Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: fa/WwrdZJ7h0QIRI6cWRxrmEWTfGSHj9pPxbUYE8BpE=
Subject key identifier: 52:4E:A1:75:18:F7:CC:A6:C3:16:96:8F:8E:7F:38:96:A0:63:FF:38
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019EB657213051F0A525F860D4045B30CC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1971
Signing time: Thu 11 Jun 2026 11:00:23 +0000
Manifest this update: Thu 11 Jun 2026 11:00:23 +0000
Manifest next update: Fri 12 Jun 2026 11:00:23 +0000
Files and hashes: 1: McIHeSgScebcIpkPT4THS1jto5Q.roa (hash: fdb99PeEhGhn7zMv+ymuqGVl1nC5qV/Bm2pOoVJfRTc=)
2: QOOLONPw0mL0zRM6xNCnZ8lu_HA.roa (hash: t5PPKx70RsbnvkvxFWuFNiVu0RY4KKSyPrpAVr06jsQ=)
3: lfZvGuublTghs87OLe3YBrTz9rw.roa (hash: 33L3jHKPnMn4vOjKfAOLDS9PGwe/ZxS6Z/D2j8Yjgis=)
4: mBsIhxGKE9P1VcdBmaDVaq-y2yg.roa (hash: FjrD6MxlebN9aOC6ecpbIK3eMGRCmF4PugIT8px8qes=)
5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: xTnthjpDAghwvuevXlBI1qpTi/8R51Q+lyq49YIKRQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:21:30:51:f0:a5:25:f8:60:d4:04:5b:30:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jun 11 11:00:23 2026 GMT
Not After : Jun 12 11:00:23 2026 GMT
Subject: CN=524ea17518f7cca6c316968f8e7f3896a063ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:e1:d5:25:93:e5:6e:9f:60:41:96:e6:de:
71:d5:31:5c:30:06:9d:40:16:3a:bd:ec:0b:48:45:
6d:4a:e1:e8:2b:dc:bc:9b:25:7a:e7:8f:7c:bc:94:
5c:2c:a3:53:fb:22:f6:fe:b5:92:8d:04:4e:f2:d6:
b8:cb:b2:a8:2e:ce:a2:bd:83:d3:1b:77:7b:6c:04:
09:66:f6:62:2d:b8:8a:1d:70:99:8a:da:d6:a2:99:
1f:4a:b8:98:57:db:1c:b1:a8:cb:98:4a:ee:ff:88:
fa:dc:51:18:92:f5:1c:07:93:05:56:b9:e2:df:99:
5f:19:d6:b3:42:c8:3e:46:3a:45:29:41:c2:ca:b8:
b8:ba:93:1f:2e:ba:52:78:ae:d5:67:a0:81:e3:47:
1b:ba:65:1d:a5:ee:f4:40:ab:60:67:46:70:ab:5b:
24:a4:60:b7:41:c7:3e:c1:2f:67:66:e4:82:84:ad:
73:c3:02:bd:93:d0:c2:6a:d2:0b:0f:35:a1:c2:a8:
7b:75:fb:8b:6a:f4:17:d3:35:cb:17:e6:04:a8:8a:
86:8a:73:80:9a:4e:c2:d9:ce:c6:1c:01:5f:3e:74:
7c:9f:2a:8b:19:98:39:6b:10:7c:4f:46:88:cf:91:
2f:2e:72:a5:95:a9:77:bb:49:d3:0f:a4:cc:b9:d2:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:A1:75:18:F7:CC:A6:C3:16:96:8F:8E:7F:38:96:A0:63:FF:38
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:12:c2:de:71:23:1c:25:40:da:c0:7e:15:c3:df:7b:f2:cb:
fc:35:e7:7d:5a:44:58:b0:6f:9e:9a:96:10:28:26:10:26:34:
b0:4c:90:41:8a:55:04:e8:19:a3:fa:97:a3:d5:00:99:bc:80:
b4:5d:b5:72:3b:10:ce:6e:5c:41:e0:99:0f:ce:7f:36:8a:73:
5c:9b:93:df:2a:2e:b2:46:2f:c8:2e:7e:aa:df:3b:52:d2:49:
4e:0f:7e:24:6d:4b:97:b0:fa:ca:01:b4:a8:6e:2a:8e:f6:f4:
6e:fb:38:d0:4c:fe:a7:e4:50:ca:5c:5b:04:2c:79:92:6e:52:
67:83:7b:fd:ef:d8:80:2b:94:f4:c6:7b:04:1a:ed:88:6b:2f:
06:a2:15:a9:44:00:2a:50:27:be:c2:92:4e:7a:50:e5:cc:0a:
2a:4f:49:1b:03:a6:db:30:2f:e5:92:a3:f8:99:a3:27:81:7e:
bd:2f:c6:02:da:25:d2:ca:b3:8a:c5:c0:22:d5:ce:6a:37:b5:
f1:c8:5d:1b:08:be:70:7c:fd:a9:e9:1f:ec:01:99:b9:ec:0c:
1b:78:a0:8a:19:66:ac:46:c3:f9:05:d3:28:c9:02:cf:4d:6f:
c0:48:41:62:70:41:e2:92:97:18:20:7c:c9:53:7e:45:0c:bd:
ea:2f:6c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62VyEwUfClJfhg1ARbMMxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjYwNjExMTEwMDIzWhcNMjYwNjEyMTEwMDIzWjAzMTEwLwYDVQQD
Eyg1MjRlYTE3NTE4ZjdjY2E2YzMxNjk2OGY4ZTdmMzg5NmEwNjNmZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zbh1SWT5W6fYEGW5t5x1TFcMAad
QBY6vewLSEVtSuHoK9y8myV65498vJRcLKNT+yL2/rWSjQRO8ta4y7KoLs6ivYPT
G3d7bAQJZvZiLbiKHXCZitrWopkfSriYV9scsajLmEru/4j63FEYkvUcB5MFVrni
35lfGdazQsg+RjpFKUHCyri4upMfLrpSeK7VZ6CB40cbumUdpe70QKtgZ0Zwq1sk
pGC3Qcc+wS9nZuSChK1zwwK9k9DCatILDzWhwqh7dfuLavQX0zXLF+YEqIqGinOA
mk7C2c7GHAFfPnR8nyqLGZg5axB8T0aIz5EvLnKllal3u0nTD6TMudJ61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJOoXUY98ymwxaWj45/OJagY/84MB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBLC3nEj
HCVA2sB+FcPfe/LL/DXnfVpEWLBvnpqWECgmECY0sEyQQYpVBOgZo/qXo9UAmbyA
tF21cjsQzm5cQeCZD85/NopzXJuT3youskYvyC5+qt87UtJJTg9+JG1Ll7D6ygG0
qG4qjvb0bvs40Ez+p+RQylxbBCx5km5SZ4N7/e/YgCuU9MZ7BBrtiGsvBqIVqUQA
KlAnvsKSTnpQ5cwKKk9JGwOm2zAv5ZKj+JmjJ4F+vS/GAtol0sqzisXAItXOaje1
8chdGwi+cHz9qekf7AGZuewMG3igihlmrEbD+QXTKMkCz01vwEhBYnBB4pKXGCB8
yVN+RQy96i9sNw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:52:10 2026 by rpki-client