Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: QHwe/DO+NTVZVatZicaKEgA61kQ5rL/5Vm7aaJMNZK0=
Subject key identifier: F9:20:53:FE:13:AC:27:BF:1C:B7:08:09:9E:5A:36:4E:48:8C:9D:E2
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 019D98BD593C61E3BF58222E02B2AF9E7609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 00:00:39 +0000
Manifest this update: Fri 17 Apr 2026 00:00:39 +0000
Manifest next update: Sat 18 Apr 2026 00:00:39 +0000
Files and hashes: 1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=)
2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=)
3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=)
4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: ynGSpygWXLnK+fsMnu4Q7tDRytQFhqmw5+tMjM1ZUZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:59:3c:61:e3:bf:58:22:2e:02:b2:af:9e:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Apr 17 00:00:39 2026 GMT
Not After : Apr 18 00:00:39 2026 GMT
Subject: CN=f92053fe13ac27bf1cb708099e5a364e488c9de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:5b:11:df:e2:fb:3a:e3:af:69:98:ae:98:
0a:99:77:20:be:99:77:81:12:11:a6:2d:ea:7b:14:
82:d6:3a:83:0c:e0:e6:c8:a9:6a:6d:0a:6c:4f:8e:
01:14:3e:93:3b:02:52:4b:7b:c0:01:14:fa:c2:7f:
ae:07:3e:50:f9:3d:70:e8:c9:a8:0b:80:07:98:3b:
99:7f:a7:3c:1c:7b:77:1a:d4:d2:79:1a:75:43:8c:
a5:ef:95:07:a4:d9:28:5a:3f:97:d3:1e:81:63:fa:
1b:14:94:41:75:31:37:42:22:3a:a0:e0:92:5e:e9:
ca:5a:a3:6a:d1:65:ab:ea:c7:37:19:45:4e:d2:48:
b9:3d:bc:7d:1b:c4:93:5d:d3:e6:aa:26:53:58:c1:
fd:6f:4e:05:39:74:af:60:e3:7e:6c:b8:de:d1:0c:
9d:be:0b:59:ea:00:bd:9b:c6:d3:10:3c:ab:19:4c:
86:83:ef:07:ce:78:de:99:7e:c1:44:c9:41:f9:84:
d6:a8:2e:af:da:c8:63:7e:03:ef:03:7b:f3:de:63:
f3:93:1d:a1:fb:5b:ee:f7:dd:53:03:c9:13:b1:95:
71:9e:15:2c:b4:77:a3:46:d3:38:9a:e1:e0:d3:6f:
4c:b3:7e:a9:13:fe:a0:26:1b:d8:c5:44:33:93:9a:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:53:FE:13:AC:27:BF:1C:B7:08:09:9E:5A:36:4E:48:8C:9D:E2
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6a:bf:98:54:30:1d:aa:89:fb:d1:29:13:34:10:ea:f1:e6:
7b:c1:d5:19:0c:0f:38:34:58:40:98:83:9d:bf:0f:f2:22:30:
cf:fb:ca:51:4d:ef:ac:4c:f5:a4:ee:16:81:97:dc:c4:65:0f:
4e:79:d7:46:b0:25:36:a3:d4:e3:e0:68:06:34:d4:50:2f:d7:
57:94:fc:dd:51:50:04:b7:40:d4:ca:7d:e3:0f:a5:ce:4d:72:
2d:3b:b7:0c:42:96:95:db:90:c0:85:0e:5d:f2:9b:3a:a6:e5:
bc:52:58:64:63:43:22:91:cd:15:2e:92:86:e0:db:f2:7d:a2:
4a:f8:3e:d7:d0:bb:3f:37:c9:38:f6:16:3c:19:26:fb:5b:c0:
ee:28:a6:e4:11:d6:d3:1d:20:ac:bd:66:0b:51:3f:f0:46:94:
2e:48:3e:ee:85:f3:ee:78:d3:dc:83:f8:42:d7:f5:09:cc:61:
28:54:53:51:9e:71:dc:19:3d:b1:05:f4:86:5b:c8:99:58:6e:
97:b3:7c:43:58:b0:ff:6a:92:c6:50:8e:cc:76:de:30:68:ed:
aa:38:b2:8d:2d:ba:cd:2d:39:08:45:6e:70:27:39:84:c4:9c:
c7:e6:1b:9f:c2:24:b0:08:42:87:e7:dd:af:4c:76:ed:2e:f4:
8d:c7:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:54 2026 by rpki-client