Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: ym0wDfQmhT3XKkphVnf6vkKxUavLlu77TGVU4+iMJnY=
Subject key identifier: 98:DD:89:9B:68:81:CF:6A:93:30:2F:B3:41:E8:9F:D4:BB:73:92:6C
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019EE88D89278ACA5C1213A01B7D1DD0A0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 0194
Signing time: Sun 21 Jun 2026 05:00:50 +0000
Manifest this update: Sun 21 Jun 2026 05:00:50 +0000
Manifest next update: Mon 22 Jun 2026 05:00:50 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: uRvgQ1sjqahp9/e5BfioLg5I05koDQ5Fth7wV2ir0G0=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8d:89:27:8a:ca:5c:12:13:a0:1b:7d:1d:d0:a0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Jun 21 05:00:50 2026 GMT
Not After : Jun 22 05:00:50 2026 GMT
Subject: CN=98dd899b6881cf6a93302fb341e89fd4bb73926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:16:74:ae:ec:c9:03:4f:95:80:07:47:2a:
ff:b8:e1:10:ce:5f:67:f6:17:3a:63:cb:9e:ea:5c:
f3:ad:8a:4e:49:9e:e6:fb:8f:8e:20:b7:d8:d7:d3:
11:9c:89:3a:56:4b:61:07:48:94:9e:23:e3:2e:46:
ae:87:24:6e:ec:40:8c:73:96:07:b7:84:ee:b5:c0:
2d:89:4b:d9:73:f4:36:4f:6f:58:89:b8:78:96:c3:
b4:9d:62:6b:b9:db:4c:df:20:eb:90:47:d8:fa:27:
e8:8d:ef:bf:7a:f3:a3:f0:cd:f8:d1:10:5c:f7:32:
99:08:26:a5:8b:44:47:a8:85:ba:5f:38:eb:ed:21:
7b:28:02:b9:e7:4a:95:0a:1c:c3:fe:1c:25:66:ab:
1b:b8:05:fb:d0:01:68:db:51:eb:3b:22:e8:f9:e6:
8a:91:13:a3:6c:92:be:b4:8a:e0:32:ba:b4:d1:4c:
91:03:4e:81:46:a4:ce:35:d4:34:dd:05:22:3c:d6:
74:b3:cb:e5:09:fc:b0:c1:ce:e8:d5:fd:cb:da:4b:
a8:13:52:41:47:c7:4e:55:d4:a8:4d:b9:53:5e:97:
66:3e:eb:56:85:fa:81:6e:cd:1e:d4:96:cc:4a:4e:
1c:29:c5:54:ff:12:05:3c:3d:37:ba:dd:2d:d9:d3:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:89:9B:68:81:CF:6A:93:30:2F:B3:41:E8:9F:D4:BB:73:92:6C
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6b:ba:70:84:ca:d0:de:dd:96:39:e8:24:41:85:34:2e:57:
53:6e:b7:6e:06:28:8a:eb:1d:c1:58:a0:6f:48:8d:9b:39:35:
0b:45:9e:7b:22:58:78:01:10:26:2e:85:a2:3e:86:a5:f4:14:
ba:fc:4e:fe:85:5c:b3:e4:ab:fe:15:73:27:d4:ec:9c:81:12:
ca:93:97:c9:45:c2:05:11:19:29:e2:eb:81:45:9e:40:31:a8:
9f:54:6a:f7:16:6f:6d:c3:3d:fe:2d:ee:0f:e3:bb:3b:29:98:
d6:2f:7c:4a:07:a7:b4:9e:06:06:46:1f:5e:ca:26:df:b6:25:
76:5e:32:5b:58:f8:40:3d:31:3a:27:2c:8b:a9:b9:8b:cb:3c:
f7:64:c5:33:24:b4:f2:e0:cc:7f:cb:cf:0c:99:0d:5f:ea:8b:
1d:4f:0f:f9:44:34:f2:a4:59:74:a4:1d:8c:11:37:db:84:a0:
ff:49:96:87:2a:b4:10:22:64:3d:6d:60:d9:48:b7:ef:0f:57:
97:19:21:f8:5f:c3:fb:42:9e:38:36:7c:cf:df:e0:39:64:09:
3d:58:d0:a2:f4:d5:9e:74:a2:19:0d:65:55:ac:7c:2f:1c:93:
57:62:29:78:41:b5:88:7d:bd:0d:1b:26:5b:ab:b4:fe:c7:97:
00:d5:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:21:07 2026 by rpki-client