Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
File: OxiO137kpO6Av-8i-pD5LCGJF0k.mft (raw, json)
Hash identifier: PMfOgeA4ZALauFdp3G08epyHhClfLyPuev/LWx1xqos=
Subject key identifier: 0F:C8:87:4C:DC:CF:20:BB:78:FD:C1:94:C5:AF:07:C3:00:A3:09:AB
Authority key identifier: 3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
Certificate issuer: /CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Certificate serial: 019EC111AAFA4F5AB5F52A9FD98BB953B92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
Manifest number: 0F
Signing time: Sat 13 Jun 2026 13:00:20 +0000
Manifest this update: Sat 13 Jun 2026 13:00:20 +0000
Manifest next update: Sun 14 Jun 2026 13:00:20 +0000
Files and hashes: 1: OxiO137kpO6Av-8i-pD5LCGJF0k.crl (hash: Z4Kb5zBDd8H7LA5mENL0lmahnzZ//jckFhPi91RPsOA=)
2: RuW8-PgIfibhBoqNocX_t7ptPOE.roa (hash: zV6LrJuAjMC8MbTSFPKsE8qN0Xu/5M2QJ39L5RQKY/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:aa:fa:4f:5a:b5:f5:2a:9f:d9:8b:b9:53:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Validity
Not Before: Jun 13 13:00:20 2026 GMT
Not After : Jun 14 13:00:20 2026 GMT
Subject: CN=0fc8874cdccf20bb78fdc194c5af07c300a309ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:91:32:1d:19:1a:32:57:74:f4:eb:f2:1b:
8d:1b:d2:c8:07:b8:59:39:2e:97:12:da:ab:48:4a:
31:25:c0:1a:0c:51:49:84:fc:d3:ed:fc:95:3e:4c:
93:83:5f:92:18:d4:c4:fc:05:2c:f5:24:75:79:a1:
37:da:69:21:91:9a:f3:6f:00:36:67:1b:a2:64:27:
6c:51:b8:7c:2d:9f:78:b3:76:98:39:ab:d5:a6:e6:
e0:5a:34:44:23:52:f1:d4:89:db:8f:88:89:23:27:
01:39:14:58:87:5c:91:eb:b9:3b:72:07:3c:10:27:
b4:e9:f4:cc:54:cb:34:d2:e7:2a:dc:fb:40:b3:fa:
0b:c4:8a:c5:71:8f:a7:f9:fc:04:ef:31:83:32:91:
ec:8d:c1:80:8f:5f:7f:00:9f:d8:61:bb:e5:d7:7c:
cb:4a:46:fa:04:38:63:1c:c2:b8:10:7b:9f:02:91:
50:9f:a6:38:01:b5:79:b3:72:da:de:14:2d:96:58:
3c:6a:07:e8:98:3c:45:39:ec:31:69:70:52:42:02:
4a:28:06:21:22:fa:26:3e:3e:ac:27:aa:c8:44:48:
7b:b5:12:b4:9c:a5:aa:3d:2c:82:7b:c8:db:a0:84:
77:43:a5:a6:18:9b:2a:b9:31:e1:52:39:52:8c:19:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:87:4C:DC:CF:20:BB:78:FD:C1:94:C5:AF:07:C3:00:A3:09:AB
X509v3 Authority Key Identifier:
keyid:3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cd:f6:06:2a:64:6a:fe:4a:93:8d:a4:c5:58:c6:49:3e:2e:
5d:1c:7f:d7:62:9b:66:2f:44:89:70:b2:4a:63:78:61:37:8e:
23:81:30:9a:6c:ac:84:50:a8:1b:58:6a:46:03:d7:37:6c:e8:
cc:4e:dc:02:46:fb:e2:8d:30:b3:8c:8e:3f:ea:6d:ba:f0:02:
96:03:00:5d:90:67:1a:87:75:e3:65:30:35:ad:a9:72:89:63:
64:b1:cb:3f:4e:c8:9d:c1:93:d2:69:f7:de:3c:ec:2b:59:e0:
7c:a9:3f:5b:7e:0c:ab:7f:86:5e:74:a9:f9:eb:e0:61:51:e0:
97:84:a2:73:2f:09:f5:fd:cc:0a:97:b4:33:9a:e9:de:19:15:
e6:9d:86:87:45:b2:75:b6:8e:85:62:d4:c2:87:d0:4b:63:13:
1d:37:87:9b:e0:78:95:d9:db:fd:1b:23:1a:36:8f:f4:29:63:
a7:00:1c:d8:51:38:1e:68:9e:6d:c9:4b:ad:ca:a5:93:35:64:
5f:fb:ae:33:94:53:3e:26:23:45:d8:01:6f:64:24:22:10:3d:
4f:ec:37:f7:84:72:ce:78:27:93:a5:30:23:38:1d:d2:80:11:
15:2b:3c:1b:97:a1:eb:ba:15:18:5d:aa:08:14:3e:50:ed:32:
0b:ce:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:27:12 2026 by rpki-client