Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: IsgnYxOOJU0auS28vtuOcdJqXdfJIUsUF1LcEgXqesM=
Subject key identifier: 55:9A:D4:1C:C3:AE:AC:A9:03:B4:E0:6F:B4:9D:7F:94:25:68:C2:B1
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019F10E4EED3511BCBCC43BD32AB6F34C28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0ECA
Signing time: Mon 29 Jun 2026 01:01:06 +0000
Manifest this update: Mon 29 Jun 2026 01:01:06 +0000
Manifest next update: Tue 30 Jun 2026 01:01:06 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: j3cbJhmGUyp8SmgmJOHFzV2QkKnIHQABwaCPh5juMH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:ee:d3:51:1b:cb:cc:43:bd:32:ab:6f:34:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jun 29 01:01:06 2026 GMT
Not After : Jun 30 01:01:06 2026 GMT
Subject: CN=559ad41cc3aeaca903b4e06fb49d7f942568c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:f8:9c:2e:5a:fd:53:69:af:1b:12:e8:48:
6e:68:51:f9:3b:2a:93:d1:40:f2:a3:0f:40:41:a0:
6b:5d:77:02:6c:a2:34:ad:f2:49:20:3b:90:a2:6e:
3a:ee:00:dd:3b:bb:65:cd:ba:b8:fb:56:3d:21:a4:
81:16:83:a4:33:46:78:fb:d8:01:fc:e4:56:55:d3:
43:f5:40:29:ef:08:01:c8:dc:82:f5:57:45:74:a5:
e2:f8:8b:19:16:07:a4:76:66:b5:50:50:26:e3:a0:
57:46:6f:9d:37:42:ad:02:9f:05:f4:d4:46:bb:55:
db:3c:af:d5:e9:f3:1a:d9:8d:88:8d:90:7f:f4:f1:
ba:f8:ea:fc:9d:76:8b:a6:45:88:31:fe:fb:1f:a5:
c4:e6:e9:72:1b:98:95:2d:6c:38:9e:07:87:ef:6c:
65:5f:bf:02:88:2b:cf:84:5f:51:21:38:a1:9a:b0:
4b:dc:33:98:3d:1a:cb:1e:10:83:c4:6e:9b:55:30:
7f:91:3c:1c:1d:c4:e2:8b:14:95:4e:68:39:d1:0f:
31:12:bd:0a:a5:aa:0c:6a:01:65:ff:44:e9:b7:58:
73:21:bb:d3:e7:fc:42:62:90:4a:8e:bd:6d:2c:2e:
4c:9b:6f:23:e1:aa:67:9e:54:09:a7:a8:8c:0e:8a:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:D4:1C:C3:AE:AC:A9:03:B4:E0:6F:B4:9D:7F:94:25:68:C2:B1
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5b:88:f9:81:01:2f:18:61:c6:dc:65:4c:7f:21:2e:a7:04:
40:e9:36:3d:96:09:42:ca:d8:56:0a:21:f1:fe:e9:29:3d:94:
ba:cf:88:d4:dd:7f:79:66:c8:2c:78:e4:08:06:72:81:37:95:
e0:1c:a7:07:5b:67:d4:d7:3e:f5:0f:3c:fd:61:75:5f:21:e3:
5b:b5:a7:d4:7d:53:77:02:44:d5:18:a5:ce:a9:a4:5a:93:1f:
17:97:dc:72:ba:f2:15:ed:ef:3e:28:18:0a:fa:7f:aa:64:9c:
2c:df:b1:b4:cb:37:19:3a:c3:30:55:22:f1:79:9a:7e:7e:80:
e6:f6:46:30:72:ca:f6:b8:5e:d0:65:db:c2:c2:41:f8:ec:2d:
ef:c1:66:84:8a:7e:a9:06:7d:d4:2f:5f:d7:08:a6:ee:e6:42:
90:9e:47:1c:d4:94:91:1b:28:a5:23:55:53:c8:98:5c:ec:1d:
7e:37:78:ab:88:c8:cc:c2:54:c9:2a:7f:d8:b7:c6:7e:c4:9a:
6d:d8:fc:0d:dd:b4:c2:43:00:d1:b5:a6:ea:67:68:9f:41:d0:
72:6d:94:8e:58:24:a8:eb:ed:cb:db:c6:0c:32:5c:4a:b5:1a:
67:68:8d:7f:0d:fd:c9:18:64:0e:19:50:73:1e:9c:d3:e1:d6:
d7:58:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:25 2026 by rpki-client