Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: T3ieElIenOpzaMfXgA9HDBfCZNVn+y2qUxdrY4KkpYQ=
Subject key identifier: 46:43:A0:79:A4:A6:30:9A:03:FC:D0:53:F5:5D:36:77:F0:59:8E:CE
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019EBFC7F3A49A64D74653CDD624E41DDC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 0433
Signing time: Sat 13 Jun 2026 07:00:12 +0000
Manifest this update: Sat 13 Jun 2026 07:00:12 +0000
Manifest next update: Sun 14 Jun 2026 07:00:12 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: ZtrOsZhcWsjQ7KqGUcRfpzB903KnhdhKAYmQusSQwNA=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:f3:a4:9a:64:d7:46:53:cd:d6:24:e4:1d:dc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Jun 13 07:00:12 2026 GMT
Not After : Jun 14 07:00:12 2026 GMT
Subject: CN=4643a079a4a6309a03fcd053f55d3677f0598ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:88:ca:fe:d4:d6:92:a8:47:e0:37:ec:20:
4d:3b:56:6e:ef:14:4b:22:cc:4b:53:0d:46:15:39:
9e:f5:a2:6d:98:88:35:1d:d7:49:dd:2b:bc:be:6b:
8c:01:12:bd:bb:45:0f:9d:9c:22:89:d6:72:1f:4e:
fa:bf:01:b4:2d:f9:63:31:fc:39:db:52:ba:71:02:
aa:e7:88:87:cc:e6:31:86:d0:19:2f:46:06:47:7b:
2e:7b:37:48:43:81:b1:f8:26:f8:b0:73:6d:94:f7:
09:d2:bd:30:aa:ca:01:21:76:c6:ad:6f:17:f8:6b:
ea:7e:23:93:f4:74:03:2f:07:69:ee:1f:f3:bf:0d:
7f:17:df:df:59:e7:67:5a:53:fb:57:f5:61:a0:48:
09:21:28:e5:d1:25:66:98:fb:87:4b:4c:fe:27:84:
af:c1:94:9f:01:22:ce:e8:a3:de:c9:92:57:5f:78:
4f:e5:75:ad:17:c6:98:26:a6:62:b0:73:8d:03:07:
5c:ee:4f:b2:e9:48:b5:65:e2:98:90:1d:09:de:a0:
92:14:8e:23:22:8b:74:13:bc:31:cf:91:1d:06:d3:
9e:ba:47:c5:e6:b4:e4:86:4b:18:bc:de:ff:d3:c3:
0e:90:ce:c1:09:b4:f3:d4:8c:3a:24:04:75:0a:a2:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:A0:79:A4:A6:30:9A:03:FC:D0:53:F5:5D:36:77:F0:59:8E:CE
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:42:20:c9:ea:6a:c0:4a:20:f4:17:d4:08:23:05:25:26:
8a:dc:c4:8b:c3:81:17:b0:ca:a4:25:f5:e6:7e:6c:13:a5:a5:
2c:40:47:ee:42:81:57:95:86:f6:12:23:ac:e8:ea:6a:23:bc:
c3:48:4f:ed:ae:0f:d8:34:ee:74:bf:bb:ea:42:40:19:76:03:
da:de:9d:9f:de:4d:20:be:9a:bc:59:4f:90:ed:d1:ea:3d:ce:
f6:02:62:7c:47:37:13:1b:45:14:9f:0b:55:7e:eb:ee:f3:ae:
6e:61:33:a5:06:fc:09:b7:86:7e:31:70:4d:1c:89:84:0d:08:
cc:50:60:1c:49:77:40:91:7c:2d:54:65:5b:b1:ab:b5:b8:89:
f3:f1:06:a8:02:8c:1b:1a:84:ea:c4:60:fd:0d:51:74:b2:47:
aa:1a:0e:1c:ab:ff:e9:06:30:da:ef:44:67:ea:5a:f1:3a:c6:
f6:43:1e:db:b3:84:51:69:52:1a:e5:67:ac:5f:33:9f:ee:33:
39:91:07:58:05:a6:d3:9e:bc:ae:0e:41:5f:e5:24:3b:73:fd:
fa:5f:23:67:5a:81:fe:5c:43:50:d0:1e:e3:23:bc:3e:27:1f:
71:6d:06:a2:d0:01:a2:fa:f7:74:4c:58:0e:60:eb:e7:c5:24:
70:cc:47:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/x/OkmmTXRlPN1iTkHdx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjYwNjEzMDcwMDEyWhcNMjYwNjE0MDcwMDEyWjAzMTEwLwYDVQQD
Eyg0NjQzYTA3OWE0YTYzMDlhMDNmY2QwNTNmNTVkMzY3N2YwNTk4ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHiIyv7U1pKoR+A37CBNO1Zu7xRL
IsxLUw1GFTme9aJtmIg1HddJ3Su8vmuMARK9u0UPnZwiidZyH076vwG0LfljMfw5
21K6cQKq54iHzOYxhtAZL0YGR3suezdIQ4Gx+Cb4sHNtlPcJ0r0wqsoBIXbGrW8X
+GvqfiOT9HQDLwdp7h/zvw1/F9/fWednWlP7V/VhoEgJISjl0SVmmPuHS0z+J4Sv
wZSfASLO6KPeyZJXX3hP5XWtF8aYJqZisHONAwdc7k+y6Ui1ZeKYkB0J3qCSFI4j
Iot0E7wxz5EdBtOeukfF5rTkhksYvN7/08MOkM7BCbTz1Iw6JAR1CqIRGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZDoHmkpjCaA/zQU/VdNnfwWY7OMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRlCIMnq
asBKIPQX1AgjBSUmitzEi8OBF7DKpCX15n5sE6WlLEBH7kKBV5WG9hIjrOjqaiO8
w0hP7a4P2DTudL+76kJAGXYD2t6dn95NIL6avFlPkO3R6j3O9gJifEc3ExtFFJ8L
VX7r7vOubmEzpQb8CbeGfjFwTRyJhA0IzFBgHEl3QJF8LVRlW7GrtbiJ8/EGqAKM
GxqE6sRg/Q1RdLJHqhoOHKv/6QYw2u9EZ+pa8TrG9kMe27OEUWlSGuVnrF8zn+4z
OZEHWAWm0568rg5BX+UkO3P9+l8jZ1qB/lxDUNAe4yO8PicfcW0GotABovr3dExY
DmDr58UkcMxH5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:25:26 2026 by rpki-client