Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
File: OAonDZR7c0BD17LSUhTx3DDwEd8.mft (raw, json)
Hash identifier: RZke1geXFUll/qgeFqAVv0vNc+/CyuoC5J2tY6f5gkY=
Subject key identifier: 16:61:23:D8:B6:1F:CA:10:AD:62:4F:9F:73:20:FC:21:C5:B6:3D:B1
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019EBFC85EA0B6057DEFB2284F6F699E98F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
Manifest number: 015B
Signing time: Sat 13 Jun 2026 07:00:40 +0000
Manifest this update: Sat 13 Jun 2026 07:00:40 +0000
Manifest next update: Sun 14 Jun 2026 07:00:40 +0000
Files and hashes: 1: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (hash: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=)
2: OAonDZR7c0BD17LSUhTx3DDwEd8.crl (hash: vsEUJdj005LSBkumRD/SSr5gn1kaGnysAXS7lj9m2jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:5e:a0:b6:05:7d:ef:b2:28:4f:6f:69:9e:98:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: Jun 13 07:00:40 2026 GMT
Not After : Jun 14 07:00:40 2026 GMT
Subject: CN=166123d8b61fca10ad624f9f7320fc21c5b63db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:73:3a:a7:5e:3c:3d:b9:97:6b:87:88:9d:
20:7e:3f:20:8f:a7:15:d6:44:e9:f7:10:10:87:6f:
f2:c2:85:b8:57:67:e4:bc:da:77:5f:68:03:30:56:
d8:cf:a0:45:54:69:2e:ef:79:2d:a8:a2:2e:af:5f:
d8:83:b8:d9:b3:0b:c3:ec:93:f7:42:47:f0:1f:5a:
98:2c:80:8e:2d:50:24:ba:ba:d8:24:57:4d:40:f8:
8c:bb:f0:4e:bb:98:f3:2e:31:32:98:5d:f6:92:7b:
d6:a2:42:0a:12:47:6e:b7:4e:24:6a:fe:d3:3a:4c:
fa:20:80:4b:12:e1:ee:31:ec:32:d1:6c:d4:8a:8b:
fc:77:5c:fd:f6:7a:67:90:54:ab:e4:1b:f7:cf:72:
e4:82:84:d1:b9:c9:af:8e:09:b2:82:a7:62:f6:7c:
ec:69:b0:f2:9b:e5:77:e7:10:e8:f4:41:7d:47:08:
c7:ce:2d:f3:27:cb:6b:68:6f:f3:4b:7a:d1:16:de:
4c:7e:65:e9:7f:a5:7f:64:43:82:7b:d4:91:4d:3e:
13:55:ee:6b:a2:be:09:1f:ea:1b:7b:f0:91:04:63:
04:16:28:30:1e:94:d3:62:fe:96:f6:61:8a:fa:66:
e3:22:45:0a:ab:06:57:0c:87:45:52:c8:a5:10:f4:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:23:D8:B6:1F:CA:10:AD:62:4F:9F:73:20:FC:21:C5:B6:3D:B1
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f2:cd:b7:9e:09:c0:f6:8e:48:c4:10:ed:c6:c7:8c:b1:18:
4c:73:2a:00:44:72:ea:c1:1f:19:4f:70:5d:60:3c:cb:b5:f4:
f2:02:dd:27:f5:00:d8:ba:5c:aa:a5:14:7f:65:7a:c9:fe:a2:
1a:c3:f4:1a:07:5a:30:ae:a2:26:c1:0a:1f:53:be:04:bf:d2:
de:af:34:8f:96:75:cf:19:1c:73:ea:38:0e:c5:0a:67:4d:bb:
ea:77:30:5b:84:65:bc:72:6e:cd:03:69:eb:f1:e9:d6:ef:5c:
fa:0e:79:39:6b:33:52:bb:6b:9c:7d:c3:71:93:4c:c5:0c:44:
ce:80:95:c4:f7:d3:8b:ba:7b:78:66:1b:2d:dd:61:f5:a7:64:
77:39:cf:5f:35:55:17:2b:7b:7c:93:75:50:f2:cf:4c:7a:84:
ce:a6:4c:d3:22:36:4c:f2:5e:58:cb:d1:50:1c:71:d4:28:55:
4c:b9:cc:df:41:cf:49:14:e4:09:58:17:41:b1:2a:60:a4:1b:
8e:0b:7d:8c:f9:ba:77:08:4d:97:ef:2f:e5:25:2a:54:5e:44:
4e:4e:ea:a2:0d:16:3e:c8:75:55:d4:d6:de:dc:5b:86:73:25:
64:15:9d:69:ea:03:61:3b:86:bb:8e:24:d7:dc:5c:2b:b0:67:
a9:00:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:32 2026 by rpki-client