Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: ioHyN7OpfduV1bgvfPMb11EBR3dIYX1AM76+5//dSxQ=
Subject key identifier: D9:1D:C2:EC:8E:20:94:01:42:22:6E:7D:B2:71:6E:5A:D0:07:85:C5
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019F11898CF4BA2A13D78DA66D3E1AEBBFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 04:00:54 +0000
Manifest this update: Mon 29 Jun 2026 04:00:54 +0000
Manifest next update: Tue 30 Jun 2026 04:00:54 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: q88RQJgsxoY1ICzNqtCz4P67pivm5csXeKCeeRHxgT8=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:8c:f4:ba:2a:13:d7:8d:a6:6d:3e:1a:eb:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Jun 29 04:00:54 2026 GMT
Not After : Jun 30 04:00:54 2026 GMT
Subject: CN=d91dc2ec8e20940142226e7db2716e5ad00785c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:01:f1:1a:8e:f0:06:63:21:8a:81:68:0f:
9b:49:6d:46:76:52:2e:05:6f:fb:6b:3f:8d:a4:05:
4c:6a:fe:b0:de:25:cd:91:ac:8c:da:3f:03:0d:b2:
1e:e6:47:0e:16:22:5e:11:3e:00:c4:b0:ee:91:be:
af:96:d4:4e:a1:ce:11:e2:56:b7:8c:38:05:f2:49:
18:e9:81:af:50:d6:49:1a:f0:23:3b:a5:fd:fa:ec:
11:04:ed:c5:83:72:14:1e:a1:34:ef:34:d0:cd:b4:
1c:da:72:56:37:2d:13:03:5c:a7:99:e6:e7:3c:69:
b8:41:38:bc:1b:b8:75:2b:79:c8:53:d7:4e:50:ba:
00:3e:70:34:2e:d6:44:42:44:4e:66:94:15:b5:f0:
41:b0:33:58:5a:37:53:2d:d9:30:bb:c4:e7:57:f3:
18:0e:d3:d7:98:b9:98:f2:a5:7a:6d:ee:05:8f:bb:
0f:9f:f1:94:a2:37:bb:2a:25:32:0e:f8:0c:da:a6:
1f:c4:08:1b:64:a8:71:3b:44:8b:02:73:ad:30:f6:
f4:54:e1:0a:2a:21:ca:ec:99:d4:eb:c7:74:6e:42:
75:03:72:f2:a4:9c:ab:73:7d:d1:db:8a:32:47:9b:
3e:8b:65:fc:4b:0b:02:c1:15:4c:f6:ad:17:8c:a4:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:C2:EC:8E:20:94:01:42:22:6E:7D:B2:71:6E:5A:D0:07:85:C5
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:c3:d4:6a:9d:8d:b9:7a:d9:3f:d5:1c:67:21:d4:c4:06:
c2:a9:8b:50:96:08:8e:ad:0d:70:c3:aa:72:e5:41:eb:94:52:
9c:54:91:32:93:16:b2:e0:f5:55:dd:bd:c6:cc:22:4b:8b:66:
27:0b:59:1a:07:db:bb:56:74:97:e0:65:38:6b:ed:ec:eb:78:
9a:27:47:fe:80:b7:9f:63:3c:80:7c:70:5f:55:87:4a:11:b8:
df:80:6a:5d:f6:b1:a8:87:80:fe:83:43:ad:b9:3a:91:e2:de:
73:e2:4a:f1:48:3e:ed:97:aa:bb:02:33:a7:70:df:9d:0a:6a:
ce:d5:b4:d8:14:e2:a9:7f:45:04:5f:6e:69:8e:18:14:c5:f4:
b1:85:cd:f3:30:9d:dc:8a:1b:91:b6:2b:b5:c3:fc:cd:71:6f:
b9:2d:ca:0a:a6:1c:cf:41:fe:09:05:23:6e:9b:3d:1d:58:ae:
72:c7:f2:5b:0d:60:0c:bd:2d:3a:dc:60:fc:e6:89:2f:74:d9:
4d:9c:8a:f3:88:ec:30:6f:52:e4:bc:85:f1:38:42:ad:1f:d6:
90:2f:6a:ca:9d:3d:13:88:31:dd:2c:71:3c:c5:94:57:2c:b9:
ec:33:fd:32:6c:4c:8d:99:b5:aa:c6:a7:c0:09:08:65:0b:82:
c7:7b:aa:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RiYz0uioT142mbT4a67/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj
YjViMGYwHhcNMjYwNjI5MDQwMDU0WhcNMjYwNjMwMDQwMDU0WjAzMTEwLwYDVQQD
EyhkOTFkYzJlYzhlMjA5NDAxNDIyMjZlN2RiMjcxNmU1YWQwMDc4NWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4UB8RqO8AZjIYqBaA+bSW1GdlIu
BW/7az+NpAVMav6w3iXNkayM2j8DDbIe5kcOFiJeET4AxLDukb6vltROoc4R4la3
jDgF8kkY6YGvUNZJGvAjO6X9+uwRBO3Fg3IUHqE07zTQzbQc2nJWNy0TA1ynmebn
PGm4QTi8G7h1K3nIU9dOULoAPnA0LtZEQkROZpQVtfBBsDNYWjdTLdkwu8TnV/MY
DtPXmLmY8qV6be4Fj7sPn/GUoje7KiUyDvgM2qYfxAgbZKhxO0SLAnOtMPb0VOEK
KiHK7JnU68d0bkJ1A3LypJyrc33R24oyR5s+i2X8SwsCwRVM9q0XjKRv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkdwuyOIJQBQiJufbJxblrQB4XFMB8GA1UdIwQY
MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct
MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi
LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0nD1Gqd
jbl62T/VHGch1MQGwqmLUJYIjq0NcMOqcuVB65RSnFSRMpMWsuD1Vd29xswiS4tm
JwtZGgfbu1Z0l+BlOGvt7Ot4midH/oC3n2M8gHxwX1WHShG434BqXfaxqIeA/oND
rbk6keLec+JK8Ug+7ZequwIzp3DfnQpqztW02BTiqX9FBF9uaY4YFMX0sYXN8zCd
3IobkbYrtcP8zXFvuS3KCqYcz0H+CQUjbps9HViucsfyWw1gDL0tOtxg/OaJL3TZ
TZyK84jsMG9S5LyF8ThCrR/WkC9qyp09E4gx3SxxPMWUVyy57DP9MmxMjZm1qsan
wAkIZQuCx3uqFg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:47:15 2026 by rpki-client