Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: bdD/i+58yazS9O+aE4yWt8mmbzwy0DTbCbOT7NNkC98=
Subject key identifier: 3F:9B:F6:3D:11:5E:E2:67:83:99:F8:B1:E8:66:F2:97:85:24:0F:3C
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 01A110A94379DF950CDF0AB13B5B92AE62AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 16C1
Signing time: Tue 06 Oct 2026 10:01:30 +0000
Manifest this update: Tue 06 Oct 2026 10:01:30 +0000
Manifest next update: Wed 07 Oct 2026 10:01:30 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: iKdqspb1R+J4ZPrODtpfo6pONuFL4icJ87bU2bg2lDQ=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:43:79:df:95:0c:df:0a:b1:3b:5b:92:ae:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Oct 6 10:01:30 2026 GMT
Not After : Oct 7 10:01:30 2026 GMT
Subject: CN=3f9bf63d115ee2678399f8b1e866f29785240f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:ef:4b:5d:0f:b9:a2:f8:95:fb:f7:d8:55:
80:32:06:39:83:e5:b1:5c:7c:49:ca:4b:da:46:cf:
2b:ae:9b:ca:b9:d6:73:4c:40:52:c1:4f:1c:4b:1d:
2a:ae:87:04:dc:36:d1:a1:cb:3b:e8:89:9b:5d:62:
fb:e6:14:d7:20:04:ad:ca:e6:33:73:17:72:92:3b:
8f:9e:cc:59:10:94:e9:9b:8d:96:d1:9a:e9:b5:7c:
10:53:c7:3f:4c:b8:86:a1:f4:63:bc:6e:4d:8c:68:
a8:d2:88:44:ed:fc:89:08:41:65:ea:3b:25:ae:8a:
ca:5d:95:66:99:fc:b8:2b:63:5d:50:5a:31:3a:39:
a1:3b:df:c6:19:66:10:d9:30:35:e3:73:36:2b:fd:
bf:22:c5:3c:83:03:e2:0e:f0:28:61:ec:45:40:1f:
fd:17:5a:53:d7:5b:7c:17:5e:d5:f2:3c:4a:cd:4f:
35:e2:05:57:fd:12:e1:29:32:96:86:c4:12:e0:99:
d8:04:2a:cd:a1:99:90:d1:f1:01:1c:d9:8c:d7:de:
e8:df:e5:d6:31:82:92:9c:07:18:90:52:a0:d9:02:
77:55:52:bb:ab:87:d6:6c:2f:13:f1:ed:55:3d:71:
6b:9b:6e:e9:a2:65:a7:ae:d1:ba:fb:14:7b:05:04:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:F6:3D:11:5E:E2:67:83:99:F8:B1:E8:66:F2:97:85:24:0F:3C
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:80:3e:8a:9a:a5:cf:be:4d:c4:2f:a4:09:40:c6:dc:6b:
ac:f3:b5:4e:72:ae:5c:86:e8:ed:02:88:98:45:78:79:6d:59:
72:40:76:db:8c:b7:5a:74:6e:7c:d8:cb:93:2c:56:1a:d5:62:
71:ce:9f:a5:c8:64:89:ad:a4:ec:db:f1:8e:78:a3:d3:09:33:
be:0c:9f:ee:fd:68:7c:21:86:64:03:d1:98:f1:5d:a7:aa:c4:
a3:0d:84:4d:3a:e3:44:5c:aa:b7:04:b6:48:2b:04:e4:6b:c6:
15:86:78:c8:8e:b1:6e:3a:b1:23:34:6c:cc:4b:25:9c:63:75:
34:95:6e:6a:ae:e4:d7:8c:72:2b:9d:15:87:c2:81:63:1d:10:
53:25:08:30:7d:f3:1e:1f:21:ec:11:87:36:33:6f:36:3e:4f:
5e:8d:87:f1:bd:f6:d1:5d:7d:eb:3a:6d:91:16:24:7c:8c:9c:
15:d3:e6:2e:a0:29:0b:1d:e4:b0:3e:1c:9c:b4:d6:d8:1d:86:
da:97:3b:99:e3:4a:b3:2c:67:5e:14:d3:e2:31:30:a7:83:79:
df:8a:a0:52:db:be:e6:31:da:4f:61:a5:cb:5a:87:0b:b6:4a:
fb:c0:c1:1a:d7:7c:86:ce:d6:64:ce:90:6c:93:4f:ec:13:fe:
8d:da:7d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQqUN535UM3wqxO1uSrmKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjYxMDA2MTAwMTMwWhcNMjYxMDA3MTAwMTMwWjAzMTEwLwYDVQQD
EygzZjliZjYzZDExNWVlMjY3ODM5OWY4YjFlODY2ZjI5Nzg1MjQwZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrvvS10PuaL4lfv32FWAMgY5g+Wx
XHxJykvaRs8rrpvKudZzTEBSwU8cSx0qrocE3DbRocs76ImbXWL75hTXIAStyuYz
cxdykjuPnsxZEJTpm42W0ZrptXwQU8c/TLiGofRjvG5NjGio0ohE7fyJCEFl6jsl
rorKXZVmmfy4K2NdUFoxOjmhO9/GGWYQ2TA143M2K/2/IsU8gwPiDvAoYexFQB/9
F1pT11t8F17V8jxKzU814gVX/RLhKTKWhsQS4JnYBCrNoZmQ0fEBHNmM197o3+XW
MYKSnAcYkFKg2QJ3VVK7q4fWbC8T8e1VPXFrm27pomWnrtG6+xR7BQSsxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+b9j0RXuJng5n4sehm8peFJA88MB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUCAPoqa
pc++TcQvpAlAxtxrrPO1TnKuXIbo7QKImEV4eW1ZckB224y3WnRufNjLkyxWGtVi
cc6fpchkia2k7Nvxjnij0wkzvgyf7v1ofCGGZAPRmPFdp6rEow2ETTrjRFyqtwS2
SCsE5GvGFYZ4yI6xbjqxIzRszEslnGN1NJVuaq7k14xyK50Vh8KBYx0QUyUIMH3z
Hh8h7BGHNjNvNj5PXo2H8b320V196zptkRYkfIycFdPmLqApCx3ksD4cnLTW2B2G
2pc7meNKsyxnXhTT4jEwp4N534qgUtu+5jHaT2Gly1qHC7ZK+8DBGtd8hs7WZM6Q
bJNP7BP+jdp9sw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:09:21 2026 by rpki-client