Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: PEdVs/91wL41doGy0S1rUkeuoecFGCkXQpiwNJXLpqA=
Subject key identifier: 23:D1:6F:EE:70:CC:1C:F5:18:A8:B5:88:2D:D9:7B:32:BE:CF:B4:8E
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019EBF918521368EB34DFAB769FDC06580C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 106F
Signing time: Sat 13 Jun 2026 06:00:45 +0000
Manifest this update: Sat 13 Jun 2026 06:00:45 +0000
Manifest next update: Sun 14 Jun 2026 06:00:45 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: IsI+OODpg1hs/nZ6e8125C4ddkoyuNoV3cSsGJbxfRI=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (hash: 2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:85:21:36:8e:b3:4d:fa:b7:69:fd:c0:65:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jun 13 06:00:45 2026 GMT
Not After : Jun 14 06:00:45 2026 GMT
Subject: CN=23d16fee70cc1cf518a8b5882dd97b32becfb48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:68:71:c8:bb:cb:20:3e:bf:79:16:d8:31:
35:1d:b7:4d:0b:a7:3e:cf:07:fc:ed:15:c9:e0:be:
e2:2c:d2:1a:b4:81:93:51:9e:20:af:cb:44:9b:ea:
e5:6b:1c:37:3e:3e:26:68:28:77:48:55:0e:3a:a5:
44:f4:44:36:67:a2:01:14:77:0a:19:7f:b6:00:99:
6b:af:91:b8:58:2b:17:aa:ab:06:d3:4e:87:28:cb:
de:5c:26:9b:05:09:e9:ca:82:8d:07:bd:44:02:e8:
51:d2:f6:b1:d8:99:77:90:98:9c:2f:6d:06:5a:ca:
9c:5f:2d:77:81:d2:1d:69:55:d1:1e:0a:b5:83:3c:
60:09:a1:57:73:e8:be:79:7b:85:0d:1f:00:25:da:
86:84:22:ef:19:2e:8a:c7:e2:e7:ea:e9:3f:66:95:
41:d2:d8:5f:3a:74:fd:01:e2:f9:22:60:fe:c2:cd:
b2:dc:6f:0b:af:a2:72:82:8e:5f:d9:49:c6:30:8f:
38:a6:50:ab:3f:0b:db:16:0c:c7:b7:ed:99:a3:79:
dd:ec:32:3b:c9:13:f7:bf:34:aa:41:9d:1b:ed:06:
1f:29:f7:ff:ef:71:c6:2a:01:fa:73:39:f1:1f:d9:
da:87:58:de:83:24:23:c2:ba:9a:e7:65:6a:ca:df:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:6F:EE:70:CC:1C:F5:18:A8:B5:88:2D:D9:7B:32:BE:CF:B4:8E
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:ea:a6:e2:29:ac:5d:63:68:1b:54:97:2c:57:14:f3:4f:
82:dc:25:21:60:c6:7f:86:a6:82:ba:3a:41:26:81:f7:5f:9a:
b3:b6:5c:aa:ce:dd:e7:93:76:a3:d5:0f:66:c5:09:de:be:97:
de:b9:ad:b8:ae:43:67:00:87:91:ee:19:76:ab:90:b6:04:7f:
91:f2:0f:d6:26:ad:f7:34:1e:c3:4f:a7:39:58:c3:f0:69:3a:
2c:cf:7d:a3:76:df:cc:8b:fc:98:1a:a0:35:7e:9d:4b:3d:0f:
e0:1a:e2:6d:f8:e0:45:d6:f5:27:fa:ff:da:5b:76:f1:71:b7:
45:bf:35:f1:35:4f:46:83:aa:13:73:dc:eb:b0:2c:c9:a9:9c:
b7:dc:b5:f3:5c:69:0d:cf:4b:f9:86:2c:e5:d4:4f:e9:72:c6:
8d:0f:13:50:c9:a0:d3:f3:76:02:48:04:18:49:9c:04:82:ac:
37:b8:ad:91:1f:14:d3:61:6c:ca:b8:88:8e:b8:a8:3a:ea:bd:
ca:38:9f:b0:f5:3b:de:cc:b1:f5:a0:b0:4d:2c:22:7c:dd:74:
ac:e0:7c:46:fc:16:57:f6:9d:25:99:66:12:e9:0c:6e:2b:90:
f7:01:72:76:22:c2:3c:48:3c:06:0b:43:17:df:b9:bb:c9:27:
4c:44:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:58 2026 by rpki-client