Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: MqjdjcYSuZUJ3KQXjSQL3mv843M8XSXS9MDt1o1leDA=
Subject key identifier: 46:F1:8C:73:BC:FD:E1:81:69:C2:17:79:6C:17:32:14:2E:79:8E:F6
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019F10E559B5627A0CA4C40E61D750E26C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 045D
Signing time: Mon 29 Jun 2026 01:01:33 +0000
Manifest this update: Mon 29 Jun 2026 01:01:33 +0000
Manifest next update: Tue 30 Jun 2026 01:01:33 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: 5LN5ltZwLdGz+5Q74CvFf/E12mlkHmH/lfaxyVGuKgc=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:59:b5:62:7a:0c:a4:c4:0e:61:d7:50:e2:6c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Jun 29 01:01:33 2026 GMT
Not After : Jun 30 01:01:33 2026 GMT
Subject: CN=46f18c73bcfde18169c217796c1732142e798ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:84:c3:4d:46:f1:59:d6:09:68:f6:21:8b:
fd:86:df:70:b4:cc:57:01:87:f1:8d:7b:56:d4:48:
d9:9f:7d:71:44:12:4c:48:3f:ef:22:0b:96:7d:4e:
88:e5:1a:da:c5:84:82:56:1a:1b:47:08:34:73:14:
d2:03:f6:e9:3d:55:79:8d:1d:56:11:70:1e:ed:d0:
a9:5b:20:86:00:8e:8f:b5:71:eb:7f:83:31:76:c1:
45:e2:13:6c:24:54:c9:fe:19:fa:1c:bf:0f:55:8c:
31:52:d1:ad:b0:50:cb:f3:33:ad:f7:7c:a9:b4:05:
8c:88:59:c8:bd:72:64:26:ca:84:2c:fd:47:25:52:
1a:fa:03:47:ce:a7:c7:dc:bb:e1:20:c2:96:70:ec:
94:78:08:ad:4e:c2:d7:dd:cf:9c:61:0e:24:c3:2c:
94:4b:f7:61:74:19:96:82:d6:8c:a1:2b:cd:31:26:
15:e2:f5:ce:a6:bc:35:77:c1:62:bc:05:9a:17:c0:
f9:37:60:68:6b:ac:bc:56:64:2e:47:f9:22:48:9e:
18:91:ab:8a:8f:bb:5d:86:e7:8a:71:c7:16:65:2a:
05:c9:91:af:9d:7b:30:20:b5:47:25:46:dd:2e:a4:
c6:68:d0:12:ec:36:42:fd:71:0c:0b:7b:6e:0b:71:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:8C:73:BC:FD:E1:81:69:C2:17:79:6C:17:32:14:2E:79:8E:F6
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ac:83:f5:a0:fb:02:88:e4:14:49:4f:87:58:25:3f:4a:87:
b9:87:58:c8:b5:05:17:82:c8:08:d0:5e:52:b1:7c:5f:46:22:
2a:3f:fe:85:ae:c9:84:64:9b:66:86:97:57:d0:65:1d:c0:7b:
a1:32:ae:c3:f5:dc:3c:8b:58:12:c9:11:25:e2:e8:e0:e8:e0:
a4:59:d6:4c:3f:4b:9b:6f:6e:75:87:13:72:ed:b6:f0:b4:88:
ca:15:d3:fc:a5:fa:68:7d:dd:b2:c3:92:34:88:83:e0:d4:2b:
76:ee:ab:04:b6:6b:3e:f8:0b:9a:87:ca:2f:00:52:c0:28:75:
a2:b4:bf:d2:d3:41:a0:0e:55:b6:71:f6:09:b7:e8:21:14:35:
cb:b2:7d:da:4c:61:9f:bf:0d:13:71:38:9d:1f:33:33:fc:7b:
5a:56:19:14:d7:34:57:5b:f9:10:c5:90:55:13:2f:ec:94:2b:
eb:6e:4d:6e:84:2a:c9:95:51:0a:bd:37:62:8f:3e:fa:55:8b:
92:36:e0:b8:0c:ed:2a:29:ef:7d:c5:a2:6c:af:47:cb:23:4f:
27:f8:02:37:3d:66:49:b0:52:8d:f2:99:a6:81:06:96:12:bd:
13:df:bc:b4:8c:8d:1d:ce:73:13:22:16:2a:42:37:e8:10:16:
9c:41:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:34 2026 by rpki-client