Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: b+BGoxqNuLhxEX0Ck+G8dqMCF6eAkkhWCxoIRq+TDto=
Subject key identifier: 54:AC:68:7A:21:07:0F:34:25:E0:61:A8:CF:39:AB:F1:B3:CC:73:6B
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019EBFC8B793C8B4E13D09F432DF57AB9AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 158E
Signing time: Sat 13 Jun 2026 07:01:02 +0000
Manifest this update: Sat 13 Jun 2026 07:01:02 +0000
Manifest next update: Sun 14 Jun 2026 07:01:02 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: F5m95KnC9W65w3c5guZq8vcU7fPag1nUhpSFaRiguZ8=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:b7:93:c8:b4:e1:3d:09:f4:32:df:57:ab:9a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jun 13 07:01:02 2026 GMT
Not After : Jun 14 07:01:02 2026 GMT
Subject: CN=54ac687a21070f3425e061a8cf39abf1b3cc736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:2d:26:75:be:ee:ff:ea:a2:91:5e:d5:2c:
3d:8f:fb:14:5a:a5:fc:85:b2:90:4e:9d:06:18:09:
9a:61:03:bd:f7:5f:f3:bc:a8:75:d3:fc:84:01:04:
cd:da:22:33:41:ed:6a:bc:ee:6d:c4:f1:ef:6a:1f:
43:15:05:05:8a:41:51:d5:48:5d:ea:1c:70:57:63:
cf:70:b6:8a:cb:bf:6a:57:7a:97:5b:ff:37:48:71:
b6:0f:28:48:f6:ca:c0:3b:bc:a9:ca:d9:eb:96:1d:
16:1c:df:94:0b:aa:a0:c9:c0:13:57:69:50:b5:54:
9c:51:ce:b1:b5:3a:ef:11:27:a4:f2:8a:5c:43:00:
3c:d8:e1:95:e2:df:33:12:07:de:35:3a:5d:ad:0f:
71:54:e2:e2:12:72:b3:6e:8f:a3:ec:18:ad:79:c1:
3e:de:13:59:b2:5e:7f:1c:8c:99:e5:d0:de:ce:7c:
86:bd:e0:61:c0:93:7b:7d:4e:5b:14:61:f1:e9:48:
4f:63:10:44:73:e7:0e:4c:d4:b2:d5:45:e8:9c:28:
19:76:a3:a2:4a:83:74:72:cf:8c:59:fc:a8:11:50:
85:4a:54:15:55:c1:c0:91:91:8c:7c:0c:5b:48:d3:
d1:51:5e:e2:75:ee:a0:d1:91:06:ea:fc:91:21:f2:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AC:68:7A:21:07:0F:34:25:E0:61:A8:CF:39:AB:F1:B3:CC:73:6B
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d7:14:06:aa:f7:30:19:b8:83:8c:b4:25:f5:c3:74:bd:72:
61:c4:a7:8c:18:86:ce:44:91:e3:38:d2:94:fc:d8:5c:7b:51:
e4:0b:91:cc:1c:51:37:f9:40:bd:d5:ca:b7:60:0a:d3:25:7e:
ac:3d:1f:57:16:08:73:10:9f:dd:77:2b:56:3d:04:cf:27:1b:
e3:f8:24:d6:f6:15:de:7d:90:b5:90:c2:d1:ff:2e:b8:50:30:
24:a2:2f:de:c0:36:94:73:4c:7b:6e:d5:9d:e7:5b:17:5a:8c:
5f:7b:3a:12:56:77:82:d6:a7:b9:78:ac:fc:69:b2:d2:0b:6e:
a0:2e:cb:a9:0b:fa:a2:1d:18:f8:2c:96:b5:e9:1b:71:ab:5b:
c4:40:67:24:f2:18:b1:bd:9f:f1:24:80:cc:b4:fa:c9:02:e4:
08:61:9f:5b:b2:3d:50:01:ed:c1:71:ab:21:bb:f7:9f:e3:7b:
bb:84:3f:81:5a:11:b4:90:55:a9:7a:65:e5:e7:2b:80:f7:41:
b7:1d:bc:ad:18:a3:62:74:dc:08:fc:87:d9:51:0f:6c:10:bc:
21:c0:15:ce:5a:28:9c:30:83:5d:ab:fc:e6:a7:c3:13:94:b4:
73:d9:4d:cb:bf:2a:5b:5e:4f:e6:a6:f1:14:33:68:18:58:d7:
65:72:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:27 2026 by rpki-client