Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: GF+ovGDxS1z/Hna9VzpJsQo4IeCYUoiilQYmP2Nujkk=
Subject key identifier: EA:72:2C:7D:71:C8:DA:C5:27:C2:C2:6D:D2:65:77:FA:7D:EE:50:32
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019E9BBC09C65D4E921F8215D581ADFE7BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0FE9
Signing time: Sat 06 Jun 2026 07:00:52 +0000
Manifest this update: Sat 06 Jun 2026 07:00:52 +0000
Manifest next update: Sun 07 Jun 2026 07:00:52 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: qZv9Z4qY/tAeOEonTxHYMboAj+38xc35YhNLNOfl8jc=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bc:09:c6:5d:4e:92:1f:82:15:d5:81:ad:fe:7b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jun 6 07:00:52 2026 GMT
Not After : Jun 7 07:00:52 2026 GMT
Subject: CN=ea722c7d71c8dac527c2c26dd26577fa7dee5032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:5a:97:81:61:bf:b0:62:fb:eb:7e:71:06:
2a:db:2c:e7:bb:10:32:3c:02:df:a3:5f:81:30:62:
c6:87:0a:e1:5d:04:8a:e6:dd:e7:50:33:6b:a9:be:
4d:1b:92:85:1a:4f:f7:18:36:bf:78:92:19:fc:04:
93:d2:95:89:24:b5:e8:10:64:47:5a:0e:24:c8:3b:
0e:91:10:61:02:e0:3a:ef:22:3d:34:2e:1c:fc:65:
84:55:83:8a:31:0a:e2:91:1f:fc:8d:b1:c1:e4:42:
3f:af:a8:67:e9:13:2a:75:d9:df:f9:9c:4d:22:2c:
5e:1c:69:cd:c2:19:1c:9b:0d:9d:85:e3:b3:10:d9:
18:dc:aa:90:76:a7:cb:49:ac:4c:ad:74:68:1e:8e:
49:ea:03:ea:fd:b1:24:ed:98:6d:f3:18:c6:dc:f1:
7c:e5:cd:a0:cc:77:5c:c0:44:63:8f:45:ed:c6:10:
a5:58:76:6d:52:7d:3e:45:fd:97:80:24:22:ae:5c:
df:5a:f8:c3:95:fb:b7:67:22:7e:ec:72:2e:1f:fd:
bd:93:34:c5:d1:17:15:f4:2c:ae:c0:90:0c:bb:5c:
20:84:21:57:04:52:7f:97:f2:89:6b:83:f0:82:a1:
70:22:40:ff:09:87:b7:84:dd:6f:59:2f:e8:57:35:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:2C:7D:71:C8:DA:C5:27:C2:C2:6D:D2:65:77:FA:7D:EE:50:32
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ed:40:d7:59:66:2f:45:76:08:40:18:07:24:bf:fb:60:09:
04:a7:9b:c0:ca:5f:51:f3:32:be:be:f7:c8:c5:e5:10:15:a4:
bd:c1:d1:63:7e:e1:54:f3:db:96:41:6d:26:e8:de:6c:38:15:
14:46:f8:78:e2:4c:82:18:b3:ef:e7:c5:7c:3b:ed:29:79:fb:
11:85:0b:72:a7:e6:51:2f:bb:b1:e5:c6:49:72:76:f0:36:b9:
ed:84:fe:2e:ac:cf:e8:2c:c6:35:2d:dd:c9:1d:54:99:36:43:
1f:2f:c0:f8:15:9c:3c:5a:4d:27:f8:50:ef:4c:46:1e:56:0c:
66:f9:ce:cb:46:a7:fb:50:5d:72:cb:72:bb:d7:d3:78:fd:8d:
f2:22:20:c9:16:12:82:8d:13:1a:8b:58:8e:c7:72:42:99:89:
03:29:86:22:44:9d:b1:f2:d3:fb:a4:88:9d:d7:14:46:24:75:
94:7c:3a:92:8c:bb:34:cb:e6:ea:dd:b4:07:31:be:91:c3:c5:
a5:53:bf:2e:dd:ce:ab:77:29:75:23:26:c7:fb:65:95:8e:51:
ee:a4:6c:6f:7f:9f:20:9d:9c:b7:39:6a:d3:05:18:47:6c:14:
2c:60:77:19:bc:5c:83:bb:ee:ac:47:e9:33:0c:fd:c0:f5:fa:
8c:57:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:08:29 2026 by rpki-client