Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: bMCLtL+0iIZ18jLBLgcCtaCgBQmmOwTbSMO6bVFWNL0=
Subject key identifier: 27:46:95:9E:64:5D:44:F7:A6:DA:C3:76:B3:AA:AD:60:AF:F0:FF:17
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 019EB733F607B65E1BC8C6C040A1FF843E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 15:01:36 +0000
Manifest this update: Thu 11 Jun 2026 15:01:36 +0000
Manifest next update: Fri 12 Jun 2026 15:01:36 +0000
Files and hashes: 1: dqDFD25-lBr1H4kU-f-eIMyH1ao.roa (hash: aZMJNfpwSLS2DvVJl8WR74MQgSeC0Vd4cP1ssZtEpxQ=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: vyrKtuV3rcBz8DNi7NHUhc6n/lbPR6FRvroLErGK0qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:f6:07:b6:5e:1b:c8:c6:c0:40:a1:ff:84:3e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Jun 11 15:01:36 2026 GMT
Not After : Jun 12 15:01:36 2026 GMT
Subject: CN=2746959e645d44f7a6dac376b3aaad60aff0ff17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:45:e7:90:6e:6e:86:27:89:30:80:71:8a:
a4:22:69:4f:15:09:6f:f4:d8:0a:64:8a:39:89:88:
db:db:88:2d:c2:94:28:3d:73:66:11:16:98:76:99:
4d:42:35:dd:43:d1:50:ce:b0:7a:c7:a6:36:44:3c:
43:95:04:de:0d:f0:d1:0b:e8:58:03:38:ec:f9:be:
fa:48:72:08:da:43:31:7d:63:d7:1b:40:bc:1a:33:
72:84:2a:3d:76:d1:1b:fc:66:2d:c0:be:f5:f7:fd:
18:11:c5:dc:da:76:e0:35:57:ae:ab:c2:92:c3:db:
5b:bb:db:5c:2d:2d:19:a9:34:b4:65:a5:96:14:0b:
5c:0d:3d:75:81:09:e9:cb:50:11:74:4f:f5:af:80:
97:c6:80:ad:c6:e9:67:2d:98:68:61:59:95:18:a7:
ef:5a:fc:63:ad:1a:20:0c:bf:ee:40:ac:3c:c9:8f:
aa:63:62:a3:7d:cf:ae:f4:94:9b:f1:2a:73:c6:b3:
d9:06:2c:23:a5:ad:bc:4c:d6:11:77:ff:bf:31:a5:
53:bf:f7:9a:bb:b4:c2:51:c7:ce:52:f3:e9:2a:d3:
26:06:d3:4e:90:14:98:c8:88:c8:3a:65:ef:35:18:
41:91:ff:dc:01:e1:e4:35:bc:ac:c1:7a:86:a3:4d:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:95:9E:64:5D:44:F7:A6:DA:C3:76:B3:AA:AD:60:AF:F0:FF:17
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ea:49:a2:db:ce:e7:35:8b:bf:c0:3b:ff:02:96:17:27:82:
37:7c:26:7b:5c:37:e7:ab:64:4a:df:8b:24:b1:7a:bc:ee:48:
0a:8d:ab:50:eb:27:90:8b:48:72:ea:53:ab:48:16:6d:76:f4:
7c:89:c1:e7:38:48:35:42:31:f6:22:ac:2d:e1:3d:8e:bf:14:
ff:32:12:a2:b6:da:ee:0f:5e:33:5f:a2:0b:d4:f0:d7:9f:8c:
2f:40:1c:b3:76:74:09:f7:ae:89:ce:9a:f8:67:a7:fc:18:3a:
e2:34:c6:25:8b:ed:d7:8e:08:99:6b:08:e9:f6:60:d2:2a:4c:
0e:a2:34:e9:57:bf:42:26:fe:b2:25:40:17:84:da:ea:e8:fe:
c0:62:86:8d:b4:4a:83:b2:24:92:8c:bc:6a:5e:99:66:a2:00:
ef:88:9b:0b:c6:00:8c:90:6d:94:03:c3:16:c5:9a:36:fb:9b:
cc:61:82:e9:cb:fd:44:8e:8b:7e:e8:a7:24:0b:be:38:aa:b3:
03:ac:2b:9e:a3:ad:29:24:21:65:bb:ed:23:18:ac:c5:25:ab:
8c:4f:fa:a4:4f:44:db:61:db:f8:d2:89:07:6a:db:2b:e8:1c:
b9:cf:a6:5c:a7:5c:36:6b:dc:22:88:7e:10:14:5b:39:3e:07:
d6:46:b1:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63M/YHtl4byMbAQKH/hD5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTdkNmEyY2Y0Mjg4MGRiZWJmNDJhMzI1MTkwN2EyMWM5
MWE0YTUwHhcNMjYwNjExMTUwMTM2WhcNMjYwNjEyMTUwMTM2WjAzMTEwLwYDVQQD
EygyNzQ2OTU5ZTY0NWQ0NGY3YTZkYWMzNzZiM2FhYWQ2MGFmZjBmZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE9F55BuboYniTCAcYqkImlPFQlv
9NgKZIo5iYjb24gtwpQoPXNmERaYdplNQjXdQ9FQzrB6x6Y2RDxDlQTeDfDRC+hY
Azjs+b76SHII2kMxfWPXG0C8GjNyhCo9dtEb/GYtwL719/0YEcXc2nbgNVeuq8KS
w9tbu9tcLS0ZqTS0ZaWWFAtcDT11gQnpy1ARdE/1r4CXxoCtxulnLZhoYVmVGKfv
WvxjrRogDL/uQKw8yY+qY2Kjfc+u9JSb8SpzxrPZBiwjpa28TNYRd/+/MaVTv/ea
u7TCUcfOUvPpKtMmBtNOkBSYyIjIOmXvNRhBkf/cAeHkNbyswXqGo03ZlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdGlZ5kXUT3ptrDdrOqrWCv8P8XMB8GA1UdIwQY
MBaAFKCX1qLPQogNvr9CoyUZB6IckaSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYt
NmZjYWYyNzI5YmU1LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYtNmZjYWYyNzI5YmU1
LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOpJotvO
5zWLv8A7/wKWFyeCN3wme1w356tkSt+LJLF6vO5ICo2rUOsnkItIcupTq0gWbXb0
fInB5zhINUIx9iKsLeE9jr8U/zISorba7g9eM1+iC9Tw15+ML0Acs3Z0Cfeuic6a
+Gen/Bg64jTGJYvt144ImWsI6fZg0ipMDqI06Ve/Qib+siVAF4Ta6uj+wGKGjbRK
g7Ikkoy8al6ZZqIA74ibC8YAjJBtlAPDFsWaNvubzGGC6cv9RI6LfuinJAu+OKqz
A6wrnqOtKSQhZbvtIxisxSWrjE/6pE9E22Hb+NKJB2rbK+gcuc+mXKdcNmvcIoh+
EBRbOT4H1kaxNA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:40 2026 by rpki-client