Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: FtuKdu0lGAjn1mbb7v1j27NTU6POV36I9tC8ONtCWtg=
Subject key identifier: 48:F3:03:8D:EB:20:73:FC:BF:D0:EB:5F:42:0C:C4:F2:F2:C9:77:0B
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019EC300D76F8B34A765DBE79D2EAAE316D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 0120
Signing time: Sat 13 Jun 2026 22:01:12 +0000
Manifest this update: Sat 13 Jun 2026 22:01:12 +0000
Manifest next update: Sun 14 Jun 2026 22:01:12 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: P3htLm2f6Rj32wwRcff5gGMT3xuA/EJJRI7ISPFur8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:d7:6f:8b:34:a7:65:db:e7:9d:2e:aa:e3:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Jun 13 22:01:12 2026 GMT
Not After : Jun 14 22:01:12 2026 GMT
Subject: CN=48f3038deb2073fcbfd0eb5f420cc4f2f2c9770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:40:02:f2:42:80:fe:61:8d:ab:d6:a6:63:
e4:c4:b5:5a:1a:ae:5f:7e:05:c9:13:a1:d1:82:97:
02:41:d4:2c:ba:c2:83:7a:b4:ae:08:d0:2a:33:aa:
33:01:1c:7e:85:03:b1:88:8c:5b:11:89:3b:e5:f4:
82:e6:b5:d8:cd:fa:ee:04:6f:f5:a7:2b:77:2d:93:
8b:be:8b:2a:46:55:d4:c7:a9:30:bb:32:15:01:84:
ac:00:dc:97:eb:2d:9d:ab:a9:8a:a3:ec:70:e9:ad:
bc:72:e2:af:7e:24:ae:33:8c:58:a3:79:59:d4:b8:
14:2f:d3:02:98:a0:1d:a9:da:0c:05:35:c2:6d:9c:
ac:70:d1:99:72:2f:8e:dd:84:3d:71:07:56:3c:db:
77:25:e9:8f:41:3c:bb:0b:09:3c:d8:bb:a3:59:de:
1d:d0:33:cf:65:4c:c3:22:5b:40:8f:83:b3:f6:67:
7a:71:02:0c:74:69:25:0d:ad:ec:7f:c1:88:a8:bd:
56:cf:85:4d:15:97:7f:ed:ae:cb:9a:20:c4:a0:e8:
61:70:85:62:67:db:c0:fb:9d:bc:0b:20:f8:06:d4:
e0:79:93:76:b7:67:ab:7a:b9:d5:35:66:bc:97:45:
26:6b:16:5d:5c:30:99:01:99:4e:6d:60:e5:30:74:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:03:8D:EB:20:73:FC:BF:D0:EB:5F:42:0C:C4:F2:F2:C9:77:0B
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:27:07:d2:47:30:05:6a:f1:3a:00:89:f5:68:fc:2e:65:5a:
ce:85:f2:9a:0a:b2:f9:72:d6:1c:f2:b2:67:00:c8:94:0e:5f:
79:6c:9d:37:d3:03:34:77:9b:c2:7c:4a:a7:62:02:4a:a0:5d:
53:15:65:c8:87:d8:53:22:35:bc:03:e7:e6:5f:81:74:c6:31:
ac:ba:8d:b3:42:f5:88:f5:53:e7:4a:38:6c:d0:e9:da:14:bd:
f3:93:80:b2:8d:e5:c9:05:0b:20:1d:f1:9a:3e:01:2a:4a:f7:
80:b7:b8:46:66:8f:11:ad:56:49:ae:4a:aa:6f:c0:55:48:68:
bd:70:6d:fe:0f:91:14:59:e2:1b:f1:f1:94:07:59:f8:db:0c:
b0:99:7f:9c:b9:66:48:21:80:3f:23:7b:4d:48:9c:26:14:ad:
1b:ba:a8:62:35:a4:41:5d:23:81:8d:f2:99:79:77:b0:cf:cc:
3b:69:92:13:87:fd:09:23:d0:6f:1b:f3:a0:5a:b6:0a:df:a4:
6c:48:62:86:86:7a:a6:35:d0:b1:c9:14:9a:96:a9:e5:93:a5:
62:42:0d:f8:04:4c:52:6a:33:32:93:1f:ce:4f:d8:71:e4:ae:
7a:a5:7c:ac:f5:c7:4e:33:3c:dd:4c:61:35:38:ad:db:d5:63:
e7:05:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:32:40 2026 by rpki-client