Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: giJOdj38u+NeKLsLbii1B4WItEV1UAJIRFf6yeLvvgk=
Subject key identifier: 02:3F:9B:5C:7E:BE:CD:86:5B:4D:CB:2A:82:73:D2:05:DE:76:2B:86
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019FAB6396E9E30D1B932611436241262407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1608
Signing time: Wed 29 Jul 2026 01:00:58 +0000
Manifest this update: Wed 29 Jul 2026 01:00:58 +0000
Manifest next update: Thu 30 Jul 2026 01:00:58 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: HDpnub68/aBhmGamV1I8gPQgfD5/ujwuouxV0gbQqtI=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:96:e9:e3:0d:1b:93:26:11:43:62:41:26:24:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jul 29 01:00:58 2026 GMT
Not After : Jul 30 01:00:58 2026 GMT
Subject: CN=023f9b5c7ebecd865b4dcb2a8273d205de762b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:f8:b3:85:c9:ee:bf:3c:12:6c:a3:ce:6d:
00:3e:2d:1e:3e:23:ff:67:5c:49:ac:8d:ad:cd:eb:
89:90:d8:e7:0c:a0:8d:ae:f4:6d:20:ed:9b:8e:47:
64:81:a6:f9:ea:2e:7f:82:e6:df:b5:1f:5a:ef:43:
05:d6:e1:59:6e:fb:f0:7e:c0:1b:40:97:e6:f0:ef:
8f:29:b3:4a:4e:f6:6d:4c:4b:77:c0:a3:9e:34:fd:
e2:c4:fe:b4:d6:46:6d:57:2d:57:f2:d3:62:e5:95:
c9:a6:fe:27:4b:5e:9a:36:5c:97:f8:76:7d:9d:68:
52:93:8b:26:37:e8:e4:f8:46:ff:e3:d2:d0:36:12:
5b:89:19:fa:74:67:4a:07:a9:aa:7d:e2:6e:16:c2:
a9:20:ad:e3:56:b6:d1:f6:3b:cf:5a:ba:1f:83:68:
54:7f:3b:3c:e6:5f:2c:8b:bf:7f:5b:37:e5:e2:7a:
f8:c0:d5:7d:fb:78:cd:11:32:5e:ae:e1:c0:9b:08:
b9:fb:4a:32:ce:f2:fd:a4:3f:e4:fc:75:5e:19:e0:
da:2c:f8:55:96:24:85:b1:27:38:ba:06:4a:4d:16:
62:8b:57:3a:b4:b0:6d:39:17:0f:b4:d7:10:98:93:
b0:e7:e1:b5:e3:a2:30:6a:63:91:26:7c:56:cf:3f:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:9B:5C:7E:BE:CD:86:5B:4D:CB:2A:82:73:D2:05:DE:76:2B:86
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:ba:a1:0a:d1:e7:12:f6:6e:b2:02:6f:e4:48:27:04:bb:
1c:e9:37:f7:2f:98:b4:67:bd:da:a2:39:fc:8a:37:bc:cb:ce:
3e:05:2b:8f:cc:1e:7a:cb:68:df:f9:a1:e5:d4:71:b4:ff:11:
42:8a:7e:35:da:ff:25:fa:b0:93:da:1e:ae:20:90:db:8a:72:
15:d6:cb:0d:5e:05:0d:5b:a6:58:6b:d9:e3:ea:e9:29:fe:d3:
42:10:43:a8:04:b3:1c:63:a9:32:d6:fd:af:db:f7:14:ab:c3:
0d:f1:38:b6:42:67:6a:3d:9b:1b:1c:e4:89:42:bc:7f:39:6c:
11:19:db:10:fb:3e:50:6a:d9:bd:4c:c4:7d:ff:96:c8:2d:b9:
6a:24:fa:55:58:fc:96:f4:be:3c:d4:5f:37:22:dd:c8:d5:ae:
10:d5:44:86:d4:06:a3:97:ce:68:52:27:b1:06:20:ae:a9:97:
9b:03:6f:17:d6:37:6f:a0:37:f5:c0:a1:0a:e6:11:71:38:8a:
00:82:2e:94:0e:07:44:cb:e5:ed:db:cb:42:8c:13:b3:0a:96:
f4:0b:4e:8c:a1:fa:aa:35:8a:cb:3f:21:cd:4c:52:d5:d6:32:
56:e3:9b:9d:f0:64:49:d3:c1:70:7d:91:b3:c2:64:7c:34:37:
12:3d:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:24 2026 by rpki-client