Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: PVgreZ0as73xXj9CQcv8v0NkX15gfFchT8o1hpsdp7A=
Subject key identifier: E0:E1:BD:A1:B4:49:CB:3A:5B:07:CA:D2:90:EB:DC:7E:66:41:79:E7
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019D9A3EBF793EDCC7FA151602DC2D1D53DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: XK748S3GZrejegKImgMskuBcVLhRcrpiWO0ADlsOE6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bf:79:3e:dc:c7:fa:15:16:02:dc:2d:1d:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=e0e1bda1b449cb3a5b07cad290ebdc7e664179e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:75:b9:89:58:6e:cf:4d:f7:e8:dd:0f:bf:
2b:75:64:74:c3:e0:8a:00:e5:c5:a2:7d:1b:6f:04:
20:dd:3d:92:97:89:41:e3:fb:b0:a3:04:64:59:42:
c7:f2:c1:d8:fc:9a:09:94:6d:b0:39:6d:f4:cf:99:
87:24:e8:54:e1:2b:b4:c9:f4:2e:f3:aa:34:a1:c9:
b6:3c:0b:30:57:ab:9f:e8:c4:1b:5e:41:49:11:f9:
d0:1c:ee:32:96:c7:49:10:ca:9c:b8:e6:82:18:51:
9e:6b:8a:83:c1:58:79:e6:12:71:02:3c:ae:b0:bb:
2e:c1:f1:39:41:02:bd:b0:ba:da:9e:3f:4f:f9:e4:
c6:fc:77:51:f2:2e:f7:fd:98:78:35:50:9f:ab:d5:
3b:ca:e3:29:e7:05:4e:04:bf:05:e8:30:ce:d6:e6:
2d:ea:31:25:14:4c:13:23:ea:dd:5b:08:b5:80:67:
29:e9:06:91:55:5a:3c:da:15:d8:ce:3a:eb:62:a2:
d9:d1:96:9c:b2:2f:5c:e0:cb:bf:cc:1e:21:78:7a:
15:e6:8c:c4:2b:84:8c:2a:cb:09:84:64:86:0e:6a:
d8:6d:a9:1e:f8:03:3e:a5:18:ad:94:20:ad:04:1c:
ad:e0:a9:08:a0:b6:3b:4f:92:fb:bb:a0:b5:88:aa:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:BD:A1:B4:49:CB:3A:5B:07:CA:D2:90:EB:DC:7E:66:41:79:E7
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ad:66:3b:a7:28:8a:59:8a:f2:14:3f:86:3a:d3:87:d0:4a:
62:06:5f:d4:fa:2c:da:49:e3:aa:69:26:3e:b4:a1:f1:d0:c7:
61:34:90:46:3e:35:94:7c:02:66:26:c0:1a:ce:dc:14:7a:fc:
6b:11:00:ff:d1:1a:c9:0b:ef:07:9e:07:24:4f:b5:e8:10:1a:
24:74:8e:15:e6:13:93:59:1e:66:9f:db:7e:2d:da:5f:56:36:
f3:77:cf:01:82:8f:6e:5e:df:4c:31:13:02:61:5a:f1:0d:90:
0f:14:ea:d8:58:b2:7d:08:3f:b6:e2:fc:51:23:45:a3:18:5c:
f4:44:df:a8:b2:c7:1e:f8:1d:4d:dc:63:b0:2b:37:23:bb:61:
ff:db:80:a1:f9:59:ef:5a:ff:dd:76:0c:e3:ab:d7:34:1d:1f:
cd:f7:c9:3b:ce:06:48:cd:93:19:dd:2f:bf:83:18:6c:42:dd:
49:9e:c1:df:6f:12:93:cc:b7:ff:55:82:2e:d9:cd:b9:53:4b:
b3:c8:71:73:07:7d:2f:e3:8a:3a:89:81:e0:1c:10:e1:21:f3:
f1:c0:cf:8e:d9:b8:31:2f:ef:14:c0:2d:e8:9e:c9:13:0a:6e:
15:76:03:8b:9c:78:b2:6f:06:d7:19:29:d4:06:4a:96:63:16:
dd:f8:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:22 2026 by rpki-client