Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: jj5W4LMxZeav8QQ6ZkLShQpxeAoeBT0iAteuL9pwqf8=
Subject key identifier: E7:10:FA:F7:0C:BA:43:E9:BA:FA:A2:FA:63:69:E4:DC:6C:45:18:7B
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 019E90263F1245259E983DA80D6FB108C4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1952
Signing time: Thu 04 Jun 2026 01:01:25 +0000
Manifest this update: Thu 04 Jun 2026 01:01:25 +0000
Manifest next update: Fri 05 Jun 2026 01:01:25 +0000
Files and hashes: 1: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (hash: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: DAYt3UYu6iRCUMDL7/0ZvnNK1O+RfdzM8aGXtRAXRFA=)
3: SNyntTwsIIpefS6otR0nRSZTl0M.roa (hash: 7Q0juJOhLraTf25d8amnxUBMIjfjOKD/x6SVvjGWFnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:26:3f:12:45:25:9e:98:3d:a8:0d:6f:b1:08:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Jun 4 01:01:25 2026 GMT
Not After : Jun 5 01:01:25 2026 GMT
Subject: CN=e710faf70cba43e9bafaa2fa6369e4dc6c45187b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:4f:a4:97:73:79:8b:9a:ba:9b:de:aa:d9:
78:24:53:a9:53:2f:bb:f1:1c:e2:00:1d:63:95:2e:
62:bb:8a:ee:0e:2b:58:62:09:c9:29:54:ef:84:64:
63:a5:17:8b:f9:06:c9:ae:a2:3a:f6:ef:b9:f6:b4:
50:dd:2e:78:52:ca:af:5f:33:0b:36:c3:5f:67:11:
0e:f3:42:13:c1:4f:99:27:6e:d9:7a:91:30:e0:c0:
c3:9c:e8:37:26:40:e7:bf:ad:b8:c1:1d:76:37:5e:
fb:f5:ae:8d:24:7c:b2:fb:db:54:d3:f1:82:42:a4:
6f:8a:9a:a3:38:93:4f:07:ce:ca:6a:0c:52:c0:ef:
5a:7d:4b:1b:66:8b:bf:68:db:6b:7a:fb:b5:5b:f4:
e1:7b:87:78:90:33:2b:92:90:c9:af:c3:50:89:d6:
32:49:fd:02:0b:e7:d1:83:85:a4:43:48:f8:ee:61:
48:92:60:53:9c:10:cc:ce:2c:ee:22:18:3c:0e:ab:
8c:61:3c:a8:bf:9e:03:08:41:1e:53:d4:8f:b0:c9:
74:ed:5f:bc:4f:89:74:84:9f:dd:b8:53:4a:7b:7c:
14:37:d9:56:4d:87:8b:29:ba:27:8f:37:5d:f2:01:
67:71:40:06:81:35:b4:a9:90:b8:5c:de:fb:b9:31:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:FA:F7:0C:BA:43:E9:BA:FA:A2:FA:63:69:E4:DC:6C:45:18:7B
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:67:89:3b:86:c5:ea:9c:65:c8:28:2f:17:99:d4:79:58:ad:
3d:12:73:a2:61:43:64:9f:72:bd:0c:07:f6:38:79:be:65:7e:
e2:8e:a4:1d:3a:73:6e:45:ce:38:3b:2e:5b:db:4f:6c:70:1d:
c4:3c:63:eb:b1:fb:1c:a6:24:57:e3:93:5b:9f:8d:59:8b:cd:
9f:4f:cc:43:a8:55:b6:d9:99:be:49:42:43:f3:a4:8e:c2:f1:
a8:97:75:55:01:8e:cd:77:7f:53:85:2e:dc:fc:3c:39:43:98:
bf:67:4b:73:72:2a:a2:52:c0:39:61:72:2f:2c:e2:3d:30:0f:
36:f6:11:8a:43:20:c7:61:11:d5:49:4c:c0:c6:51:c4:b2:be:
65:b3:72:ef:44:75:0c:24:30:e6:c4:08:f7:01:f0:9d:eb:cd:
4a:a0:87:84:d9:d6:05:74:8c:dd:49:11:16:60:53:77:9e:6b:
84:fb:71:10:5e:96:b2:51:31:1a:d0:5e:e4:20:c0:1f:d7:09:
a4:0c:7e:1d:f5:2e:12:48:96:94:5e:1c:d2:3f:58:fb:91:a5:
20:f6:5d:91:90:6a:f1:fb:38:84:b8:17:ec:7f:8a:b3:f0:18:
fd:dd:b7:cd:0b:db:7a:46:bf:33:eb:81:1b:ea:f6:e5:a4:10:
5c:c1:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:19:35 2026 by rpki-client