Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: T1/mQnwp3dJp1oc59EYqifnkdAYBMSPEq9eP/runTEM=
Subject key identifier: 95:A3:CD:EB:C5:1E:10:38:D4:72:DF:56:3A:9F:3D:F8:22:31:8B:60
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019EB98EF73C7B7ACF5A38D9258BDABCE816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 18AF
Signing time: Fri 12 Jun 2026 02:00:14 +0000
Manifest this update: Fri 12 Jun 2026 02:00:14 +0000
Manifest next update: Sat 13 Jun 2026 02:00:14 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: cRCT+h06sh/OH/1qdsAKx1uAEO/tunPCice5KbcwCPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8e:f7:3c:7b:7a:cf:5a:38:d9:25:8b:da:bc:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Jun 12 02:00:14 2026 GMT
Not After : Jun 13 02:00:14 2026 GMT
Subject: CN=95a3cdebc51e1038d472df563a9f3df822318b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:be:f9:c5:c9:42:81:5f:7d:af:7a:47:4c:
7d:89:00:0e:2a:f2:1e:5d:81:7d:92:b4:4d:ea:a2:
f0:e7:64:e5:a7:cf:26:d7:4c:9f:8b:a1:d0:03:fe:
67:3a:c5:a9:6f:3e:32:54:79:6e:91:10:cf:72:a2:
cc:c9:4b:7a:f3:37:1d:8a:be:99:8e:83:ea:06:a2:
b9:43:37:d3:f5:b6:98:51:ba:44:c8:de:90:84:c7:
c8:6c:9c:4e:f4:93:16:26:4d:47:67:0f:64:b6:02:
e6:2e:fd:7c:39:5a:21:be:e2:65:ee:bf:d3:aa:36:
7e:b5:b7:a2:12:fe:62:ed:87:7d:7f:ab:d9:9a:9a:
f2:d0:6a:df:6f:e6:4a:03:64:64:83:47:ce:32:d9:
d3:6c:be:0b:fb:a2:47:85:b4:76:1d:7a:1a:9a:67:
18:26:59:d2:67:6d:ff:37:46:4f:91:4c:c2:2f:c0:
ce:59:b8:37:98:16:ba:44:a6:74:ee:c2:cb:2b:05:
29:b1:be:ec:37:67:84:e6:5c:83:81:48:c3:9d:d5:
1b:5d:ba:41:f3:c4:48:04:10:da:b8:5e:8a:5b:2f:
fb:63:74:71:c4:1d:44:66:81:7e:eb:41:2b:49:1f:
36:43:63:dd:01:04:2d:2c:7b:29:0b:4f:10:17:b3:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:CD:EB:C5:1E:10:38:D4:72:DF:56:3A:9F:3D:F8:22:31:8B:60
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:fe:6e:d0:84:37:0e:33:2b:26:ca:7d:46:6d:68:08:a6:
14:92:2a:2d:56:08:cf:e8:ef:ae:58:67:4d:54:a6:a0:a7:0b:
e9:94:6f:d0:71:c4:d2:47:5c:6a:70:32:73:e5:00:eb:5c:26:
68:b6:10:d7:d0:b3:0b:72:68:c9:c1:4c:32:8b:7f:02:d9:53:
38:41:da:39:2c:f8:d2:97:8d:71:9e:f5:bd:f9:55:b7:77:28:
79:28:37:2a:5c:88:f8:67:fd:ca:14:d3:73:a6:d7:19:9c:d1:
95:86:5d:2b:33:bc:e0:83:70:b8:0d:4c:33:7d:cc:97:32:c8:
1a:72:30:13:f8:fd:a6:4c:74:83:1c:98:1f:da:ca:96:4b:0c:
1d:af:64:da:62:6d:86:de:38:51:91:3d:02:90:14:e8:26:f0:
3c:04:de:36:a9:e5:ac:89:d9:b1:89:da:e7:2c:b9:c4:20:0b:
79:ec:fc:bf:c3:f1:81:8d:7b:b6:d8:72:5e:92:83:f0:90:4a:
db:34:ff:7c:30:36:fb:21:31:b8:17:1f:a3:45:05:f3:ea:4c:
aa:87:cb:fc:80:39:8f:39:04:85:a0:89:c7:8c:0f:3f:39:ee:
27:04:ab:a7:2f:9e:e4:20:8a:ca:5a:05:ca:13:2e:d5:63:63:
04:28:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:21:24 2026 by rpki-client