Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: OJhKHBikfvnBy6FFZC1lvB09gRNS1fGyjl0Ck5mV5pw=
Subject key identifier: EB:01:C2:2C:CC:86:B1:27:F5:89:27:17:24:40:99:FA:32:0E:EB:83
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019ED42BFE531F316D4DCA05A0DACEAD03C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 18F5
Signing time: Wed 17 Jun 2026 06:01:53 +0000
Manifest this update: Wed 17 Jun 2026 06:01:53 +0000
Manifest next update: Thu 18 Jun 2026 06:01:53 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: ftA4C+uYDlJ2wX3RkjVD9P6aX40BVRcjrrhAeW8dUPI=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:fe:53:1f:31:6d:4d:ca:05:a0:da:ce:ad:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Jun 17 06:01:53 2026 GMT
Not After : Jun 18 06:01:53 2026 GMT
Subject: CN=eb01c22ccc86b127f5892717244099fa320eeb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:f5:21:06:8c:c9:99:64:90:dd:da:b5:73:
88:58:3f:84:d1:61:39:a7:5c:92:8d:25:0d:be:2a:
c3:c3:19:cb:b5:71:8b:58:1d:96:8d:ed:24:98:c4:
02:21:a7:3c:05:43:e1:02:4f:9b:8c:a8:fc:a2:cd:
38:cd:a1:7c:17:04:f5:fb:ca:31:99:66:5e:8d:85:
3b:84:f1:0a:f5:eb:9e:3a:29:26:56:bb:d2:dd:b1:
e4:a1:e1:9d:47:a3:98:bc:dc:36:f3:2a:11:54:5f:
38:ff:1a:e8:07:6a:36:10:71:d4:04:92:fc:65:5c:
ce:d9:1d:30:92:82:6d:d4:1b:8e:92:a5:0c:5d:ca:
bd:7e:53:79:38:3f:b0:25:05:f2:16:35:50:75:fc:
f4:e5:bc:16:ac:e9:61:59:dd:6e:c3:e9:3c:4f:1c:
0c:c3:85:34:c4:24:c2:31:6f:49:21:52:94:a7:72:
b7:7d:1f:d4:2e:96:d5:8a:f0:26:fa:c9:74:6c:6c:
03:c8:43:68:d4:2c:7e:38:68:15:bf:7d:4f:ca:9a:
2c:39:fd:0a:64:7e:75:da:c2:a7:b2:2a:47:4d:3f:
58:23:db:43:c0:a9:cd:ae:6d:0b:ab:23:c3:3e:ce:
fe:f4:43:4a:f9:c1:5b:a0:0e:eb:2f:66:8e:b1:0d:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:C2:2C:CC:86:B1:27:F5:89:27:17:24:40:99:FA:32:0E:EB:83
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:37:fa:6b:fd:40:ce:01:ab:1c:ef:3d:02:fb:62:35:0c:82:
db:6e:b3:78:b7:7f:4e:8d:4b:b4:ef:72:97:0f:e7:1f:03:b8:
8c:5f:c7:a7:e1:0f:d6:bd:cb:33:50:80:f6:4a:f8:55:01:ea:
bf:05:e9:9a:5b:b5:11:34:62:32:10:50:81:bf:db:6c:6f:86:
b8:2a:30:0d:a8:57:ba:07:9c:a2:9f:c4:f1:0b:b6:3d:f7:38:
2c:7e:7f:87:60:68:e6:84:8d:88:a1:d1:a8:8f:5a:50:ac:ea:
ba:9b:50:6a:d2:b4:56:3c:6f:e2:10:2f:33:8d:d8:66:84:12:
65:f8:83:89:bd:6a:18:33:77:ca:86:8c:38:bb:3e:b4:f9:20:
48:ea:a6:16:b3:9e:4c:32:23:28:cb:6e:ce:bd:94:07:ab:98:
6e:34:1c:e4:40:0d:7c:54:4c:4d:68:fe:75:dc:7b:11:a1:37:
ba:02:f6:e3:3b:5b:ab:3d:51:b7:cc:d3:06:84:ea:0e:aa:42:
62:ae:07:e3:8b:41:63:d7:2a:ec:ce:55:b1:6e:05:27:30:da:
cc:f8:44:39:5d:6e:fe:82:2d:21:91:2b:3e:74:3d:2d:16:dd:
05:fe:55:bc:a9:f5:b4:73:ab:58:f9:f8:7c:90:85:2d:dd:6b:
07:8f:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:02:58 2026 by rpki-client