Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: 3wkVeM2mBHynNolfEAcwvpRrZqLKg42l2RVT2xviDGI=
Subject key identifier: D3:32:E7:3A:D3:C9:6B:6B:19:98:FD:D4:E8:59:E1:8C:FF:8F:25:E2
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 019D992B562E61B5CA57B2D4953BAB636559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 1313
Signing time: Fri 17 Apr 2026 02:00:47 +0000
Manifest this update: Fri 17 Apr 2026 02:00:47 +0000
Manifest next update: Sat 18 Apr 2026 02:00:47 +0000
Files and hashes: 1: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: 1R36RI4zQJAF1f0Jrk6FecQxzYN3nHNTpl+BMQFPzEk=)
2: zLO5NhttWnGtKqBNs-55QF4xyAI.roa (hash: Y+DHFPwDb32W512hSzIFIuvnQ5dNais6OF6h18YAYzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:56:2e:61:b5:ca:57:b2:d4:95:3b:ab:63:65:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Apr 17 02:00:47 2026 GMT
Not After : Apr 18 02:00:47 2026 GMT
Subject: CN=d332e73ad3c96b6b1998fdd4e859e18cff8f25e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:6a:6c:db:b3:0b:3f:c6:be:c1:a7:43:2c:
b3:bb:0a:6b:be:b0:16:ac:3b:e1:be:ca:20:5a:4e:
69:72:5e:94:91:ce:aa:dc:f0:f2:0f:b0:ef:4d:83:
ee:3f:30:f3:ad:b0:c6:36:40:c9:94:38:c7:2d:1f:
ba:a4:99:73:58:4e:ac:56:17:f4:84:4f:50:12:a0:
62:4b:04:f3:7d:d7:ec:ce:1a:33:44:30:33:10:fb:
53:99:cd:86:80:71:d6:04:92:61:83:ea:de:f6:56:
06:1c:ef:0f:61:2d:ee:8a:74:3b:e4:07:48:06:3c:
6e:ad:ff:d0:01:b9:a3:1d:f2:8b:47:18:69:4a:71:
82:8e:8f:92:2c:b5:09:3f:bf:aa:1a:bc:a5:77:f1:
b0:ea:bd:1c:50:5e:1c:7c:41:b8:12:ea:71:95:f5:
00:d0:0f:9d:da:8f:c8:eb:68:59:fb:5e:58:85:99:
19:e8:07:73:f6:f7:db:44:9c:3b:aa:92:ae:a5:fa:
36:93:21:da:6e:c7:38:b8:5f:79:0b:ea:90:1b:8e:
83:7e:4e:ca:0b:42:e9:44:69:52:c7:47:5e:e1:30:
68:c1:c3:27:17:df:ff:0e:37:45:18:0c:94:83:6f:
b6:73:61:32:55:61:78:6a:00:16:99:6c:06:9a:ff:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:E7:3A:D3:C9:6B:6B:19:98:FD:D4:E8:59:E1:8C:FF:8F:25:E2
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e3:36:b6:7e:0d:9c:3c:a4:6e:1c:2e:5c:39:11:5a:50:97:
89:e7:44:d0:eb:be:ef:bf:19:6b:11:a7:2c:dd:1f:11:eb:e3:
19:1a:64:1a:04:78:36:e8:27:f6:37:cb:70:0b:05:66:0c:11:
e6:e9:cc:69:ba:60:ce:49:5c:7f:ad:ed:96:0b:69:bb:70:20:
eb:1c:5c:2c:8c:39:56:d0:41:9b:5c:86:1b:24:63:12:64:51:
e0:08:6f:64:58:01:c5:e2:f8:1f:00:76:93:7b:9b:e7:b1:62:
d2:c0:77:e8:43:29:f1:04:86:8f:98:0d:dc:a8:11:4b:46:95:
31:97:2c:8f:b7:d0:db:7d:67:29:a9:5b:72:ea:ce:5b:98:98:
f5:59:62:be:99:74:e5:71:7c:14:04:af:c2:38:1e:23:2b:13:
44:27:5e:91:d1:28:33:d0:ec:e2:e8:c4:a7:8f:6a:ff:0e:20:
ae:f9:cf:c6:8b:d0:a3:48:75:a9:9f:ad:2b:78:2f:af:71:07:
1a:9b:87:df:7a:18:af:bf:55:ea:e5:c0:ee:7c:1a:9f:5d:2d:
e6:4e:ef:ef:43:d8:47:df:07:11:ff:12:67:4b:db:22:ee:49:
ee:8c:35:de:9c:e5:27:05:ac:ff:7a:dd:a0:85:d9:ec:2b:b2:
9e:92:1a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1YuYbXKV7LUlTurY2VZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOTUyMWM3MzUyZDFjYWMzZjk4Yzc1NmZjN2E2YjRiM2Fl
OTc1M2QwHhcNMjYwNDE3MDIwMDQ3WhcNMjYwNDE4MDIwMDQ3WjAzMTEwLwYDVQQD
EyhkMzMyZTczYWQzYzk2YjZiMTk5OGZkZDRlODU5ZTE4Y2ZmOGYyNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkBqbNuzCz/GvsGnQyyzuwprvrAW
rDvhvsogWk5pcl6Ukc6q3PDyD7DvTYPuPzDzrbDGNkDJlDjHLR+6pJlzWE6sVhf0
hE9QEqBiSwTzfdfszhozRDAzEPtTmc2GgHHWBJJhg+re9lYGHO8PYS3uinQ75AdI
Bjxurf/QAbmjHfKLRxhpSnGCjo+SLLUJP7+qGryld/Gw6r0cUF4cfEG4EupxlfUA
0A+d2o/I62hZ+15YhZkZ6Adz9vfbRJw7qpKupfo2kyHabsc4uF95C+qQG46Dfk7K
C0LpRGlSx0de4TBowcMnF9//DjdFGAyUg2+2c2EyVWF4agAWmWwGmv9whwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMy5zrTyWtrGZj91OhZ4Yz/jyXiMB8GA1UdIwQY
MBaAFKGVIcc1LRysP5jHVvx6a0s66XU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMt
ZTVhZGEzNmZhMWYzLzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMtZTVhZGEzNmZhMWYz
LzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+M2tn4N
nDykbhwuXDkRWlCXiedE0Ou+778ZaxGnLN0fEevjGRpkGgR4Nugn9jfLcAsFZgwR
5unMabpgzklcf63tlgtpu3Ag6xxcLIw5VtBBm1yGGyRjEmRR4AhvZFgBxeL4HwB2
k3ub57Fi0sB36EMp8QSGj5gN3KgRS0aVMZcsj7fQ231nKalbcurOW5iY9Vlivpl0
5XF8FASvwjgeIysTRCdekdEoM9Ds4ujEp49q/w4grvnPxovQo0h1qZ+tK3gvr3EH
GpuH33oYr79V6uXA7nwan10t5k7v70PYR98HEf8SZ0vbIu5J7ow13pzlJwWs/3rd
oIXZ7CuynpIa2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:58 2026 by rpki-client