Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: kJdogrvUH+lmypqS02Z5KIyt0Ygi7phVKSNeNKh8nmA=
Subject key identifier: 0B:F6:5B:3C:43:16:3E:E8:C8:04:13:70:7B:B9:DE:D0:34:16:BF:65
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019EB7A0EB3A8268A6FB45F25E333DB64744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 187A
Signing time: Thu 11 Jun 2026 17:00:36 +0000
Manifest this update: Thu 11 Jun 2026 17:00:36 +0000
Manifest next update: Fri 12 Jun 2026 17:00:36 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: RXYZO8tp+UCKrErAUPiGSE67kcSkNzaI0wL4ch0pOvc=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:eb:3a:82:68:a6:fb:45:f2:5e:33:3d:b6:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Jun 11 17:00:36 2026 GMT
Not After : Jun 12 17:00:36 2026 GMT
Subject: CN=0bf65b3c43163ee8c80413707bb9ded03416bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:13:b8:66:81:00:22:3f:6b:fe:2e:64:22:
d1:85:96:68:f7:c6:40:1f:09:5b:e0:b4:8f:e3:d7:
1b:2c:a4:e3:3d:8d:13:2e:be:a4:76:5c:4f:21:c2:
03:5e:c6:3b:b5:3f:79:f8:60:0e:ff:03:87:6f:bc:
cf:27:8c:9b:57:7e:ce:40:7d:81:10:b5:f1:02:d3:
d2:02:80:39:94:12:fc:89:56:0e:78:df:a9:e5:ca:
15:dc:d0:1d:bc:7e:6b:ce:d2:25:06:06:14:95:e6:
9f:f6:28:84:8d:e3:98:ef:04:0c:fa:fe:4f:c1:1f:
ab:fb:89:60:a8:42:e4:c0:03:ad:cd:52:72:9c:67:
e2:6a:40:1f:b3:3d:cd:ab:33:4f:24:e5:a7:bc:d0:
9f:4d:ee:35:a4:c8:a2:fb:1d:a1:d6:a9:dc:d4:14:
18:72:cb:a3:6e:88:22:a9:8b:bc:7a:3b:3b:4b:09:
91:b5:fd:5f:2d:73:95:39:1d:bd:c9:ff:eb:2b:d3:
f1:ad:97:0e:cd:8c:59:71:b7:49:32:6d:f7:bf:1f:
22:d0:c1:03:14:dd:e1:6b:4f:78:fb:c4:ea:99:6b:
83:23:63:03:fa:50:3a:54:52:7e:98:d1:bf:ac:a8:
0c:6c:84:9e:c2:0a:76:c6:14:e7:80:d7:89:3a:9b:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:5B:3C:43:16:3E:E8:C8:04:13:70:7B:B9:DE:D0:34:16:BF:65
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:bb:e3:04:9c:f9:92:e1:ae:f2:63:dc:5c:61:be:f9:50:
d1:71:a5:09:f9:fa:cf:06:5e:b3:14:98:82:86:43:e5:fa:10:
90:71:7b:85:db:38:4e:bb:cf:8f:96:4c:33:c4:19:e6:58:a4:
8a:bd:9d:c5:ec:ae:3a:fa:04:08:0f:e0:9a:94:3c:b7:ba:50:
f9:ee:3e:4f:b9:9f:93:5f:f8:31:b5:f7:37:2e:ee:4d:fa:74:
60:ca:ac:a8:9a:cd:57:29:30:16:31:e1:54:be:93:0a:c9:c5:
5a:4e:08:e2:68:5d:8d:ea:36:da:7a:86:4a:37:18:30:93:be:
86:ec:83:16:43:cf:61:87:6a:ec:68:86:37:81:e9:c3:2f:05:
ab:63:ee:10:fe:d6:7c:cc:44:f6:e0:41:ae:0c:68:b1:b5:d4:
4e:93:8d:cc:77:1a:a3:60:38:2b:e8:cb:73:db:ca:ce:ca:88:
03:0b:1f:28:6e:62:86:96:e3:3c:15:8e:e8:65:00:4e:f9:e7:
27:71:0d:fe:8e:ee:85:a2:a0:c4:da:ec:ff:d5:26:f3:fb:71:
30:2c:13:2f:43:f7:2d:c3:6a:08:9e:e5:48:71:66:55:29:5f:
9e:75:80:71:e7:10:2c:30:55:cf:60:c1:1e:3c:e7:88:e8:aa:
e5:19:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:20 2026 by rpki-client