Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: QXc5vd4zCM90XaojjLe5JgpHOQBbDSqNrXLZtltXNC4=
Subject key identifier: 8C:DE:F6:18:9C:72:63:16:8C:7F:C7:18:6A:CD:F7:8C:52:44:3A:77
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 01A06E034E01CD9B6FF0F75A81E2B2033BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 10B7
Signing time: Fri 04 Sep 2026 20:01:45 +0000
Manifest this update: Fri 04 Sep 2026 20:01:45 +0000
Manifest next update: Sat 05 Sep 2026 20:01:45 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: ohuD2auVR6XDI6ZdqHnN+yv8i7hcyePHOnTvxQiiaLA=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:4e:01:cd:9b:6f:f0:f7:5a:81:e2:b2:03:3b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Sep 4 20:01:45 2026 GMT
Not After : Sep 5 20:01:45 2026 GMT
Subject: CN=8cdef6189c7263168c7fc7186acdf78c52443a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:4f:60:be:1b:17:db:b5:36:78:6b:f4:23:
f6:7f:f1:67:b4:a2:e5:50:8a:3c:b0:0b:0a:10:16:
72:db:63:92:39:b9:73:9c:16:ae:25:bc:33:38:c9:
23:50:f3:de:53:48:17:47:8a:3b:fe:73:2f:57:96:
f5:ef:05:51:be:5c:61:18:ac:59:4a:05:07:d2:d7:
66:0d:e1:e0:3f:fe:0a:94:8a:0c:9c:e1:f3:6f:f0:
05:ea:1c:55:67:c7:33:d6:51:ab:22:42:49:eb:58:
0b:1a:f5:25:66:d8:b6:18:86:0c:93:95:6e:44:13:
eb:34:6a:b3:ce:e4:3a:16:0a:ef:ec:57:06:f8:b6:
a0:41:9c:7d:b9:78:00:8a:a0:f7:07:f6:74:c9:b4:
c8:7c:54:ed:96:7c:ec:4c:7c:c0:64:3c:a4:01:d5:
87:c2:97:3a:e3:c9:22:74:38:5a:16:84:87:e1:0c:
7b:f0:41:48:cf:4c:ad:64:6b:58:a1:dc:c0:b8:3b:
9e:b2:81:9d:66:6b:57:be:8e:6c:7a:8c:ff:ce:36:
65:6e:13:60:80:50:6e:e4:58:88:d8:4d:15:ec:02:
3a:42:d5:b1:98:d5:5b:fb:dc:65:c3:a7:d2:4c:4e:
03:93:2c:1b:ad:0c:8b:9d:eb:92:20:55:33:8b:b4:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:F6:18:9C:72:63:16:8C:7F:C7:18:6A:CD:F7:8C:52:44:3A:77
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:00:58:fd:9d:58:76:19:2b:3c:e4:bb:37:4a:35:34:c1:
93:a5:37:3b:fd:bb:dc:ab:81:a3:d4:85:9d:de:8a:2a:18:5b:
02:cf:4b:27:08:3b:d2:f6:50:21:b9:7b:fe:5f:6f:76:12:b7:
dd:65:d1:59:cc:0f:25:39:0a:6e:c5:bd:4a:b2:5c:11:40:ca:
7b:da:cf:48:fe:45:d6:09:c7:b5:3f:ef:62:32:90:40:ad:ee:
54:ec:6d:24:a5:bd:d0:a1:41:a5:a6:5d:4e:b3:54:50:9f:16:
36:d5:c9:ef:d9:a5:53:6d:8c:d4:66:3d:7b:7e:cf:af:44:0e:
ff:c2:58:94:6c:06:c5:4e:05:d4:ed:3e:7c:73:14:fe:f7:76:
f0:20:0c:bb:71:62:58:50:32:21:18:42:98:d9:53:f4:94:85:
77:0a:7e:03:6e:09:92:28:c6:38:f3:62:c4:9c:5e:a2:78:c6:
94:44:49:86:11:51:52:06:ff:c7:23:f1:bc:a7:68:e8:a0:c7:
7f:f2:82:7d:1d:00:4c:0f:8b:2a:5d:84:95:53:2f:96:96:35:
3a:39:01:53:ff:61:fb:7b:3e:69:21:5a:d3:a5:27:34:d3:73:
90:a1:0d:23:52:96:1f:20:20:1f:4f:0f:43:7b:e7:bb:b7:2d:
f5:3e:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:19:14 2026 by rpki-client