Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: kvD7dYCzsjrIaEqBt8ki8UHqctqoU7MmPE27LMVzvZw=
Subject key identifier: CE:26:EE:54:0F:62:06:6D:04:89:C1:6B:36:D4:3D:BA:3B:AE:9D:B4
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019D37526408EECFC22C6F9D7BEC407F22CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0F0D
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: 9xEY0Uq8vY/FB+7dp7H5xaOl7qEgFIXXwbW/atEiiZc=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:64:08:ee:cf:c2:2c:6f:9d:7b:ec:40:7f:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=ce26ee540f62066d0489c16b36d43dba3bae9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:38:81:af:d3:f3:43:f1:0e:3b:9f:c4:04:
68:14:2a:57:f5:8b:1c:fc:8e:a2:00:43:a3:50:24:
05:55:8d:ad:6a:1e:b5:50:66:a3:12:55:1b:4a:0a:
70:85:23:7c:01:5e:6b:13:e2:08:db:39:2c:c3:35:
c6:84:10:02:f6:01:f4:96:a6:4c:07:72:d6:a3:53:
de:72:23:00:c1:8f:f9:e7:8b:95:69:f5:07:43:9e:
2e:1f:5a:fb:da:d4:5a:58:36:de:dd:84:b5:33:4e:
e5:d3:46:dd:ab:3f:01:c7:12:94:e4:f5:3a:c5:3d:
16:b3:66:51:1b:64:25:81:27:50:3f:4f:09:c4:61:
cf:90:1c:4c:18:99:13:38:02:5b:ef:86:72:65:36:
cb:97:cf:bf:ea:a5:fd:73:33:21:a5:8c:f8:c1:81:
fc:20:56:0e:a6:13:e0:11:3b:a6:fb:09:51:b8:5f:
69:eb:1e:68:b8:9c:7d:28:6e:f5:54:e2:58:f2:0f:
f8:bd:e1:3f:23:53:9a:df:1c:1b:1f:98:af:4f:6a:
44:68:a5:8b:f5:40:61:a1:d6:b1:60:72:bc:90:3a:
7d:a8:97:bb:24:7c:86:3a:ad:51:f2:c3:fa:ba:59:
4c:2b:4b:c2:e0:0f:b6:8a:eb:dc:2f:33:34:dd:71:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:26:EE:54:0F:62:06:6D:04:89:C1:6B:36:D4:3D:BA:3B:AE:9D:B4
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a7:b2:8a:0c:5e:c7:9c:89:fb:64:58:a4:22:3c:6f:af:6d:
43:94:61:8c:71:a0:b8:0b:04:66:f3:89:7c:d9:65:81:a8:d4:
56:cb:81:78:4f:c1:8e:31:7c:43:04:cc:23:e5:f9:9e:cb:1b:
93:8f:6a:2b:d3:49:9a:db:44:18:4e:be:fb:25:7b:52:79:4c:
da:46:5b:7c:c5:43:8f:4e:d4:29:9f:e7:e8:d4:54:00:35:fe:
85:22:ff:81:48:31:26:48:56:fc:b1:87:5a:6c:16:27:03:41:
02:71:2c:06:76:ec:60:61:f0:81:45:a9:30:ac:7c:f9:cf:c9:
f7:14:c2:a6:05:3e:fb:29:20:2e:96:0b:17:45:c3:2d:ca:05:
80:8f:6e:4e:0c:72:6b:91:9b:b7:e0:36:98:23:97:54:c2:6b:
57:e3:9c:5a:41:0a:32:ec:21:76:68:9f:6a:e9:dc:12:a8:27:
20:af:10:11:8a:e0:f4:41:16:10:ad:f3:4b:94:8a:4c:85:a0:
98:4f:37:d3:71:83:b7:73:9c:5a:9c:fc:bb:08:cc:30:bd:2c:
ba:b9:c8:f1:4e:18:ea:48:dd:8a:48:2a:d3:bd:e0:65:a1:4a:
3a:06:d5:bd:c2:d5:7d:2a:99:18:8f:54:f1:a8:7d:bb:60:76:
d9:54:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client