Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: BONRjszJfnPPoWDZKj1QAxhcgskaRAl6iwXEN6vS/a4=
Subject key identifier: 27:7E:6F:5F:55:D8:82:98:5E:BF:9F:01:1E:9E:5A:41:A6:81:A6:D0
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 019D9AE3507D2903C0C99084B4D2C59F7917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:01:21 +0000
Manifest this update: Fri 17 Apr 2026 10:01:21 +0000
Manifest next update: Sat 18 Apr 2026 10:01:21 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: IU9S4gw7IEiUGpfqXsHAvofgviPq1kR4+cGXTwKALKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:50:7d:29:03:c0:c9:90:84:b4:d2:c5:9f:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Apr 17 10:01:21 2026 GMT
Not After : Apr 18 10:01:21 2026 GMT
Subject: CN=277e6f5f55d882985ebf9f011e9e5a41a681a6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:d1:b5:23:fd:fd:89:d6:93:c3:e2:24:8d:
1a:ed:70:b1:0a:26:d9:d2:6c:b0:79:6a:13:30:c4:
1f:07:77:1e:0c:e0:da:87:37:a6:d5:ca:4a:14:00:
7b:48:a5:7d:43:ad:cf:7d:ee:c2:46:e2:e4:27:03:
32:75:65:96:34:b0:31:aa:12:98:ab:71:62:c2:6d:
28:c1:bc:c0:55:7f:2c:8e:69:8a:74:5a:20:78:0e:
70:10:8b:3a:27:1b:d9:e8:2c:f9:a5:7a:b5:77:6e:
f5:c8:f5:a2:ea:c9:4b:0f:67:6b:d0:3a:93:fa:fa:
26:7c:b1:0a:ed:76:2a:23:0e:ff:d4:51:af:b2:7b:
59:d6:c1:b2:b6:b0:00:29:b8:67:f3:17:f5:b0:87:
c0:fb:53:4f:f9:36:e6:77:14:07:01:9f:b6:cc:0f:
9a:2a:c8:20:1b:9c:d9:3c:ae:0e:c1:7d:f6:3e:bb:
91:7a:38:71:b5:82:17:eb:e8:e1:ed:85:86:da:8e:
57:67:ed:2b:ec:b6:ea:e3:30:8b:9a:41:de:8b:66:
64:cc:7f:de:8d:8b:18:c1:1f:4e:6d:40:d6:d8:b4:
8f:c1:09:64:f4:6f:27:77:e1:48:4b:1b:e3:f5:ec:
74:b9:71:b8:88:70:e4:e1:6b:26:5a:33:13:d0:04:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7E:6F:5F:55:D8:82:98:5E:BF:9F:01:1E:9E:5A:41:A6:81:A6:D0
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:96:42:18:3c:9c:f1:32:0d:0f:de:e0:4e:b3:2d:6c:4a:5f:
eb:ac:9f:5f:55:50:40:97:64:5f:7b:2e:59:69:35:04:4e:7b:
36:60:73:19:d8:7d:38:33:40:e0:dd:b0:6b:f3:d4:cf:23:53:
fc:b1:4e:80:f9:a5:62:cb:10:d7:7b:f9:35:b3:5a:66:41:0f:
a0:a0:3c:d0:8d:fc:56:e1:92:22:13:e0:34:7a:b2:04:bd:7b:
42:76:95:c0:bf:dd:77:c2:5d:62:ca:8b:e8:c5:17:e8:62:76:
3d:61:12:37:0e:8d:d2:2a:6c:40:6e:d9:14:13:37:c2:67:59:
ce:ec:4b:c3:1e:1f:61:1b:5a:28:87:fe:dd:39:63:9a:1e:08:
ca:57:c1:3a:c0:fd:8f:19:cc:39:78:b3:8d:b7:eb:c3:e0:98:
8e:ec:15:57:b3:ab:8a:a1:54:95:3f:44:50:00:fb:27:31:38:
13:89:78:83:e2:56:99:0a:75:11:1a:3a:6c:13:6c:60:56:29:
59:26:6f:5b:71:f5:f9:cd:e4:7e:6b:be:35:0a:db:3d:32:78:
78:2e:33:c1:4a:d4:8f:ff:ef:78:dd:55:aa:19:33:10:2e:ec:
2d:57:e6:5d:ff:3a:d7:a5:30:48:f9:4d:a6:66:57:50:e6:45:
5d:a6:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:01 2026 by rpki-client