Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: v70s5nwGMABwtqqAopRGNMCFg0kbgzQi4bMWDYU8KmU=
Subject key identifier: CC:10:B3:79:3E:65:B8:DE:29:88:F4:9A:77:63:43:5B:4D:3B:62:2B
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019EB733214A9A97D799A74B9B5854047960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 01FD
Signing time: Thu 11 Jun 2026 15:00:41 +0000
Manifest this update: Thu 11 Jun 2026 15:00:41 +0000
Manifest next update: Fri 12 Jun 2026 15:00:41 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: pxtDBCzPIapomJ9hNWsTNaebjEn2W2TisgMMitINlEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:21:4a:9a:97:d7:99:a7:4b:9b:58:54:04:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Jun 11 15:00:41 2026 GMT
Not After : Jun 12 15:00:41 2026 GMT
Subject: CN=cc10b3793e65b8de2988f49a7763435b4d3b622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:95:82:d3:a5:5f:cb:3a:f8:9f:07:05:a2:
47:51:db:4e:df:ae:71:21:64:8c:a4:a0:5b:0d:19:
ec:49:97:27:83:48:64:72:4b:be:cd:84:fa:9c:09:
c3:80:a6:67:1b:33:6a:88:7e:53:44:bb:dc:f3:91:
86:8c:73:b8:9b:f1:e7:45:2a:07:6c:c0:7e:fe:24:
07:52:7d:09:1c:03:6e:11:c1:1d:27:2e:c2:08:c7:
5a:3d:29:de:60:6e:21:28:d3:7f:a8:3e:db:d8:47:
06:da:eb:87:c5:7b:93:07:9e:86:8c:5e:5b:f1:36:
82:20:36:dd:5e:50:79:7b:26:3a:ac:9c:3e:5e:88:
c7:51:eb:05:68:9e:a4:3a:a5:d7:0b:60:25:87:15:
7a:87:a3:fb:0e:c8:d9:79:a9:b9:cd:92:8d:b3:03:
52:ad:e4:5c:80:db:8a:2a:6e:df:dc:25:fa:b7:1d:
48:46:6b:8f:ec:fd:4d:f4:93:63:f2:74:95:d8:d9:
97:af:fe:04:26:32:ab:70:0a:b1:f1:9f:94:78:78:
46:82:fb:ed:03:4f:44:e9:d5:f4:e4:32:45:8d:a4:
10:17:5a:40:11:c6:9f:b8:ad:0b:23:db:f4:7b:1b:
f1:cb:61:71:06:fd:f3:30:4c:6b:72:12:59:0b:08:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:B3:79:3E:65:B8:DE:29:88:F4:9A:77:63:43:5B:4D:3B:62:2B
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:34:70:d4:e1:93:df:3a:94:5c:09:9b:a5:cf:9f:75:5f:64:
49:50:cd:e4:d4:3d:01:97:ed:bf:21:6b:62:ab:e5:74:93:39:
55:e8:18:51:f9:0a:84:85:1c:7d:48:14:32:ae:ff:7c:24:56:
ee:f9:18:3c:ab:42:ef:21:c6:e6:51:99:e7:65:91:dc:83:38:
73:40:74:4f:3b:dd:a2:ab:fa:d2:5d:64:84:56:af:c7:e3:4b:
26:44:7d:ae:0f:80:65:61:69:1c:79:6f:bc:b8:db:63:b4:f5:
3e:92:1b:53:12:a3:0d:98:48:a6:61:30:a2:00:17:9c:02:be:
bd:53:f2:8e:b8:30:04:c8:61:84:8c:2a:cb:4d:a5:d3:75:e6:
1d:5f:c2:8c:29:eb:ad:36:10:b4:02:39:01:9c:e8:c7:7d:c8:
ac:9a:aa:2e:8b:fe:71:0b:45:60:94:ab:ad:6d:7a:7f:8c:f9:
14:0e:01:3e:ae:2f:88:50:89:3d:a3:37:27:76:e8:4e:5d:1a:
29:78:27:44:55:f6:ed:de:1d:b2:4f:59:3f:e3:de:3d:fa:be:
cb:36:8b:7c:3a:81:c7:19:6e:d8:e9:ef:33:9d:84:be:e6:f5:
2a:f8:47:fe:a0:65:cf:0c:9c:69:be:4e:00:e5:b3:22:c3:b9:
49:93:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:54 2026 by rpki-client