Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: 88d++ifrbo9yrxLrBKMG2yVqlh8JWumbVgL8hBwrFs8=
Subject key identifier: FE:45:37:D9:D8:07:B5:FE:45:1E:8A:16:30:99:38:4B:0C:B3:00:A6
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019EC224EAE634A4279C56336A7429A534BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0581
Signing time: Sat 13 Jun 2026 18:00:59 +0000
Manifest this update: Sat 13 Jun 2026 18:00:59 +0000
Manifest next update: Sun 14 Jun 2026 18:00:59 +0000
Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: Bp67qFh4QkKus19SK90Y4a38gaTOQBJ446CyY8oYndU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:ea:e6:34:a4:27:9c:56:33:6a:74:29:a5:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Jun 13 18:00:59 2026 GMT
Not After : Jun 14 18:00:59 2026 GMT
Subject: CN=fe4537d9d807b5fe451e8a163099384b0cb300a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:f8:ec:d6:53:8a:22:8c:7f:cf:e6:5c:c5:
ad:ed:00:ff:77:f3:8d:6b:1b:1b:6c:53:70:b2:0a:
3b:3c:8a:d5:29:5f:45:b6:3d:f3:dd:05:df:65:b5:
12:d9:0b:da:ed:1a:36:d8:44:88:a7:a9:4f:b9:e9:
84:1f:c9:8e:7d:00:cc:da:cb:3e:ba:d0:53:8d:1d:
d3:75:a0:3a:f8:ef:ac:71:e7:2c:fb:ce:63:0a:3e:
ee:57:92:1a:33:f4:66:4d:62:67:58:a0:e2:68:a5:
f7:5a:72:45:76:a5:8e:8f:f7:7e:01:99:7a:b4:6a:
05:d2:f5:69:43:65:74:a6:8b:7f:05:e2:01:04:2f:
01:48:cc:18:5e:93:b6:fb:96:25:b2:d5:28:4f:fb:
20:3b:07:4c:b4:0c:24:3a:09:b7:a5:2d:83:0a:33:
8e:75:78:7f:a9:41:62:00:97:7f:f0:19:83:bf:55:
f1:77:b6:8a:3c:c3:a6:61:bc:28:58:cb:9c:73:3f:
86:5a:98:a4:cd:dc:ea:69:05:c5:a8:39:27:69:05:
a1:92:19:c4:98:14:48:ff:39:fd:71:48:e6:7c:3e:
29:07:4e:fe:11:d4:1f:f0:4c:c2:8e:dc:f2:ed:15:
8e:3c:53:5b:50:47:5f:02:46:d4:1d:8e:50:cd:25:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:37:D9:D8:07:B5:FE:45:1E:8A:16:30:99:38:4B:0C:B3:00:A6
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:08:dc:59:dc:b1:90:1a:8f:35:57:5e:56:8d:65:90:4a:d3:
b3:e4:ab:f5:53:ee:ec:a7:c9:ed:ab:88:d0:d0:d3:a7:d1:e4:
f8:93:8d:0f:07:15:0c:80:b9:54:9e:7c:d8:90:a0:87:1c:5d:
83:f3:4f:24:b1:c9:6e:42:38:39:eb:3d:bf:a3:b7:aa:27:a3:
0d:ac:97:6a:f2:d5:45:e6:0e:65:3e:b7:9c:7d:46:29:a1:94:
83:f2:96:a4:77:15:c3:ba:5a:98:a9:6b:7c:76:fe:45:db:5b:
ee:37:ab:88:14:06:55:bf:7f:60:a2:53:4c:a8:e2:ea:58:39:
c7:ba:58:4c:cf:bc:21:16:93:4d:d7:37:97:25:c0:f5:40:dc:
8d:bc:99:70:bf:3b:f8:36:52:d2:0f:3f:c5:44:f8:b2:5f:f7:
4a:dc:7f:1f:ed:23:89:42:d5:e0:f9:3f:59:b4:52:76:ff:f2:
46:f9:c1:86:aa:2f:50:bf:77:91:d3:ae:84:94:63:8d:42:b1:
82:fb:b6:61:0d:c2:74:48:b6:82:fe:e9:24:65:c1:40:4e:5d:
76:de:51:08:c7:97:b7:34:62:b3:aa:ae:58:f6:f8:66:fe:a0:
45:8f:e5:cd:a9:f6:b5:14:71:23:f3:31:fb:1c:fa:9a:97:ca:
af:f7:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:01 2026 by rpki-client