Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: DmsSHci/SY5cAklpkRAeUulrpkgnHcov6cS9DZdxhFc=
Subject key identifier: 39:95:CC:F8:56:39:C2:A2:D1:AF:A5:A1:0A:68:49:27:80:E6:27:02
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019D9B88129073601ADF53FF485790F05C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 1495
Signing time: Fri 17 Apr 2026 13:01:19 +0000
Manifest this update: Fri 17 Apr 2026 13:01:19 +0000
Manifest next update: Sat 18 Apr 2026 13:01:19 +0000
Files and hashes: 1: 5ATSOSiA10EtAdDvyzpiFcAS2U0.roa (hash: FEzcVGC/mYd4L2CAAAA7gfNC+WWkBe4b/x0RPbYqcaw=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: W+9NmOFtortPA/ViHZK8vQuVp2HJBWSZW7xLg4vNEVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:12:90:73:60:1a:df:53:ff:48:57:90:f0:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Apr 17 13:01:19 2026 GMT
Not After : Apr 18 13:01:19 2026 GMT
Subject: CN=3995ccf85639c2a2d1afa5a10a68492780e62702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:b7:84:04:7d:0b:60:5f:b2:7b:f3:77:d3:
87:3e:b6:1a:37:dd:ab:54:f2:e5:6a:13:83:43:21:
a6:3d:ca:15:10:d0:19:82:5f:76:d5:78:25:69:70:
12:de:0a:8f:b5:7b:e0:52:06:7e:24:ff:7a:17:c0:
4a:40:00:85:16:ec:41:04:39:77:1a:56:5e:3a:d0:
b9:70:56:8c:02:bc:2b:e2:23:f5:be:9e:4d:16:55:
64:21:cf:d8:ff:b9:b8:b2:ae:cb:a0:ab:f8:3e:8f:
5b:9d:54:28:21:e0:aa:6f:47:39:01:67:8b:c8:14:
4f:26:95:be:69:c1:33:aa:ad:a0:29:0e:a7:ac:46:
22:9a:7c:43:75:60:6b:0a:4c:73:dd:40:e5:f6:fb:
98:8c:4c:02:c0:47:16:88:14:56:01:fd:31:17:8e:
60:7e:c1:61:e6:a6:3d:30:b3:66:8d:58:ab:d4:b3:
1c:9e:59:31:bd:36:90:2c:25:07:2c:cb:e5:e5:e8:
14:04:db:a9:49:87:a4:a1:c0:d5:f5:d5:f8:fb:ce:
74:d2:bf:3f:15:4e:7f:a3:04:51:5a:5f:0f:ed:b2:
20:53:85:c4:5d:e0:a3:7f:d4:18:f0:ee:ad:e2:44:
5a:72:a8:1f:13:9c:95:ee:64:3f:23:7c:28:e3:5c:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:CC:F8:56:39:C2:A2:D1:AF:A5:A1:0A:68:49:27:80:E6:27:02
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:30:1a:ca:fe:47:f9:e5:f8:ae:43:e6:9e:b5:ac:c7:c9:
f7:69:7b:99:23:00:4d:89:0a:65:16:fe:ba:de:60:7a:17:b1:
b2:5b:ec:a0:0e:db:be:70:78:ba:0a:a6:a6:4a:03:bf:b5:88:
49:b8:8f:7c:9b:40:8d:e7:e1:e8:65:21:41:dd:ef:e1:9c:20:
bd:72:1e:d4:7f:dc:56:f1:c4:bf:63:c0:5a:b9:45:06:97:70:
64:a9:66:75:45:eb:8d:a7:74:c5:58:e5:3d:c0:6f:11:f3:d7:
dd:f2:ab:75:31:29:05:5c:c4:1d:47:ac:96:f2:cf:8c:d8:a5:
7f:f9:c2:72:ff:cc:28:ee:ec:b8:ec:47:f5:24:20:3d:f7:21:
05:73:d5:91:71:e4:53:2d:b3:c0:41:8c:1a:11:ae:f1:43:29:
2c:a8:c7:a6:6a:ee:d9:60:33:60:c3:fd:e5:a3:7c:43:40:ad:
56:ef:1c:6e:ad:b6:d2:b4:b4:46:e9:4d:1f:cc:a0:6d:7a:21:
a4:2c:a8:40:8a:68:a5:d5:8b:41:20:17:cd:97:28:80:d4:cb:
ed:17:35:6b:6d:c3:f7:f3:8e:da:89:60:74:b3:a8:d6:92:76:
46:e5:54:81:93:52:fa:84:fd:00:11:3e:5b:a9:a8:09:c5:ae:
58:fb:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:42 2026 by rpki-client