Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: OA8MSuPYK7D+OvZwShRehNfDu9hIMkuZ4u84ZuQpMPY=
Subject key identifier: 75:00:A8:0B:18:B8:16:45:9A:CA:D2:AD:55:46:20:04:72:CD:3C:FC
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019DA37893BAB54B58767CBA689463773EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 17EB
Signing time: Sun 19 Apr 2026 02:01:21 +0000
Manifest this update: Sun 19 Apr 2026 02:01:21 +0000
Manifest next update: Mon 20 Apr 2026 02:01:21 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: xfmyZZyErEJfSga7L26TRbVlua/npnPdljloKQw/BdQ=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:93:ba:b5:4b:58:76:7c:ba:68:94:63:77:3e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Apr 19 02:01:21 2026 GMT
Not After : Apr 20 02:01:21 2026 GMT
Subject: CN=7500a80b18b816459acad2ad5546200472cd3cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:20:d7:1c:c8:87:72:95:58:b9:69:24:27:
05:13:2c:09:c0:88:82:71:1b:21:b4:70:6b:99:76:
cf:e4:e3:22:36:72:a5:14:6c:aa:d9:7b:36:cb:54:
70:a7:0e:99:d7:19:ef:1c:e5:80:da:75:58:34:c0:
72:37:10:70:a6:0a:ab:c6:a4:2b:a7:ad:69:56:de:
34:ec:a3:24:3a:4c:bd:58:ce:cc:db:f4:4e:54:1c:
46:7e:ce:b5:00:69:17:3d:00:24:b3:cf:82:b0:e0:
12:fb:b6:80:7f:8a:6a:62:a2:91:60:49:b7:56:ca:
db:7c:02:fa:87:2b:17:4e:0b:72:df:a6:38:38:c9:
83:43:f6:e6:35:12:bf:dd:e9:5a:c1:d3:99:34:bd:
05:93:11:33:9e:bc:09:e8:26:75:6e:ed:ee:dc:76:
b2:fc:2b:45:41:93:23:c6:39:2f:96:80:38:53:0c:
de:75:47:b6:02:ff:b2:2c:10:73:47:4c:08:0d:4c:
45:a4:6e:d7:b0:b7:c1:54:4c:21:71:2d:02:82:95:
64:37:26:b6:43:b6:83:60:73:c1:85:c2:c3:60:6d:
df:3e:bb:51:04:ae:c6:ab:f7:e2:8b:bb:23:f0:ae:
14:a2:7e:fb:b7:4c:37:11:e3:30:a5:9a:e5:82:13:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:A8:0B:18:B8:16:45:9A:CA:D2:AD:55:46:20:04:72:CD:3C:FC
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:20:bf:03:ca:ed:19:ea:fe:be:25:76:78:99:9b:82:fe:
ce:a3:08:bc:33:2e:3a:cc:bd:df:82:6e:57:42:87:eb:60:20:
e4:19:54:b2:24:32:f8:ca:32:c8:e1:f8:47:83:85:68:ba:e7:
71:86:e4:7f:d9:84:f1:04:34:ab:85:44:a4:b7:f5:b2:6f:1a:
fb:e8:aa:49:f7:f4:fe:26:ee:07:99:7e:84:63:d3:9a:8c:3a:
58:7f:ab:60:12:12:cf:f6:1d:13:08:e3:39:cc:46:70:fb:24:
ae:29:cd:cd:a1:f8:45:52:d9:f7:de:d7:96:b4:01:74:c4:d2:
7e:d8:f4:8b:6e:ac:bb:71:80:ce:35:a9:36:8f:c5:91:30:d2:
76:7a:8c:1e:f6:0d:21:90:78:2a:76:55:d0:7e:b5:f0:a1:58:
6f:eb:3a:07:12:20:ff:95:e6:6d:66:ca:12:6b:fe:72:6f:1a:
f9:08:8b:c3:6b:c7:b2:d1:91:f6:69:1a:70:12:f6:8f:2d:f2:
8f:a0:23:8f:67:c8:e5:45:5d:16:cd:c1:59:fe:32:c0:38:f2:
e2:5f:db:3b:b2:77:8b:79:50:11:49:be:51:f3:f1:60:75:6f:
41:6c:d2:f5:a4:ac:72:ad:08:f9:f8:b9:4b:7a:40:aa:c5:0a:
7d:51:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:04 2026 by rpki-client