Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: z5gcYg704NYRetGCNgnXiGrPxIvcH/Ff9gCVSP8hIFg=
Subject key identifier: 44:D2:85:AC:3E:3A:EA:B0:2E:EA:03:AD:41:F5:E8:AC:DB:97:6B:73
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019DA52F4EF3559C4547483ABD1B920BDC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 1602
Signing time: Sun 19 Apr 2026 10:00:34 +0000
Manifest this update: Sun 19 Apr 2026 10:00:34 +0000
Manifest next update: Mon 20 Apr 2026 10:00:34 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: 18AJ/VpL6VZ6jiuH3XkbBH8nJAT7CBAHjQjDebOtBVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:4e:f3:55:9c:45:47:48:3a:bd:1b:92:0b:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Apr 19 10:00:34 2026 GMT
Not After : Apr 20 10:00:34 2026 GMT
Subject: CN=44d285ac3e3aeab02eea03ad41f5e8acdb976b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:1e:fb:ce:ab:75:ab:58:f1:20:7d:eb:91:
9f:bc:b1:b8:7e:ef:33:6d:a4:b9:71:75:09:33:51:
5b:10:ca:0a:8a:cb:1e:5b:b6:4a:f8:c3:9c:11:3d:
f3:08:32:4e:93:18:0b:ba:25:45:9f:f6:c7:0e:84:
56:52:6f:a8:a7:2b:45:fd:b2:52:5a:ea:6f:50:03:
94:f8:08:cd:dd:7e:d1:85:52:66:6e:ae:db:64:6f:
12:25:15:46:f6:0a:18:8a:a9:8a:13:f9:9f:03:9d:
2a:ca:f6:2c:a0:29:32:e8:33:37:94:2d:11:d3:db:
79:9b:ca:9b:b2:05:9d:94:08:8d:7a:c5:f5:5e:6e:
94:a8:ab:42:73:a9:20:79:42:78:fb:d2:a3:65:cb:
d3:8f:5b:1a:88:30:37:1d:ac:08:79:0d:f8:f8:a6:
a6:2b:6a:e9:a1:27:2e:a6:df:df:3d:d7:48:ae:9d:
24:dc:52:3d:3e:4b:2b:54:83:97:e2:04:c8:72:5f:
e1:94:97:e2:77:cf:2b:64:e4:fd:fd:ae:d9:a0:40:
bb:82:8b:ce:43:73:20:ba:be:1a:ef:9e:a6:a1:6a:
1a:f9:fb:5c:c3:21:b3:ca:aa:9b:63:90:3c:3a:80:
8f:b7:af:c7:c6:2c:ee:45:c6:db:49:2e:6c:9f:43:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:85:AC:3E:3A:EA:B0:2E:EA:03:AD:41:F5:E8:AC:DB:97:6B:73
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:af:3b:13:1a:e1:85:c5:b1:c0:d4:67:97:ae:42:98:ac:51:
94:1e:3d:c8:0a:51:6d:03:e3:f2:32:2c:18:49:d3:5a:96:a1:
59:c1:7b:2e:14:8e:0b:15:3b:15:e5:01:e8:bc:c9:c2:38:be:
a5:66:eb:50:16:1b:33:4b:7c:f8:fd:5c:bb:07:e1:71:16:be:
3f:6d:ca:37:42:60:60:18:02:24:de:04:bc:ef:c3:69:ff:08:
99:0d:c2:12:ef:c5:3e:32:6b:7a:f8:34:57:37:14:0b:d5:54:
df:cf:dd:72:b3:44:7f:26:cb:31:87:54:ea:ef:ac:34:57:57:
3d:f7:32:7f:45:33:5b:32:81:e3:24:8f:7b:d1:6e:5a:1c:17:
e0:18:75:10:45:f2:c3:97:29:a4:4c:70:53:38:98:01:49:02:
1d:a4:8e:0c:e1:10:50:13:3a:a7:f9:1a:68:d8:8c:cb:ae:12:
ae:1d:b3:e1:3e:07:81:48:5f:5f:b7:94:25:39:6a:19:99:db:
88:b5:71:1c:11:8c:76:f5:fd:e8:17:20:22:f0:8d:fe:5d:f8:
71:5b:ec:67:22:3d:c8:6b:ad:f7:28:e8:0f:56:25:cf:ad:48:
2f:56:87:bb:9a:d8:33:28:42:32:5f:95:10:50:f6:56:3e:f6:
34:ac:fc:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL07zVZxFR0g6vRuSC9waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw
YTVmZDQwHhcNMjYwNDE5MTAwMDM0WhcNMjYwNDIwMTAwMDM0WjAzMTEwLwYDVQQD
Eyg0NGQyODVhYzNlM2FlYWIwMmVlYTAzYWQ0MWY1ZThhY2RiOTc2YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR0e+86rdatY8SB965GfvLG4fu8z
baS5cXUJM1FbEMoKisseW7ZK+MOcET3zCDJOkxgLuiVFn/bHDoRWUm+opytF/bJS
WupvUAOU+AjN3X7RhVJmbq7bZG8SJRVG9goYiqmKE/mfA50qyvYsoCky6DM3lC0R
09t5m8qbsgWdlAiNesX1Xm6UqKtCc6kgeUJ4+9KjZcvTj1saiDA3HawIeQ34+Kam
K2rpoScupt/fPddIrp0k3FI9PksrVIOX4gTIcl/hlJfid88rZOT9/a7ZoEC7govO
Q3Mgur4a756moWoa+ftcwyGzyqqbY5A8OoCPt6/HxizuRcbbSS5sn0OaxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETShaw+OuqwLuoDrUH16Kzbl2tzMB8GA1UdIwQY
MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt
YjhlZDY2ZDQyNzgyLzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy
LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAva87Exrh
hcWxwNRnl65CmKxRlB49yApRbQPj8jIsGEnTWpahWcF7LhSOCxU7FeUB6LzJwji+
pWbrUBYbM0t8+P1cuwfhcRa+P23KN0JgYBgCJN4EvO/Daf8ImQ3CEu/FPjJrevg0
VzcUC9VU38/dcrNEfybLMYdU6u+sNFdXPfcyf0UzWzKB4ySPe9FuWhwX4Bh1EEXy
w5cppExwUziYAUkCHaSODOEQUBM6p/kaaNiMy64Srh2z4T4HgUhfX7eUJTlqGZnb
iLVxHBGMdvX96BcgIvCN/l34cVvsZyI9yGut9yjoD1Ylz61IL1aHu5rYMyhCMl+V
EFD2Vj72NKz8lQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:21 2026 by rpki-client