Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: wxFTk0Xy4LeV11jCHh9df6gQ5GWu8cBjomUhhUy8eHk=
Subject key identifier: 8C:19:06:1A:EA:E7:02:A5:EF:46:62:6E:12:4B:68:D3:BD:4F:4A:5E
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019E9A725517B3CAF9347F3259A07FE5DCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 010B
Signing time: Sat 06 Jun 2026 01:00:44 +0000
Manifest this update: Sat 06 Jun 2026 01:00:44 +0000
Manifest next update: Sun 07 Jun 2026 01:00:44 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: fNFDVSI3lpmc3pMSRB/cpqFf95Pz3UsiQpOpHzXuCfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:72:55:17:b3:ca:f9:34:7f:32:59:a0:7f:e5:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Jun 6 01:00:44 2026 GMT
Not After : Jun 7 01:00:44 2026 GMT
Subject: CN=8c19061aeae702a5ef46626e124b68d3bd4f4a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:20:1f:0c:aa:9a:4e:a0:36:9a:27:c2:08:
d9:d3:ad:46:da:11:1d:1f:94:c6:db:cf:3d:b5:75:
70:7f:25:01:9d:c9:32:83:de:3c:31:e1:75:2c:e3:
d8:89:05:30:fd:a3:fa:98:22:cd:e7:13:bf:1d:25:
b9:ca:7f:f3:2d:33:c8:f9:9e:62:55:b0:cd:7a:d5:
3b:d0:8e:0b:13:c1:df:08:93:a5:b8:ec:1c:7c:d1:
73:b3:bf:0f:2b:e3:20:44:47:99:2a:24:95:71:1e:
7d:a4:48:49:3c:3c:df:b6:d6:0e:e0:26:38:3f:2e:
5f:6a:bf:1f:77:38:0c:66:68:29:85:df:5e:96:92:
7e:94:de:73:1f:b1:33:54:25:71:8a:c5:9a:30:dd:
e6:20:52:67:e0:9b:aa:ce:cc:23:c4:b5:0e:2f:b4:
56:3e:09:63:8c:61:e4:a0:ef:ab:6e:0d:ca:dd:3b:
81:6f:0b:78:32:aa:e8:f8:90:88:ad:d6:fb:0e:59:
e4:93:b2:99:08:a8:02:7c:25:b4:d9:29:8a:de:82:
0d:95:a4:91:bd:53:7e:76:95:e4:80:f8:ca:33:ae:
23:71:b7:34:11:df:28:82:ee:4e:ad:81:1f:08:20:
b3:c3:b8:7d:bf:c3:a9:0d:4a:5b:06:e6:78:4b:f4:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:06:1A:EA:E7:02:A5:EF:46:62:6E:12:4B:68:D3:BD:4F:4A:5E
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d4:dd:b6:c8:d0:e4:44:7a:5c:8c:a6:b7:f2:aa:cf:7e:28:
cc:e4:c1:56:a1:31:24:d4:75:cb:dd:37:c3:aa:a7:8d:3e:14:
22:86:2c:0c:7d:a7:bd:28:a2:19:18:a3:25:ab:98:2f:24:39:
de:b3:0c:57:c0:b1:18:7c:87:89:62:59:ce:eb:f2:30:f3:42:
b4:8f:b8:7e:c6:5d:69:33:3f:cf:c6:f6:2d:9b:92:85:64:00:
9d:07:e5:2d:93:4f:3a:08:73:ef:20:12:7e:cb:5b:48:0f:70:
dd:aa:fd:9f:0d:82:9d:39:20:9f:0c:0b:4c:3a:63:e2:f0:10:
b4:a5:61:37:31:79:8f:64:f3:cf:3a:f1:63:36:73:06:88:17:
f6:a9:a3:d5:9a:8a:9c:d1:68:3a:63:ff:00:c3:fa:d8:22:09:
70:03:39:b3:82:c1:1a:2e:88:2a:5a:9b:6c:4f:c6:38:ee:63:
5f:0b:62:23:37:0c:a8:61:92:4d:ed:de:4e:24:82:ed:dc:7f:
f3:1b:1a:ab:f4:2f:dd:ec:53:9c:d9:ac:f3:2c:a6:0c:0f:b7:
ef:b0:f4:e6:ba:74:47:9c:71:15:c6:ed:39:0b:a9:33:74:87:
3c:d4:44:2d:96:9b:e4:86:fc:ac:4d:07:f3:f0:d2:ce:a2:45:
d2:11:2e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aclUXs8r5NH8yWaB/5dzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjkyNzgxZGY0ZDJjNDczNzNjM2ZkZjYzZmJiYzk5Mjc0
YmQ5ZGIwHhcNMjYwNjA2MDEwMDQ0WhcNMjYwNjA3MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg4YzE5MDYxYWVhZTcwMmE1ZWY0NjYyNmUxMjRiNjhkM2JkNGY0YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uMgHwyqmk6gNponwgjZ061G2hEd
H5TG2889tXVwfyUBnckyg948MeF1LOPYiQUw/aP6mCLN5xO/HSW5yn/zLTPI+Z5i
VbDNetU70I4LE8HfCJOluOwcfNFzs78PK+MgREeZKiSVcR59pEhJPDzfttYO4CY4
Py5far8fdzgMZmgphd9elpJ+lN5zH7EzVCVxisWaMN3mIFJn4JuqzswjxLUOL7RW
PgljjGHkoO+rbg3K3TuBbwt4Mqro+JCIrdb7Dlnkk7KZCKgCfCW02SmK3oINlaSR
vVN+dpXkgPjKM64jcbc0Ed8ogu5OrYEfCCCzw7h9v8OpDUpbBuZ4S/RXnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwZBhrq5wKl70ZibhJLaNO9T0peMB8GA1UdIwQY
MBaAFKIpJ4HfTSxHNzw/32P7vJknS9nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgt
NjllYTgxNDU5NThiLzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgtNjllYTgxNDU5NThi
LzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdTdtsjQ
5ER6XIymt/Kqz34ozOTBVqExJNR1y903w6qnjT4UIoYsDH2nvSiiGRijJauYLyQ5
3rMMV8CxGHyHiWJZzuvyMPNCtI+4fsZdaTM/z8b2LZuShWQAnQflLZNPOghz7yAS
fstbSA9w3ar9nw2CnTkgnwwLTDpj4vAQtKVhNzF5j2TzzzrxYzZzBogX9qmj1ZqK
nNFoOmP/AMP62CIJcAM5s4LBGi6IKlqbbE/GOO5jXwtiIzcMqGGSTe3eTiSC7dx/
8xsaq/Qv3exTnNms8yymDA+377D05rp0R5xxFcbtOQupM3SHPNRELZab5Ib8rE0H
8/DSzqJF0hEu3w==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:05:43 2026 by rpki-client