Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: 0zpctxFDHRmR2Fd/RwbybydX4G72vjWV0HSii3b1tiY=
Subject key identifier: 06:28:BD:71:FA:BB:6B:3A:5A:D9:1D:8D:7C:6C:7B:3E:14:FB:F6:E1
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 019D9D3FB92B087C22BA18B5DCEB6256A604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 078C
Signing time: Fri 17 Apr 2026 21:01:32 +0000
Manifest this update: Fri 17 Apr 2026 21:01:32 +0000
Manifest next update: Sat 18 Apr 2026 21:01:32 +0000
Files and hashes: 1: TRTbys13hMPw7qPZ6_zT9S6DlZU.roa (hash: UwtEWUeqSkdN9j3umwCxrdjYmKQ9n0cv0zhOxAG4uV4=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: cCLuYMYdKcZhSz/YR1Hm5brrlgkozo44CmDg3HscOBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:b9:2b:08:7c:22:ba:18:b5:dc:eb:62:56:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Apr 17 21:01:32 2026 GMT
Not After : Apr 18 21:01:32 2026 GMT
Subject: CN=0628bd71fabb6b3a5ad91d8d7c6c7b3e14fbf6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:1d:58:e7:d6:53:98:cd:55:fb:68:05:78:
27:dc:17:d6:27:62:1c:eb:89:79:71:02:5a:2c:23:
e3:da:62:bc:76:4c:d1:12:3b:32:65:53:69:15:37:
e1:63:9d:5d:f8:29:d8:c3:32:59:fa:fa:25:ff:58:
9e:a2:aa:2e:95:14:6e:83:71:3e:15:c0:fe:a5:13:
44:ba:d4:86:75:02:28:ca:85:24:7d:d3:ed:a3:e2:
f9:f1:92:4c:fe:13:5c:1f:34:07:f9:ee:bb:16:4b:
c5:65:1c:e7:0a:64:91:98:ed:34:4c:91:11:36:c0:
ec:4a:10:e0:0d:ff:6e:fc:10:94:ef:64:ad:d7:31:
f9:ab:2d:b8:66:f6:44:42:dd:07:1a:b2:3a:ed:44:
4c:27:be:c7:47:0f:64:1b:4f:db:ad:1d:5a:dd:2b:
88:29:76:e4:13:d3:4b:9e:47:27:5b:40:13:ee:69:
b9:bf:ec:a3:3d:8b:eb:79:e2:be:5a:ae:3a:1d:4f:
67:73:d8:d4:2f:47:f9:bd:99:d9:12:db:37:11:83:
f8:6e:50:25:72:b9:5c:0f:3e:1c:b6:aa:e9:64:12:
78:a6:ff:39:7e:f8:56:b1:20:6a:54:73:45:6c:dc:
84:8f:f8:73:bc:26:cd:35:8f:af:b0:b1:05:b5:c0:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:BD:71:FA:BB:6B:3A:5A:D9:1D:8D:7C:6C:7B:3E:14:FB:F6:E1
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e7:07:7f:5a:85:96:7f:93:d4:9a:3a:32:13:ee:60:74:31:
cd:8f:17:34:4d:b3:e6:e7:d3:c5:6a:ef:dd:0c:ca:0f:ed:86:
0e:12:5f:51:df:ca:4a:42:dd:9c:82:e3:c9:9c:6a:07:aa:25:
6c:68:21:fc:97:24:93:cc:92:df:5f:55:63:da:59:23:47:33:
53:ee:46:ff:33:b9:b6:6a:91:e5:a0:a1:66:f6:e1:87:3c:1a:
6f:d9:db:93:66:1a:59:e3:61:3a:00:b2:0e:d9:62:3a:a2:f0:
f6:a6:3f:ef:ab:27:24:be:8a:f1:2b:36:96:5e:26:38:ca:94:
d3:45:83:78:51:1f:8b:ee:3e:4b:b7:30:f3:b0:99:62:b0:bb:
88:5b:79:a6:20:a1:d6:91:1e:97:04:67:67:73:08:c7:6a:0d:
53:29:58:52:3a:d5:87:6b:fd:c1:15:c0:ac:da:fc:b3:62:7a:
dc:14:9f:bd:41:8d:83:24:bf:f1:2e:92:9e:a3:18:27:c7:4a:
7e:99:ed:bd:82:33:2f:59:4c:17:76:34:22:2c:e1:68:d8:69:
6a:e2:6d:3e:ea:2b:c2:54:f4:af:4e:5c:70:5e:6a:3f:f6:a0:
be:b4:93:ea:e4:2e:25:55:d4:9d:ce:e3:7c:55:34:2a:15:ef:
05:5f:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:36 2026 by rpki-client