Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier: 0LzDMVF7IlWbdAao1GZRnt5e/Rj815iZzmG7WrIAjAs=
Subject key identifier: 8A:73:7C:7A:5A:BB:80:18:BE:4E:99:E2:65:FA:89:81:3D:B2:DE:3A
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer: /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial: 019EBDA324D5579D51F1FBE2E65708E1EFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number: 010A
Signing time: Fri 12 Jun 2026 21:00:45 +0000
Manifest this update: Fri 12 Jun 2026 21:00:45 +0000
Manifest next update: Sat 13 Jun 2026 21:00:45 +0000
Files and hashes: 1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: /Bvg0V2SEQ9tymyaZcdrNf6c8gIf6Wz/4w4VacQdcfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:24:d5:57:9d:51:f1:fb:e2:e6:57:08:e1:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Validity
Not Before: Jun 12 21:00:45 2026 GMT
Not After : Jun 13 21:00:45 2026 GMT
Subject: CN=8a737c7a5abb8018be4e99e265fa89813db2de3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:24:f9:03:ff:db:65:b6:70:f3:f9:d8:0f:
95:af:90:ca:06:b2:f9:9b:78:4d:25:0e:e4:c9:91:
84:e4:c9:71:1e:c6:6a:b2:d3:d5:9c:08:c8:1e:d4:
77:1a:fe:ab:f5:34:d5:94:27:d5:f7:81:aa:b0:d3:
f4:6d:31:9f:45:97:01:4c:44:d8:5c:b9:ff:6e:14:
04:bb:e4:b7:45:02:9a:a1:57:3e:6c:78:18:37:84:
8c:df:bc:c3:dc:63:d9:45:57:3c:e1:3f:42:dd:77:
61:e5:bc:28:45:f9:93:bd:02:8d:8f:5e:db:6f:9e:
18:d9:8e:06:a8:0b:1a:d4:13:fd:c7:5e:69:20:be:
6d:74:9b:16:42:3c:44:a7:1d:89:9e:ab:66:5d:03:
66:11:c3:19:d3:b7:59:5c:a9:c3:67:ca:ea:d9:2d:
40:78:1e:01:49:82:a9:12:3a:8e:62:ea:6d:87:9b:
bc:15:44:5e:87:81:a5:32:2c:9c:77:a4:9b:35:b2:
2e:79:a0:18:3a:8f:20:d9:1a:3b:fb:c8:38:47:61:
1c:cd:87:76:56:e3:ec:9b:ce:ee:68:cc:c6:a0:d9:
6b:1c:54:dc:77:d7:8a:71:2d:4d:15:7b:2e:a3:21:
e8:bc:d8:0d:d9:13:8c:45:55:74:3f:af:0c:7d:03:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:7C:7A:5A:BB:80:18:BE:4E:99:E2:65:FA:89:81:3D:B2:DE:3A
X509v3 Authority Key Identifier:
keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:9f:8d:7d:84:06:b3:22:b6:18:ab:c8:9c:f2:f8:25:32:
16:ad:ae:98:1d:11:b2:b9:c7:f7:5c:d1:a5:fa:9b:5d:da:42:
9a:75:74:67:71:c5:f6:66:cc:de:b1:72:d2:5f:d1:6d:fa:4a:
1d:e1:eb:2e:92:dd:aa:50:bf:54:c7:7a:09:82:9e:b6:20:03:
0d:6b:93:95:da:70:38:53:8c:9c:5b:5a:97:1a:d3:2b:b7:bc:
1e:84:53:0b:db:8a:ce:dc:70:ad:63:a3:4f:5c:fc:9a:27:19:
68:be:5d:5a:e8:42:84:08:83:0d:ed:30:58:0d:3d:28:b2:73:
5e:89:9a:13:38:85:65:c3:82:65:ae:0f:44:f9:c3:70:79:5e:
64:f5:2b:45:82:7e:68:7b:5e:65:ab:8d:ed:e3:99:65:58:a3:
31:df:22:34:a4:6e:08:5e:75:6b:84:2e:54:27:df:ed:7a:6e:
9f:3c:69:b8:a5:c1:50:a4:78:e1:33:2c:c1:97:a0:47:1d:78:
eb:86:27:28:c3:aa:56:68:8b:b8:d4:52:36:70:b1:c1:c3:b8:
1d:30:93:84:51:30:81:47:0e:5d:e0:78:c9:2e:88:76:6a:f7:
8e:00:03:c2:c4:5a:44:9e:57:5f:76:b2:ab:81:25:8c:1e:31:
f1:52:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:15 2026 by rpki-client