Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: xocppTLcgKbbHWi2Z3t6jc8mglh90eDGg/sr2XaEGL8=
Subject key identifier: 76:DB:E3:C0:7F:DB:0A:F0:6D:1A:72:6D:38:FF:17:91:82:84:D3:8D
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019EF9B9D907B3FDBBB9E12560690B4C04FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 15AC
Signing time: Wed 24 Jun 2026 13:02:46 +0000
Manifest this update: Wed 24 Jun 2026 13:02:46 +0000
Manifest next update: Thu 25 Jun 2026 13:02:46 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: w99JluY616qTvQN3EHCAkkcRx0sd0iVs2dCch4s/m/o=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:b9:d9:07:b3:fd:bb:b9:e1:25:60:69:0b:4c:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jun 24 13:02:46 2026 GMT
Not After : Jun 25 13:02:46 2026 GMT
Subject: CN=76dbe3c07fdb0af06d1a726d38ff17918284d38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:42:4f:88:47:dd:35:ad:9d:11:23:66:f5:
8d:c2:85:94:c8:e3:08:3e:65:3c:65:be:72:b6:0d:
3b:58:b0:eb:fa:98:4b:4b:4c:31:f4:e4:e9:4d:2d:
11:b5:1c:12:b6:13:ae:9d:77:e2:65:1d:18:ee:a5:
10:15:0e:ec:49:24:04:d5:51:0f:e6:4f:07:36:70:
58:7a:0c:eb:ff:ca:13:02:85:0c:b2:d3:9d:e3:f9:
17:20:51:c3:8b:c8:41:40:ea:e7:03:45:41:d3:0e:
ce:73:06:1c:c8:3d:f7:70:de:2e:3b:fb:fd:9e:a5:
00:de:08:c9:3e:dc:25:d0:08:82:fc:dc:c9:d7:51:
38:94:88:d9:21:01:b0:4c:07:b8:5c:0c:8f:b1:8a:
63:c5:5b:ca:fd:4c:8f:32:bc:4c:55:75:2e:56:52:
79:cc:8b:21:6b:3e:18:10:6a:05:99:d8:f5:3e:4b:
bb:9d:21:2c:1a:11:a2:45:ff:df:85:25:93:e5:23:
40:c3:18:11:2d:0b:3b:70:03:90:91:88:ee:98:f4:
5b:2a:c4:97:13:7f:67:3a:09:14:41:55:00:fa:75:
d5:63:69:32:8d:98:b3:b4:d3:56:93:8f:56:64:40:
44:74:81:48:fd:28:db:34:62:12:a5:67:55:1b:52:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DB:E3:C0:7F:DB:0A:F0:6D:1A:72:6D:38:FF:17:91:82:84:D3:8D
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:69:be:9c:85:5a:e0:d8:9d:86:35:56:af:c6:b1:e4:18:e9:
57:0b:d6:a3:6d:75:52:5a:4e:20:82:11:13:4b:3a:7f:dc:ff:
2e:51:e4:18:5f:dc:b2:ea:e4:10:6f:ff:d2:3f:c1:6b:da:49:
cf:01:e9:f8:76:a4:48:43:ad:bc:56:95:fa:8a:3e:ea:dc:32:
2a:e0:22:ab:93:c6:c1:aa:3a:c9:29:f3:b6:c9:82:f6:06:d1:
ab:04:5e:33:39:89:3a:c2:e3:b1:d2:3a:ee:85:24:13:71:66:
f1:04:ab:26:83:30:c2:33:6f:7b:be:55:81:97:e8:84:62:29:
6c:0a:ac:b5:5e:a3:d9:db:f3:1d:96:5b:63:a7:bc:ea:1e:23:
72:5a:48:4f:06:a6:a6:a6:06:6d:a4:e2:2b:aa:ac:25:9e:64:
43:ab:24:30:5c:7a:b6:95:a8:f8:39:c2:09:30:e5:78:e2:fd:
8d:8e:45:81:8b:6e:c7:21:d8:2d:ee:52:53:68:9a:9a:b9:e3:
b5:98:48:6b:7a:f9:36:ba:38:4b:f6:9a:cc:ce:cf:38:4d:a3:
45:51:5e:db:5e:ee:08:98:a5:c2:a7:8c:ac:c9:71:a0:61:61:
35:2d:f8:98:91:f3:d5:c6:5d:9b:6b:8e:71:94:9b:b4:4f:d7:
ab:d7:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:42 2026 by rpki-client