Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: FS+b9Qs1eg3cgmraPxR+k8kjbF8zfCxcSxbDyjFVFtY=
Subject key identifier: C3:9B:03:11:20:88:D6:3F:AF:53:96:9E:50:FB:AC:77:8F:A9:99:57
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019EB9C62BDEAB1A96C086B1BA071F4AB80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 089E
Signing time: Fri 12 Jun 2026 03:00:32 +0000
Manifest this update: Fri 12 Jun 2026 03:00:32 +0000
Manifest next update: Sat 13 Jun 2026 03:00:32 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: +QXx+A0nNbUcXvJDUAdARrNhZDIGHLx40bW5YYGf6r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:2b:de:ab:1a:96:c0:86:b1:ba:07:1f:4a:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Jun 12 03:00:32 2026 GMT
Not After : Jun 13 03:00:32 2026 GMT
Subject: CN=c39b03112088d63faf53969e50fbac778fa99957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:fc:b8:80:05:2c:93:3a:58:f3:f3:54:f9:
d6:6d:59:e2:e1:98:bc:cb:1a:e8:42:0e:b7:47:68:
1a:14:ab:41:8e:72:5f:9a:32:67:10:2c:8d:c1:32:
b0:2c:88:fa:ee:9c:2a:bf:8e:8b:c7:1c:01:3a:7f:
32:9f:0e:8f:13:b6:13:bd:2f:87:7d:24:57:43:7d:
7b:cc:4b:f5:32:6b:91:b5:ed:78:fb:bb:cf:ba:99:
8b:13:6d:a0:2a:22:19:2a:c1:28:de:96:f8:82:f3:
ca:b6:ae:5e:38:fb:04:d4:35:ba:8a:ba:4c:7d:d4:
00:29:43:c8:e7:bd:c4:40:aa:5d:c7:16:6e:3a:cd:
5b:04:21:c7:35:b0:00:46:8c:22:aa:59:62:97:ce:
d4:c0:11:4f:13:e3:c5:14:a4:fd:ab:ed:54:33:a3:
e9:48:0d:8c:c1:ef:0c:79:ab:46:35:75:0b:3b:3d:
fa:9a:1a:e5:5c:e1:bb:b5:e6:7b:a7:48:8f:b3:85:
0b:aa:a6:76:6e:14:ef:a5:84:25:94:19:3d:55:af:
76:d0:9e:92:a6:68:32:65:4c:3f:bb:d2:b9:10:a6:
aa:da:d8:a5:e9:f6:35:df:63:3c:51:e9:eb:dc:88:
26:d3:99:42:f3:81:98:0c:9d:bc:5e:03:fb:e8:4e:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:03:11:20:88:D6:3F:AF:53:96:9E:50:FB:AC:77:8F:A9:99:57
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:72:6a:a1:8a:3e:5f:49:3e:1a:53:7b:4a:0a:10:4d:da:
67:1f:26:55:b0:11:7b:f5:c6:e4:44:3d:a8:a8:f9:81:84:2b:
8a:52:8a:d9:24:3f:e8:e9:6a:a3:68:c4:6f:d0:1b:27:88:98:
3c:10:18:a3:87:4d:1e:7c:f6:fd:45:0c:2b:04:e7:8d:75:7d:
5d:29:0e:cc:c3:91:d8:50:15:98:46:cf:1a:46:1a:f2:4a:51:
1c:69:96:61:6c:71:a3:fb:15:93:65:a8:3c:fc:8c:3a:89:35:
52:b0:a2:e3:d3:a0:ce:01:d1:43:bd:c6:00:73:8d:a5:ee:5e:
46:13:21:d8:2f:33:4e:31:a8:90:cd:9f:9b:75:94:a4:bd:02:
ac:58:fe:67:6f:d4:78:cb:4f:6e:92:86:25:f0:bf:e7:3e:14:
35:9e:67:0c:dd:23:df:b8:7a:9a:94:6c:9f:4f:e7:4e:d2:2c:
0e:3e:c5:d6:1b:bc:46:db:2e:a2:4b:d7:18:60:01:a4:cd:66:
e6:b4:c7:ec:0a:f2:22:e9:6c:d8:91:83:ab:4e:41:7c:01:62:
d8:63:e8:64:8f:e7:e7:71:3a:39:16:5d:2d:a1:82:86:58:30:
b4:79:e2:f6:26:a7:bb:22:dc:ee:9e:ce:ea:8d:ae:03:78:35:
f8:f2:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:01 2026 by rpki-client