Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: FozRmR5wyi5uHruG3Vz0cEWExVq5mMcPSTEKD2mUT7E=
Subject key identifier: 83:F5:CF:DA:54:2F:BE:C9:CF:CA:E1:09:9C:65:31:F0:BC:89:BA:B9
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019EBE7ED6600317732F39BD7486B2D504E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 01:00:43 +0000
Manifest this update: Sat 13 Jun 2026 01:00:43 +0000
Manifest next update: Sun 14 Jun 2026 01:00:43 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: 3Zc7kr1LGOel1sbUMjYCrnAt2FcgdfRlwMeEkOmQKY4=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:d6:60:03:17:73:2f:39:bd:74:86:b2:d5:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Jun 13 01:00:43 2026 GMT
Not After : Jun 14 01:00:43 2026 GMT
Subject: CN=83f5cfda542fbec9cfcae1099c6531f0bc89bab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:a2:82:0f:9e:1c:51:bb:61:54:9f:29:59:
f5:7d:3e:38:f3:47:a1:89:8c:a7:ea:fe:d3:26:42:
62:66:7c:d6:bd:7f:76:d8:1b:b2:85:ad:a9:fb:ab:
55:2b:c1:09:b2:7f:f3:14:ed:9c:3c:9b:3b:77:94:
8f:2e:87:e4:72:84:bd:60:ba:55:83:28:4d:a3:c2:
e0:6d:bc:76:ac:72:84:b7:e8:77:c5:00:69:4c:b1:
de:26:d4:fd:16:e6:8f:3a:65:8f:b5:a2:1b:c6:94:
ab:6a:cf:c8:bd:77:e5:a3:3f:53:aa:49:2d:12:2e:
1c:16:0c:15:39:8d:47:e5:26:67:75:30:8b:29:9b:
2d:95:32:94:68:2d:3a:59:06:d2:0d:73:6f:24:e2:
39:bf:d4:a0:bb:fc:ff:00:1e:5c:be:8b:56:f7:1a:
15:5e:1e:84:45:1a:9c:8d:cb:6b:04:40:fb:ab:cc:
38:68:c2:91:88:93:8c:c0:39:9c:3d:a9:9d:b9:19:
95:7f:20:b2:68:8e:48:e1:06:7b:99:0d:24:6e:81:
43:bf:d7:85:da:6f:f4:8e:c9:56:6a:5b:17:96:24:
8c:07:17:37:bb:9c:24:92:f4:00:59:63:86:41:5b:
55:3f:bf:6f:46:f1:90:dc:5d:12:5d:9c:2f:2e:91:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:CF:DA:54:2F:BE:C9:CF:CA:E1:09:9C:65:31:F0:BC:89:BA:B9
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:87:69:f3:e1:ce:cb:83:18:53:d1:9f:44:b5:83:f4:2d:f7:
41:8a:d4:af:ef:bf:fd:79:f0:af:d6:24:30:c8:d1:56:fa:64:
a3:3f:d1:96:af:c6:5d:0f:06:dd:5b:e1:16:3b:37:c1:26:67:
59:ce:97:d7:a9:69:ea:8d:28:e5:9d:db:96:9b:56:75:9e:c6:
38:56:9f:fd:da:52:3e:cc:9a:9f:7c:83:f0:d2:2a:8e:e8:71:
b8:25:33:84:31:7a:bc:e1:78:e8:c3:32:f3:76:22:d6:06:7d:
37:eb:c0:7c:91:0d:2a:48:46:c3:1b:9a:62:4e:f3:80:9d:86:
fa:53:fe:0e:0a:f1:82:b3:90:23:d3:ac:56:1d:89:23:c1:d5:
96:58:1e:c4:72:84:5c:10:92:92:ce:bc:d2:e9:82:31:b5:f5:
b5:be:44:0a:5e:a0:fd:95:01:44:f6:ad:52:4a:3c:d8:fa:94:
82:a9:26:ab:d6:5c:ed:06:7d:72:24:95:fc:ab:da:37:59:a3:
8d:6d:1b:16:30:31:c5:3f:c2:44:16:48:66:55:2f:20:3a:ed:
cf:19:4b:e5:e6:76:86:36:3d:60:84:27:83:63:2b:da:2d:52:
36:00:d2:06:ef:15:78:dc:1e:46:c0:5d:58:23:fe:b5:5f:dd:
c6:59:15:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ftZgAxdzLzm9dIay1QTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj
YjViMGYwHhcNMjYwNjEzMDEwMDQzWhcNMjYwNjE0MDEwMDQzWjAzMTEwLwYDVQQD
Eyg4M2Y1Y2ZkYTU0MmZiZWM5Y2ZjYWUxMDk5YzY1MzFmMGJjODliYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Sigg+eHFG7YVSfKVn1fT4480eh
iYyn6v7TJkJiZnzWvX922Buyha2p+6tVK8EJsn/zFO2cPJs7d5SPLofkcoS9YLpV
gyhNo8Lgbbx2rHKEt+h3xQBpTLHeJtT9FuaPOmWPtaIbxpSras/IvXfloz9Tqkkt
Ei4cFgwVOY1H5SZndTCLKZstlTKUaC06WQbSDXNvJOI5v9Sgu/z/AB5cvotW9xoV
Xh6ERRqcjctrBED7q8w4aMKRiJOMwDmcPamduRmVfyCyaI5I4QZ7mQ0kboFDv9eF
2m/0jslWalsXliSMBxc3u5wkkvQAWWOGQVtVP79vRvGQ3F0SXZwvLpH95QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP1z9pUL77Jz8rhCZxlMfC8ibq5MB8GA1UdIwQY
MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct
MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi
LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjodp8+HO
y4MYU9GfRLWD9C33QYrUr++//Xnwr9YkMMjRVvpkoz/Rlq/GXQ8G3VvhFjs3wSZn
Wc6X16lp6o0o5Z3blptWdZ7GOFaf/dpSPsyan3yD8NIqjuhxuCUzhDF6vOF46MMy
83Yi1gZ9N+vAfJENKkhGwxuaYk7zgJ2G+lP+DgrxgrOQI9OsVh2JI8HVllgexHKE
XBCSks680umCMbX1tb5ECl6g/ZUBRPatUko82PqUgqkmq9Zc7QZ9ciSV/KvaN1mj
jW0bFjAxxT/CRBZIZlUvIDrtzxlL5eZ2hjY9YIQng2Mr2i1SNgDSBu8VeNweRsBd
WCP+tV/dxlkVwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:27 2026 by rpki-client