Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: 9Vw2g5H7x1rYHecaRHEkmL4lNq07dftaoU+gkqlbZX8=
Subject key identifier: 19:31:E2:68:85:0F:9D:BB:A5:F2:18:92:A8:A4:E1:C8:1D:92:F1:7A
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 019F130AE782E5E0811804C0A29EB3AB3F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 0A5F
Signing time: Mon 29 Jun 2026 11:01:49 +0000
Manifest this update: Mon 29 Jun 2026 11:01:49 +0000
Manifest next update: Tue 30 Jun 2026 11:01:49 +0000
Files and hashes: 1: 0suRCo-bzD4_wCdS0bD7dThrxnc.roa (hash: wYzbnfgbRv8G8hJvN4xYggJP/XRjyk7dwQh4KwDNFG4=)
2: SzpktkhtXMNAJGuEKNGRvpmUXeI.asa (hash: j2A/2g4CpNtdKf5zV+zzkonaFlk8ZnbNvL0SDLhKgjM=)
3: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: vsQfPDQmx11J/revLXFKubT464awxq/YYS4QHLRvqZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:e7:82:e5:e0:81:18:04:c0:a2:9e:b3:ab:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Jun 29 11:01:49 2026 GMT
Not After : Jun 30 11:01:49 2026 GMT
Subject: CN=1931e268850f9dbba5f21892a8a4e1c81d92f17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:e9:f9:f6:98:af:e9:c2:c1:8f:3f:09:0f:
d2:37:3a:2a:83:e0:53:e2:48:f4:5f:5d:0f:01:dd:
78:51:84:a2:3d:fd:08:93:ab:55:b6:3a:57:91:05:
8f:ad:57:f6:cc:1c:94:ec:77:b1:f9:8c:5b:15:b3:
83:51:4d:5a:57:12:02:53:ec:b0:85:53:e0:7e:ff:
13:d1:3f:d6:ba:3f:0c:ee:69:3d:68:37:3d:00:3e:
17:cf:fd:74:40:a0:84:3a:56:1a:15:0a:4a:d9:fa:
78:72:10:94:0e:37:da:7b:3a:73:55:4d:cd:60:56:
dc:9e:82:e1:7b:0d:42:5d:38:c0:6c:b7:da:a9:a9:
f9:86:72:96:10:26:c4:ec:07:cb:15:88:2a:58:b7:
27:45:25:ef:35:74:3a:a2:b7:3a:22:80:9d:f4:70:
2f:7b:75:df:d1:57:27:b4:0f:74:14:8a:dd:3a:78:
68:2e:3a:cd:de:19:f5:5c:18:6d:41:8e:b4:41:14:
52:5f:12:78:35:86:9c:59:d6:72:e1:8c:3c:07:bf:
e5:bc:9e:07:c8:8e:38:03:31:2a:ff:53:20:a2:e2:
ad:58:c6:dd:e0:5c:fe:de:c2:1b:1d:7f:76:3a:d9:
32:44:6c:fe:3d:d3:8e:81:ec:86:30:85:bb:00:69:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:E2:68:85:0F:9D:BB:A5:F2:18:92:A8:A4:E1:C8:1D:92:F1:7A
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:f9:32:07:52:52:69:c1:24:af:1b:1c:2b:81:75:9f:ca:
3b:86:13:c8:8a:7c:bc:45:d1:10:7d:98:5d:f8:72:ea:f1:65:
94:6b:b7:10:bc:c0:c7:d6:44:e8:d7:5e:43:ea:10:f2:fd:12:
f7:3d:f3:ff:f2:7a:aa:c2:94:2a:91:9d:ca:af:58:c9:5d:5c:
ba:74:57:dd:18:fd:63:3c:2b:88:5d:ab:bf:67:4f:b8:c9:9e:
e5:a4:ee:1d:0b:70:fb:0a:ef:be:bf:31:2c:98:6d:6a:5e:f7:
90:38:58:67:4f:c2:7c:98:26:93:3c:20:50:29:de:32:5a:77:
19:fe:9f:99:ab:55:e1:1d:da:0e:ed:4e:8b:0e:ff:e8:90:2e:
c5:db:ac:ee:83:4d:0d:7d:67:41:01:02:9b:34:62:07:6a:92:
a7:7e:b6:ae:ce:33:04:92:92:ff:25:07:de:38:fa:02:ca:b9:
2e:98:cf:2a:3f:ad:4d:48:46:05:28:6f:7a:94:9c:a3:0a:f2:
91:72:d5:c3:c2:d4:b5:64:a4:9c:d4:74:a7:18:d2:3f:4c:65:
7b:3b:89:c5:56:fa:1d:a4:8e:dd:36:d1:50:80:c3:05:23:76:
78:a9:1b:06:8c:e0:73:d3:36:0b:97:b0:9e:b6:d6:56:71:38:
b3:04:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:02 2026 by rpki-client