43:29:83:15:f8:4f:10:27:3d:25:60:27:25:4c:fe:
a0:24:4f:78:45:47:b6:0c:24:89:d9:a7:4e:d7:7d:
24:cd:54:bf:9a:89:7a:03:57:ea:70:50:b9:1d:18:
8b:11:b9:1c:42:a8:40:71:9a:7d:2a:0f:36:3a:61:
58:c2:12:23:cc:56:27:95:bc:46:66:0c:98:d3:60:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:97:86:5B:AF:4F:EB:2C:B7:6F:FF:7A:11:8C:0C:4B:50:51:C7
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:6a:97:f6:66:2a:b5:3a:0f:a7:1c:f8:f5:e1:7a:e9:f1:
f2:88:63:37:10:dc:c4:36:6e:60:c3:3b:61:e2:30:9f:71:21:
24:47:a1:91:b3:cb:2d:d5:05:14:3c:f6:59:59:3f:25:2a:d1:
61:a8:63:d0:00:1d:90:d3:39:10:59:fe:7b:7b:7f:f2:4a:e4:
20:12:99:d1:3a:67:a6:d7:45:eb:82:84:bc:93:f7:1b:cf:63:
67:e1:e6:9c:be:4a:d4:cf:dc:b8:e4:3d:db:44:38:b1:7e:41:
b3:57:e1:03:06:d5:08:e4:7b:51:8d:4e:a3:14:7c:a4:12:b9:
71:96:29:5d:3d:30:89:71:fd:cb:d3:9c:4d:ec:ff:0b:90:7a:
91:b4:b6:38:96:ff:db:b1:48:c8:1c:1b:35:d3:21:c6:54:a9:
e2:eb:79:03:72:19:1a:17:c8:12:64:73:78:a7:f0:42:02:ba:
79:1f:a3:6e:2f:1d:c3:3f:d8:76:18:f0:21:c8:3c:3e:4d:2c:
e9:1c:e6:50:5b:a1:57:13:02:cb:0e:3d:c3:54:84:cc:71:44:
25:39:46:c0:c6:5a:74:c7:94:dc:46:d3:9c:6b:b6:f8:9a:27:
db:2c:09:be:2d:87:dc:8c:f3:b8:13:57:93:11:dc:12:d3:bc:
29:f7:b0:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4r9N6LV2wWSu+18yDkSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTAwOTYyNDdhOGM1NGU1ZGU4YzFiMGRhZjEwNTRhZWM4
Y2M0NTAwHhcNMjYwNDE3MTAwMDQ0WhcNMjYwNDE4MTAwMDQ0WjAzMTEwLwYDVQQD
EygzYTM4OTc4NjViYWY0ZmViMmNiNzZmZmY3YTExOGMwYzRiNTA1MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSAWMzqWY1tFtMbik3lp9yNrwquN
9c2SZrrC16NmbWj/bJTg53zS6K41bhSBgv9b44/un3DvvjgID0uajVA1bTN3kKjk
zBuWdnRAMYy10dsicgbfUeAs3e7oBc68l61sOaT9HgbO28+MrdFU1ZMEhWLl4sDx
/L0pou2eb6BkgyKXsoRmckbxJRpTGJLshYzbJSFqM1IYaKuHA/ck1TzLqH9n5N6+
DKat8y6czhA2s80fqVtDKYMV+E8QJz0lYCclTP6gJE94RUe2DCSJ2adO130kzVS/
mol6A1fqcFC5HRiLEbkcQqhAcZp9Kg82OmFYwhIjzFYnlbxGZgyY02BncQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo4l4Zbr0/rLLdv/3oRjAxLUFHHMB8GA1UdIwQY
MBaAFDrgCWJHqMVOXejBsNrxBUrsjMRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgt
Yjk3MjIxNDQ1MTNmLzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgtYjk3MjIxNDQ1MTNm
LzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwJql/Zm
KrU6D6cc+PXheunx8ohjNxDcxDZuYMM7YeIwn3EhJEehkbPLLdUFFDz2WVk/JSrR
Yahj0AAdkNM5EFn+e3t/8krkIBKZ0TpnptdF64KEvJP3G89jZ+HmnL5K1M/cuOQ9
20Q4sX5Bs1fhAwbVCOR7UY1OoxR8pBK5cZYpXT0wiXH9y9OcTez/C5B6kbS2OJb/
27FIyBwbNdMhxlSp4ut5A3IZGhfIEmRzeKfwQgK6eR+jbi8dwz/YdhjwIcg8Pk0s
6RzmUFuhVxMCyw49w1SEzHFEJTlGwMZadMeU3EbTnGu2+Jon2ywJvi2H3IzzuBNX
kxHcEtO8KfewGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:12 2026 by rpki-client