Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: IOd9QLny5xN21iMsqFGOdvtlZavzwMNQPlRRJ1sBnZs=
Subject key identifier: 93:85:63:1E:DB:89:29:3E:B3:B6:DB:F5:31:2F:3D:6C:32:36:60:B4
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 019D9B5077F9A042A39579BBA45275AB04FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: 6LQC_WZqbsxqpCNxITLwNmSvDPk.roa (hash: 2jpqjh4IYhaGl+W39lws2/CQFWFrqFjpyZKUsxZ8H+0=)
2: CO_VzBu4gFZGQo6TZVLREcCwUwY.roa (hash: LG1jfCe3GnKEfOBNBBGC9FiXFKQ/e+HVoB0Wq69YJpQ=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: BH2MNHy+53H7mfgT9EHR9ImrR5VVHVz/7F6E4TxKL54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:77:f9:a0:42:a3:95:79:bb:a4:52:75:ab:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=9385631edb89293eb3b6dbf5312f3d6c323660b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:65:0a:3d:03:78:38:5c:cf:57:25:dd:fa:
40:1f:c2:b2:ae:3c:63:dd:d4:6f:37:c8:5e:2b:7b:
76:4d:dc:32:58:dc:ea:fc:05:af:e6:26:ed:4f:93:
b1:fe:dd:98:08:e0:4d:8f:93:e8:c0:a4:4e:a2:6f:
57:90:75:45:4b:7a:25:da:76:08:b1:4b:5c:c9:7f:
7a:eb:12:a6:12:f9:57:71:42:53:3d:f5:b1:cb:9c:
2c:b1:5a:0a:75:e5:00:92:f1:46:d0:35:9e:3d:c9:
91:20:94:a3:b8:c4:77:a5:42:94:f8:d3:52:eb:05:
dc:da:78:34:db:12:2f:91:1b:33:58:1b:87:75:72:
08:37:3a:d2:1c:6f:e1:a3:0b:c4:78:29:02:4f:83:
ba:ea:9f:74:e8:42:96:4c:a9:da:11:a8:9c:31:5f:
82:8e:2a:e2:c6:8f:e2:90:d6:0e:4c:68:76:29:6f:
04:17:a9:e2:87:8d:50:88:8c:6b:a6:33:6b:30:88:
49:9f:47:26:ab:ca:0b:b0:d2:a9:38:fd:9a:b1:e3:
87:cf:c1:2c:43:75:22:aa:7a:69:6c:35:2d:cf:97:
44:95:3f:cb:d5:6d:19:0d:37:67:91:60:ab:6d:41:
78:b3:29:b0:2f:2c:d8:73:c7:3c:2a:60:ed:97:75:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:63:1E:DB:89:29:3E:B3:B6:DB:F5:31:2F:3D:6C:32:36:60:B4
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:6d:b6:e9:77:c1:ae:ae:bf:2b:ab:53:aa:23:21:f0:7f:
e5:0d:34:cb:0d:be:fc:a0:f2:1f:6e:ed:95:90:0b:2a:0b:b0:
6e:8f:85:aa:75:28:3e:a3:a4:68:b2:df:34:5f:24:82:5a:ac:
61:bb:89:68:ef:c3:a7:87:c7:f2:80:bd:00:a1:1f:9f:4a:fd:
88:20:d1:17:22:47:82:27:b4:ee:31:49:a4:ab:a0:01:ea:a9:
ad:0a:19:79:7f:42:2b:8b:1e:81:e9:e6:b3:26:8f:cc:44:87:
a7:9e:f3:60:b3:64:5c:0b:e4:40:50:d2:cc:ad:98:9b:9f:7d:
2c:fb:f2:13:a7:ec:d6:16:b9:4a:5b:db:0f:53:ee:54:4b:1e:
aa:48:44:a8:a6:ab:94:fb:f5:38:a5:f5:36:23:b2:d4:81:57:
42:ed:c9:56:ad:29:89:46:da:18:d1:ee:d8:80:98:77:7b:01:
f5:e9:37:fa:c2:cc:25:b0:72:6c:da:fb:12:2e:bf:b5:4b:9d:
ff:c4:49:c5:bc:2d:0b:f2:18:3f:66:1d:6a:19:18:7c:28:1d:
fc:20:58:0c:73:03:ae:93:6d:7e:94:53:84:a7:42:9e:29:1c:
98:a2:6c:25:0c:15:95:3d:99:e6:3f:1b:5a:95:1f:c8:be:e1:
2d:66:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:39 2026 by rpki-client