Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: WkFKJknhas1iS8BJ48a+ZxNFO6a3gt6JfqeleTj0V5U=
Subject key identifier: C5:2D:3E:8B:16:CB:B5:4E:DA:26:83:59:46:7E:60:70:5E:F8:2E:62
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019FA974F6BC22880AB8EF5BDE75DDEBF14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1607
Signing time: Tue 28 Jul 2026 16:00:42 +0000
Manifest this update: Tue 28 Jul 2026 16:00:42 +0000
Manifest next update: Wed 29 Jul 2026 16:00:42 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: TsfnnGzjmNpGdVV+cigwFQIKaryzlqbi24lcodbFqgY=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:f6:bc:22:88:0a:b8:ef:5b:de:75:dd:eb:f1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jul 28 16:00:42 2026 GMT
Not After : Jul 29 16:00:42 2026 GMT
Subject: CN=c52d3e8b16cbb54eda268359467e60705ef82e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:c8:0f:cd:2a:7b:eb:ea:78:a9:2a:38:c0:
91:05:b7:61:01:b6:94:4c:5b:5b:b1:1a:98:43:cc:
15:d4:fc:88:be:22:96:34:21:47:b2:c2:9f:aa:a4:
33:be:18:23:be:ff:46:12:6e:90:2b:8d:ff:17:97:
01:3e:9a:d1:09:da:fe:8c:b0:0a:73:c6:96:ce:32:
b6:6f:44:75:28:48:8c:f0:7c:f3:65:2c:ef:7b:a7:
8f:9b:b1:2f:76:f3:34:7c:93:69:b6:85:d2:b3:2f:
a0:ee:40:66:b9:16:7c:85:f0:a9:71:e5:ae:a3:db:
15:c2:f6:d5:e1:d9:d8:92:b4:9b:19:53:08:76:6f:
27:bb:77:e8:09:aa:4c:c6:7b:bf:d3:34:ea:7b:99:
b3:30:db:36:b4:94:ab:79:d3:30:1d:99:fc:02:77:
5c:e7:83:fd:89:b6:18:e4:ca:e0:b8:ae:03:3c:ae:
3d:13:e9:18:59:f4:f5:20:76:83:4c:1b:1b:5a:2e:
5e:dd:c9:54:53:5d:c6:ee:94:1e:30:50:e4:01:12:
fb:4f:c6:2c:fc:78:5c:9e:88:79:bf:85:0b:1a:bb:
b2:87:69:51:50:59:47:6e:ce:97:39:37:39:fa:e4:
be:39:95:06:19:17:4d:0b:e5:43:3a:96:fb:68:e7:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:3E:8B:16:CB:B5:4E:DA:26:83:59:46:7E:60:70:5E:F8:2E:62
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:03:d0:43:cc:99:b4:99:72:95:ac:df:51:e5:f3:30:63:42:
0b:e3:c3:fb:7a:46:ae:f8:b7:e3:43:9a:4a:21:56:70:46:00:
7d:81:37:b2:c2:4f:12:a2:7c:d9:57:7e:d0:0e:b6:bd:94:ea:
e4:d4:ea:cb:ab:fd:1a:4a:b8:7e:75:03:4f:a8:5e:b7:72:9d:
58:a1:d2:6f:f8:96:dc:df:35:e7:b5:63:6b:5e:86:54:6c:28:
9e:7b:0f:fb:fb:86:5d:6e:ce:40:ac:9a:53:86:e0:33:9d:0d:
60:6b:21:8c:8b:de:50:21:2a:db:45:aa:99:32:ff:ed:87:8a:
d2:0a:05:80:32:1a:67:6b:21:62:94:56:df:77:75:47:3c:c4:
70:51:37:f0:2a:9e:e1:b4:70:d4:94:f2:82:a8:e7:e1:00:10:
df:83:87:a3:29:ba:3c:ac:03:db:e0:ec:09:6d:ad:24:d4:e9:
6e:4e:b4:5e:6c:ee:02:ad:4c:b7:c5:9c:30:06:11:3f:7c:83:
4f:de:bf:4c:55:6b:05:ca:7b:9a:c3:c9:7b:4f:00:f4:32:2a:
2c:2a:25:46:1f:1c:2d:bc:9b:3b:fc:92:56:3d:7d:d8:23:9d:
64:f9:c0:bb:18:64:93:06:9c:04:09:59:bb:8f:c1:0e:86:1e:
2a:e6:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:12 2026 by rpki-client