Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: h809BkbT1wlunnKIaryymNMdbMYVb5tf8YIoPhV/smY=
Subject key identifier: A4:0D:C2:55:E2:82:A6:48:C5:23:8C:A7:9C:D3:6D:8C:23:0A:9C:A1
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019EC036A49C6F4BC6A49F73EB16BC5D19E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0E7D
Signing time: Sat 13 Jun 2026 09:01:06 +0000
Manifest this update: Sat 13 Jun 2026 09:01:06 +0000
Manifest next update: Sun 14 Jun 2026 09:01:06 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: FmR06xwT1qD5YL76l2znssMCuXpYtAeNpBaZrXYkSpQ=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:a4:9c:6f:4b:c6:a4:9f:73:eb:16:bc:5d:19:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jun 13 09:01:06 2026 GMT
Not After : Jun 14 09:01:06 2026 GMT
Subject: CN=a40dc255e282a648c5238ca79cd36d8c230a9ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:73:68:ea:10:ec:68:95:d2:b6:f3:8f:b7:
aa:ed:e5:d1:8f:34:a6:d5:b4:4a:22:64:15:22:81:
e1:29:34:55:95:62:c9:14:d9:f4:b2:cd:55:74:1f:
01:3e:b2:55:c9:3d:9e:f5:9f:91:7a:54:b2:e1:e8:
3c:53:68:c2:8b:d4:10:fd:21:e6:30:bd:39:04:5e:
95:6a:43:d5:f3:eb:03:44:f5:d1:ed:fa:5c:e7:64:
57:46:9b:15:15:bb:69:56:29:aa:f3:c4:07:2f:7f:
d4:97:72:a0:bf:8e:39:47:c2:cc:21:af:93:d6:4c:
52:25:45:26:df:f5:2a:ee:21:a8:ca:65:48:36:80:
ac:51:12:c7:03:6c:cb:9b:0b:82:79:f5:6a:f9:0b:
8f:35:59:00:d8:69:ba:84:24:63:d8:fb:28:fa:18:
2b:b7:7a:45:25:95:f1:88:97:4d:d3:d9:83:69:f2:
cb:09:f6:83:dc:ab:fe:67:0e:21:0b:96:31:fd:c2:
f6:7d:e3:5d:21:e6:c7:da:3a:ad:52:92:2c:ae:5a:
45:71:49:94:8e:b4:2f:1e:06:2b:e8:d8:9c:94:aa:
c4:6f:5c:96:69:6f:02:cb:89:ac:1e:f3:95:47:e8:
85:0f:fe:f5:71:0c:6a:6f:84:e1:18:6c:1f:82:ef:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:C2:55:E2:82:A6:48:C5:23:8C:A7:9C:D3:6D:8C:23:0A:9C:A1
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ed:54:39:f9:b4:e2:4e:e8:7b:66:f7:f5:aa:6d:c3:73:b4:
c3:18:ed:81:14:cc:83:5a:63:e2:05:a5:77:9c:32:8a:71:f1:
e4:97:20:35:13:18:e3:17:e0:a3:c1:6c:84:1b:fe:af:78:e4:
12:27:25:ac:f7:66:7e:05:1f:f7:b0:88:4f:83:4a:83:63:9f:
0a:c6:a6:c9:de:26:3a:fa:db:78:b0:ee:c8:f4:23:b2:70:08:
3e:21:f8:7e:06:e8:9d:b8:de:d8:9f:86:44:50:b5:78:a1:16:
e7:a1:c0:e2:a3:37:4f:1c:51:5d:fb:b7:30:e1:e7:d5:e7:81:
66:04:8c:23:78:27:ca:c3:d5:7a:71:85:97:bd:84:57:c4:31:
b7:ae:3e:ba:dc:4d:ec:c1:aa:8f:92:0f:34:f1:27:19:ec:1a:
e7:e5:c1:77:cb:c9:1e:67:73:cf:b0:2b:a9:12:25:1d:7f:7a:
78:32:9c:25:64:1d:37:cf:fe:ea:e5:ee:80:fb:33:fe:17:c1:
8c:4b:b4:4e:7c:cc:fe:17:2b:3d:96:5c:e5:4e:cc:16:a1:5e:
f9:d3:5e:0e:e4:d2:14:9e:4d:0c:d3:f7:5a:9d:26:06:09:59:
97:5b:8e:9b:08:0c:ea:61:c5:50:4f:af:c9:c8:e7:2c:ec:c3:
61:ab:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:26 2026 by rpki-client