Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: CFBGG6deXBiybgC+bTcrNT0BKuNO9y9/Tu38Lg7g64Y=
Subject key identifier: D4:08:50:98:67:C8:24:E0:83:83:5F:8C:26:7C:F6:7C:10:A2:1E:1B
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019E8E007D7CA19672E28544CD0DDCDE7E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: B0
Signing time: Wed 03 Jun 2026 15:00:57 +0000
Manifest this update: Wed 03 Jun 2026 15:00:57 +0000
Manifest next update: Thu 04 Jun 2026 15:00:57 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: qSf30eChU/oRHmmyW8+z1X44y9SpdTPrf3/FjmGtAA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:00:7d:7c:a1:96:72:e2:85:44:cd:0d:dc:de:7e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Jun 3 15:00:57 2026 GMT
Not After : Jun 4 15:00:57 2026 GMT
Subject: CN=d408509867c824e083835f8c267cf67c10a21e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:fe:e3:96:ca:90:86:1e:89:7c:ea:0e:d8:
90:71:1b:a6:da:a8:2a:ed:f2:35:5c:ed:d8:66:0c:
1c:3c:ea:cb:73:99:28:77:fb:cd:aa:f5:f4:ee:b2:
03:d7:49:c1:b0:44:66:9c:1c:a2:3b:74:3e:4e:b8:
6e:a5:df:2b:da:cf:5e:cc:94:88:1c:47:40:38:13:
48:a5:b8:44:e2:4e:04:56:fa:49:f7:7a:45:dd:49:
c4:de:f1:79:e8:e7:06:36:29:3c:ba:5d:76:97:1c:
37:5b:23:4b:b1:fa:08:0b:d1:6c:fe:bf:49:d9:3b:
17:70:02:3a:6a:cc:52:ca:96:8c:a2:4e:59:c9:35:
b7:bc:4d:95:2c:c9:ce:a5:35:f8:c3:c9:4b:dd:47:
e3:19:62:5a:1a:25:d4:37:9e:bb:d8:f6:75:0a:b2:
a6:6c:91:aa:a8:32:bd:05:cd:eb:70:36:b2:7f:5e:
9c:44:e0:a7:62:66:e3:96:a4:b4:d2:9e:de:28:70:
35:9c:37:2d:42:d1:0a:d6:b1:ee:f3:7c:e0:49:f6:
b7:38:e3:1c:67:ef:3e:18:ab:29:45:fc:70:9d:38:
2e:b5:ea:3f:c3:1d:24:ca:cc:6e:83:e7:08:7a:15:
ff:25:02:90:1b:8c:a1:f0:5e:ce:9c:10:0b:d7:9c:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:50:98:67:C8:24:E0:83:83:5F:8C:26:7C:F6:7C:10:A2:1E:1B
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8b:dd:18:58:d9:e2:8a:d8:30:67:08:84:d1:9c:34:d5:c1:
80:0a:ea:eb:67:ac:f3:4f:5b:cb:bf:3a:dc:45:fe:d8:39:1e:
89:66:04:f8:96:0d:80:3b:78:68:e0:20:c0:c7:e0:a3:ce:61:
93:bc:05:43:c4:e9:fd:60:d4:1e:20:45:11:51:dc:21:c2:57:
cd:09:f8:1d:85:41:eb:c7:62:80:a1:cf:c9:5d:a1:78:d7:21:
12:ea:4b:6d:09:41:65:c2:9f:5d:c3:e7:bb:d2:42:15:a1:16:
fb:45:f9:1c:a6:30:13:1a:7b:46:31:45:a7:19:d2:98:c8:57:
31:94:e1:c2:66:0e:7b:43:24:23:1b:c5:5c:29:83:1e:f7:f6:
47:90:8c:2d:24:38:16:d2:ed:9d:e1:16:c9:18:06:98:ed:d2:
31:38:f2:c1:65:31:4c:5c:aa:5f:ea:b2:29:81:d9:ca:0b:21:
38:d1:a5:0c:2f:e4:fe:12:99:b6:6f:23:98:e2:2c:f4:8e:07:
b6:ba:b5:31:8f:22:37:65:64:14:f2:67:a2:43:11:87:7b:d1:
38:88:fb:4f:38:3d:2f:db:a4:39:74:10:ac:0b:6e:e9:8b:a0:
5b:e8:36:ae:d1:d0:3c:c1:f0:b2:69:23:e7:d8:49:28:12:4a:
90:68:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:59:35 2026 by rpki-client