Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: aFnXap1hwISlNfKjPH9nFGPsqHC+8YQFFSxeTp7f4bU=
Subject key identifier: 42:77:AA:AC:95:37:55:6A:7E:57:DB:97:52:9B:EC:31:E9:A7:C0:55
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 019EB98FDD3451712CC21F8F9E36999EC7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 18EB
Signing time: Fri 12 Jun 2026 02:01:13 +0000
Manifest this update: Fri 12 Jun 2026 02:01:13 +0000
Manifest next update: Sat 13 Jun 2026 02:01:13 +0000
Files and hashes: 1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: 6acLUrjf+57wdk9NAV9EWUK/dCTvaOUyvnORPgEWbts=)
2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:dd:34:51:71:2c:c2:1f:8f:9e:36:99:9e:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Jun 12 02:01:13 2026 GMT
Not After : Jun 13 02:01:13 2026 GMT
Subject: CN=4277aaac9537556a7e57db97529bec31e9a7c055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:5a:a8:f2:27:71:ce:6e:db:39:73:46:3f:
5b:62:ba:a2:bf:e5:52:36:bb:2a:0a:a5:ca:32:15:
a3:ce:c9:a7:bd:82:ad:46:4d:72:6b:f4:55:97:98:
50:ed:42:ee:74:15:b7:10:04:bb:ad:78:eb:70:c6:
9e:b4:83:72:1b:a2:1c:d8:90:95:69:56:4a:5b:d1:
81:01:0a:e3:99:28:c8:d2:45:a7:d0:5c:ef:ed:28:
1c:c5:20:96:ad:eb:8e:d0:52:c2:6a:b1:ea:6d:0e:
f1:8f:71:09:81:2f:cd:47:6b:60:a8:70:27:16:d2:
02:ef:86:11:1e:b6:18:60:97:e2:77:50:fb:76:b9:
21:57:26:ab:bf:b6:62:95:e4:d1:80:f1:98:96:fb:
40:5a:2c:10:2d:6c:51:4b:0b:03:ac:7f:b7:38:bc:
97:91:7e:55:0d:b2:f9:ea:ca:38:bf:37:2b:07:c5:
2d:c0:39:f1:c7:a1:dc:f2:84:12:c5:0c:4e:2a:83:
83:aa:d2:d1:c7:35:1b:0a:94:66:e5:1c:76:4c:ae:
8b:37:e5:cc:db:2d:40:e5:99:75:6c:68:55:dc:0c:
f2:9b:b3:f1:49:40:1f:70:c2:33:4a:08:c2:4e:cc:
c4:98:b4:d5:e1:89:23:c3:b6:02:c6:31:81:92:76:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:AA:AC:95:37:55:6A:7E:57:DB:97:52:9B:EC:31:E9:A7:C0:55
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8d:3c:11:78:b5:c3:58:56:d2:cb:6a:3b:c2:b8:29:70:36:
6c:f9:34:4c:93:b0:cb:0c:15:dc:cc:96:1b:0f:02:3c:a2:32:
0d:cf:35:c4:32:77:57:57:ea:ea:dd:0a:f8:2c:10:a7:10:39:
36:43:7a:d1:c3:9d:6f:13:ef:39:fc:74:c1:20:cd:4a:a9:38:
e0:f1:e1:45:aa:22:9a:fb:c9:c5:6e:94:db:45:cd:d6:c6:25:
9e:66:d9:f1:ae:c7:ba:c4:92:ef:d5:19:7a:16:de:a8:35:3f:
12:7a:d1:17:8e:dd:9a:ba:4b:d2:60:87:51:dd:02:5b:d7:d5:
e4:79:89:77:db:bc:d6:7a:09:f4:dd:a3:ee:0f:13:8b:b4:1f:
57:15:09:b1:37:7f:c5:41:02:2b:c4:3d:b8:0f:7c:e2:54:b6:
ef:82:f1:24:ca:62:44:59:39:75:f1:9b:64:c5:52:23:3a:d9:
41:cd:81:b1:9d:51:ce:34:d8:a0:21:1a:92:be:f7:3c:30:d1:
26:a6:03:d4:86:70:f7:b2:f5:b4:00:62:aa:e3:85:fb:90:35:
68:1b:af:52:33:23:f9:1d:04:8e:e1:2a:96:b8:38:79:7d:bf:
07:01:e3:23:d5:17:d4:94:2f:40:6d:1a:2d:2f:63:c5:ba:bd:
7b:db:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:13 2026 by rpki-client