Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: xdxCMf6eoSlc9B0yccgBC+d0jmz9hWmcswHfzbSfIag=
Subject key identifier: A5:19:35:D9:79:95:4D:32:D7:13:D2:14:57:2B:45:E6:EF:DB:35:EE
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 01A01F424283405B2ABC6A36C685080A8890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1644
Signing time: Thu 20 Aug 2026 13:00:31 +0000
Manifest this update: Thu 20 Aug 2026 13:00:31 +0000
Manifest next update: Fri 21 Aug 2026 13:00:31 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: qgYCZDsRPJ18+xFqf3HyBdguZpZkfLMGi+My3ynVxEk=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:42:83:40:5b:2a:bc:6a:36:c6:85:08:0a:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Aug 20 13:00:31 2026 GMT
Not After : Aug 21 13:00:31 2026 GMT
Subject: CN=a51935d979954d32d713d214572b45e6efdb35ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:67:18:f7:55:06:07:9e:6e:ab:7c:a3:ab:
70:3f:a8:e9:b9:cb:72:cd:62:71:39:83:cd:92:5f:
07:0e:99:f8:5c:3c:e1:1d:39:2a:16:1a:0e:0c:88:
c0:4f:dd:24:80:2c:d2:0d:ab:ed:8a:a9:58:9c:08:
4f:bf:e9:a7:5a:9c:05:4b:62:d7:e3:70:bb:c7:da:
c7:a3:ca:cb:f7:9d:ca:c8:8b:6a:ee:a6:f0:7d:80:
d4:fe:59:2a:7c:da:f2:a5:67:f0:b4:94:80:b0:80:
3f:a8:c8:6e:37:aa:76:24:56:f8:96:bd:6b:8d:31:
eb:27:df:ac:d1:2f:95:a0:3b:e4:5c:a9:68:8c:10:
87:67:23:87:de:d5:bf:0a:b9:2f:15:1f:17:e6:26:
fe:5c:7c:de:dd:ea:41:1d:3a:49:57:3d:3f:a0:d1:
00:ec:74:08:e3:0a:af:26:92:06:a7:bd:78:cb:4d:
52:9f:14:00:82:4a:93:bd:95:91:6c:bf:1e:e1:ed:
3f:5a:a0:bf:43:6a:ba:f9:d2:e5:d8:86:9d:9b:da:
7a:03:20:a9:6f:f4:a6:ac:95:b5:d5:70:40:8a:e9:
4c:6e:07:d2:c6:3e:31:01:50:67:bc:09:09:67:ed:
3f:fa:23:0e:27:41:c0:64:62:1a:59:7f:0b:d1:ae:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:35:D9:79:95:4D:32:D7:13:D2:14:57:2B:45:E6:EF:DB:35:EE
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:12:ba:7f:e0:bb:0a:34:4b:5d:24:24:58:6e:05:2b:6d:2a:
6d:30:84:9d:26:40:33:64:15:a8:2e:16:d7:da:48:2d:23:a1:
8d:1d:ff:da:85:3d:e9:41:2b:ac:70:a8:90:b6:b9:ef:17:65:
37:af:6d:c1:69:63:ef:57:62:04:81:3b:d8:87:33:6b:d6:e4:
28:e0:b0:52:98:88:08:42:49:e2:a8:1a:42:1b:be:dc:5e:a7:
35:2b:cf:b5:74:d3:7f:36:ab:de:cf:8d:9d:10:a1:8f:22:b2:
ad:0c:2e:e5:11:5b:b3:71:2e:ba:08:2e:a2:56:b1:60:b5:87:
ca:cc:21:4d:5f:d9:3b:63:6d:4e:bb:8c:78:48:c5:db:84:c8:
de:9b:98:3c:56:40:e2:11:70:e5:7f:1a:04:e1:7d:da:51:c8:
34:57:73:d1:63:1c:be:04:21:f7:6f:22:a2:46:39:3c:3b:47:
5a:d5:7c:f9:3f:38:c9:ae:f2:e3:3a:85:0c:7d:2d:f9:2d:d2:
2c:36:d8:72:a5:27:08:31:2a:c7:28:fa:7f:22:91:72:cb:cd:
50:e5:9a:71:ba:f7:17:66:cf:ae:5a:23:f3:a1:9b:51:96:0e:
fb:95:83:f3:63:61:0a:27:8b:e8:de:b7:26:7b:36:6e:0d:da:
57:10:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:01 2026 by rpki-client