Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: zvBF7LEcMSD02DNJMPWolWoPGeLqeTunARY4urGvUaw=
Subject key identifier: 78:17:D8:B1:06:42:1D:A7:67:97:6B:E1:95:E9:1B:23:0E:35:66:58
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019D9AABF87C885EDED1F728AD0A16E73852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: ZDAkJpbzSg/LB8yiceGNAN9hibrbkbBtFxmAVa3q0Ts=)
2: X9Plsh78iLxMym05erYr23A5nAM.roa (hash: JnUoidyO7+02A7tvFvdT39dCgzkQhJHPQPcV1/E2iHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f8:7c:88:5e:de:d1:f7:28:ad:0a:16:e7:38:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=7817d8b106421da767976be195e91b230e356658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:37:df:fb:58:71:28:c4:f5:d7:fb:f3:62:
22:75:e1:8f:81:b4:b8:e1:ad:ad:21:3a:2a:b6:2a:
ac:25:67:7f:fd:d9:7f:37:5e:28:a4:6c:2e:51:ba:
80:a2:d5:c7:a3:3c:c1:68:ef:df:7b:a0:b2:e7:5f:
38:ac:f3:e2:38:c7:7a:d3:70:fa:6e:f3:07:a9:58:
00:9d:a8:b8:ae:6b:03:66:69:39:82:ba:df:79:52:
49:33:67:94:a8:b4:99:77:79:b5:24:4b:79:38:45:
bb:81:7e:1c:1e:af:eb:5d:5a:e2:9e:dd:fd:3e:91:
38:e7:fe:28:1c:b8:6a:e9:b8:0f:38:80:cf:6b:59:
a9:c1:60:b3:3a:11:01:3d:53:a7:ec:49:1c:d5:28:
04:16:3c:1b:95:0b:71:5b:37:55:6d:5f:ea:e2:23:
f9:71:03:48:48:ec:a5:08:01:ac:fd:73:81:0c:99:
13:d4:fb:e7:aa:c6:a8:41:63:44:b2:ef:42:35:bc:
d8:00:3a:1d:af:0c:b8:52:fb:28:c4:5f:07:ab:17:
62:c3:04:91:df:11:6d:df:e1:19:86:d4:0e:c4:f3:
da:18:3a:69:bf:65:00:bc:7f:9f:76:b9:81:50:b8:
38:b9:14:50:8f:c5:4d:17:57:bd:6c:d8:27:02:da:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:D8:B1:06:42:1D:A7:67:97:6B:E1:95:E9:1B:23:0E:35:66:58
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5c:54:2a:68:97:e5:60:15:de:9d:36:54:17:64:ec:b6:f0:
bd:2a:ed:fe:5d:d3:e9:ed:0a:42:3d:2c:4c:66:02:04:65:e2:
9a:54:3f:ca:fe:c4:7c:42:cb:34:a2:d8:df:cb:cb:b4:c8:57:
58:a3:00:63:e0:78:ae:79:34:28:e9:6c:f4:a1:51:6f:a4:46:
21:26:ac:93:32:88:bb:90:80:3c:c6:ad:5c:6d:e8:ee:60:02:
d6:0f:ca:bf:83:a9:75:c4:23:ae:87:68:bf:dc:c9:9e:ce:57:
01:6b:d4:8f:85:8e:a0:9e:b5:dc:44:96:f7:af:c8:85:a9:e6:
f2:05:9b:d9:17:ff:db:83:8c:6a:22:62:bb:8c:63:0d:db:62:
f8:80:b5:d1:33:8e:7f:45:d4:99:fd:45:32:a0:54:83:7f:49:
a9:dd:d0:fc:7c:a0:b3:e4:3e:61:df:3c:dc:57:cf:e5:f1:b2:
94:3f:bf:6b:45:cd:41:98:38:14:5d:33:17:45:1c:cf:51:cc:
04:24:d5:27:8f:de:87:5a:ae:11:db:2b:ba:8b:4e:aa:9d:ca:
84:de:5f:1b:b6:59:f8:4c:0d:5a:0e:6e:85:4c:78:e7:f7:af:
3c:19:76:00:e4:09:b5:d4:0b:c3:31:ea:05:a7:ed:03:7d:05:
43:01:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:06 2026 by rpki-client