Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: dvF4ReRz+Zd6KpPGxo0DDJYbtfsDTGtYyQzksUOAH2w=
Subject key identifier: 83:88:A1:E9:83:E4:A7:20:8D:C3:15:8A:23:DF:73:FD:EF:25:A8:7F
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 019F122EE26FF983AD021E3C19F5DC58BF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 07:01:30 +0000
Manifest this update: Mon 29 Jun 2026 07:01:30 +0000
Manifest next update: Tue 30 Jun 2026 07:01:30 +0000
Files and hashes: 1: 1-A4EU1ApAufBvEjd-muSLr7ANu8.roa (hash: RnoopnV8A6AgkKLGp6MuOa3nwgjKcYP0z+JNGgWdgZU=)
2: 9ahtSN9XLjXuAR5XQRQMSvAfggs.asa (hash: wf77PGlmiZZODXFzLO6ccUs8zaq7f7VnJ0py4/asRek=)
3: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: r1r9a/VM8SMDj04knFr4kAjD+q+Byy7zacHAlpnXVq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:e2:6f:f9:83:ad:02:1e:3c:19:f5:dc:58:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Jun 29 07:01:30 2026 GMT
Not After : Jun 30 07:01:30 2026 GMT
Subject: CN=8388a1e983e4a7208dc3158a23df73fdef25a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:85:75:3e:e4:98:b8:97:88:9d:f7:12:4e:
a4:60:1e:28:ce:2d:f2:08:9b:57:2c:6d:e9:15:40:
62:85:2d:45:c0:2b:82:4a:bd:0e:4a:32:53:6b:6f:
6c:10:59:5f:e4:77:1b:5d:8a:82:9b:02:9a:92:13:
2a:c7:cd:13:9a:08:87:94:4f:b4:73:07:80:21:d2:
de:3d:0e:bb:c0:76:10:35:e0:b0:52:3e:c7:31:9d:
0a:24:cf:a8:a1:df:66:2c:94:61:fd:1e:11:54:29:
e2:d6:87:e8:2f:47:1f:63:4c:d2:66:c6:7d:03:45:
12:3b:a1:72:ed:61:d0:9c:5a:eb:cb:72:10:c6:25:
6d:96:0e:98:26:fb:02:77:38:88:bf:ef:20:82:c2:
f4:24:6a:ed:05:7a:24:5e:13:18:97:5c:1b:14:29:
1f:99:d5:c3:2a:0a:1e:15:56:09:bf:5a:fa:11:d8:
de:a4:46:b7:a2:17:a8:83:c2:f7:a5:90:6d:03:c6:
94:52:a7:cb:f2:e9:25:06:6e:7b:bd:75:54:a7:88:
a6:b5:ca:b2:cf:2f:d1:e3:88:25:54:f1:b4:38:47:
12:4d:6d:b5:58:c6:11:f7:53:35:c5:36:17:8b:46:
c4:69:7c:70:e8:2e:30:62:07:cb:e2:67:19:9d:3b:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:A1:E9:83:E4:A7:20:8D:C3:15:8A:23:DF:73:FD:EF:25:A8:7F
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d9:0d:d6:92:f0:32:3d:0d:f6:55:32:99:72:96:0a:f0:fa:
08:ae:0b:9c:ad:06:53:04:c3:f4:a9:a5:5a:e1:d0:25:fc:b9:
da:14:28:4c:70:4f:1b:c4:15:25:92:d8:cd:5a:9b:c7:4d:18:
80:d4:d4:7d:97:71:9c:8a:30:c2:2d:02:59:cd:ea:0e:0e:e2:
f9:1e:04:a4:aa:bc:a8:01:ba:a9:8e:8d:e8:68:91:75:b6:e4:
ad:6b:14:64:d0:de:46:50:77:92:3d:4e:43:be:51:8f:d8:27:
94:02:21:83:83:21:71:46:5a:2f:5c:86:57:a2:db:4f:41:84:
c0:aa:46:93:c8:86:6e:1b:69:21:39:e9:09:9c:34:30:5d:90:
11:54:57:f5:22:38:e8:ed:d2:32:27:5e:50:bd:3d:31:14:47:
b6:66:0c:a4:ed:2b:16:17:9a:3c:53:b2:32:f4:8f:f7:5f:21:
fe:b7:69:b1:ad:69:b8:85:2d:29:8a:8c:00:b0:d6:73:b1:24:
c3:23:a7:e5:de:c4:11:2c:97:c7:ab:73:70:b2:fd:92:98:f5:
1a:3d:ba:f4:3d:54:e3:bf:92:56:55:77:97:39:c0:b4:3a:dc:
90:cf:9d:f1:53:e7:b2:a6:00:91:f1:f4:75:b4:92:94:cb:86:
df:47:81:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLuJv+YOtAh48GfXcWL9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3
MTcyNWIwHhcNMjYwNjI5MDcwMTMwWhcNMjYwNjMwMDcwMTMwWjAzMTEwLwYDVQQD
Eyg4Mzg4YTFlOTgzZTRhNzIwOGRjMzE1OGEyM2RmNzNmZGVmMjVhODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzReFdT7kmLiXiJ33Ek6kYB4ozi3y
CJtXLG3pFUBihS1FwCuCSr0OSjJTa29sEFlf5HcbXYqCmwKakhMqx80TmgiHlE+0
cweAIdLePQ67wHYQNeCwUj7HMZ0KJM+ood9mLJRh/R4RVCni1ofoL0cfY0zSZsZ9
A0USO6Fy7WHQnFrry3IQxiVtlg6YJvsCdziIv+8ggsL0JGrtBXokXhMYl1wbFCkf
mdXDKgoeFVYJv1r6EdjepEa3oheog8L3pZBtA8aUUqfL8uklBm57vXVUp4imtcqy
zy/R44glVPG0OEcSTW21WMYR91M1xTYXi0bEaXxw6C4wYgfL4mcZnTurKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOIoemD5KcgjcMViiPfc/3vJah/MB8GA1UdIwQY
MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt
YTE2YTM0YzQ2ZjMwLzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw
LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9kN1pLw
Mj0N9lUymXKWCvD6CK4LnK0GUwTD9KmlWuHQJfy52hQoTHBPG8QVJZLYzVqbx00Y
gNTUfZdxnIowwi0CWc3qDg7i+R4EpKq8qAG6qY6N6GiRdbbkrWsUZNDeRlB3kj1O
Q75Rj9gnlAIhg4MhcUZaL1yGV6LbT0GEwKpGk8iGbhtpITnpCZw0MF2QEVRX9SI4
6O3SMideUL09MRRHtmYMpO0rFheaPFOyMvSP918h/rdpsa1puIUtKYqMALDWc7Ek
wyOn5d7EESyXx6tzcLL9kpj1Gj269D1U47+SVlV3lznAtDrckM+d8VPnsqYAkfH0
dbSSlMuG30eBRA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:25 2026 by rpki-client