Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: /2BaeRZGm/+mrleptjrGyMirD7A94/qwz4PWRbNJBZw=
Subject key identifier: F9:F2:27:9A:A4:61:47:F4:B2:BF:BB:7D:DF:8C:CE:21:24:C8:E7:04
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019ED42B3E6386182F54D96FA04CAE8B35A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1526
Signing time: Wed 17 Jun 2026 06:01:04 +0000
Manifest this update: Wed 17 Jun 2026 06:01:04 +0000
Manifest next update: Thu 18 Jun 2026 06:01:04 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: sV4Ds4UdbpCePS5tuS736zTK2kmiia6YYBhiRoxhHJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:3e:63:86:18:2f:54:d9:6f:a0:4c:ae:8b:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jun 17 06:01:04 2026 GMT
Not After : Jun 18 06:01:04 2026 GMT
Subject: CN=f9f2279aa46147f4b2bfbb7ddf8cce2124c8e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:77:7b:f7:03:5b:23:56:4d:51:0d:d7:32:
93:7c:44:71:39:d5:7a:51:bd:08:d6:50:03:23:89:
38:04:48:dc:eb:43:8b:20:ca:d6:f5:86:1e:bd:37:
c1:49:04:61:94:ce:77:2d:52:48:d3:16:2b:d6:3a:
36:ac:f0:b4:4a:11:52:87:26:2a:24:94:b9:af:f2:
f7:14:91:1d:20:02:ea:28:95:f3:d6:c4:4e:8e:7d:
23:11:57:df:57:17:3c:fa:bc:ae:f1:e4:16:ed:02:
98:e3:60:db:e9:57:a5:63:33:cd:e3:53:25:e6:ab:
f1:28:1f:3c:a9:6f:21:4a:b9:ea:06:53:95:8b:d8:
1e:17:47:ce:48:1a:f9:6a:dc:42:45:74:b7:3b:ab:
ce:fc:cb:63:2a:73:88:c1:a2:f6:f1:c4:79:5c:bb:
bf:0d:3f:3e:f2:f5:ce:b5:3a:77:31:d3:31:1b:29:
9b:64:0b:e3:f3:e6:6e:f1:f6:58:5f:70:56:f7:2a:
d6:05:76:35:13:ff:c9:4d:a1:07:f4:46:1e:f8:ef:
cc:9e:27:03:5e:b5:8d:2b:75:0f:48:89:65:fe:bc:
d8:f1:80:30:b7:df:22:55:c3:98:f6:62:5e:fc:12:
94:bf:18:b4:df:9c:62:b9:3b:85:ac:6e:54:49:ee:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:27:9A:A4:61:47:F4:B2:BF:BB:7D:DF:8C:CE:21:24:C8:E7:04
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:26:7a:dc:48:09:0f:66:d2:1f:f7:4d:5b:50:99:19:7d:1c:
b3:51:62:98:7d:bd:33:2c:26:48:fd:88:9c:7c:e1:cf:73:4d:
97:01:bf:16:20:b5:b0:92:7b:5b:7c:ca:94:4c:e4:d7:9c:4a:
36:9b:1e:b0:2c:96:38:6f:c7:3f:7e:32:bd:1d:61:b0:52:f3:
58:9a:f2:3e:43:67:2f:09:66:ec:12:83:8b:6c:6f:66:68:d2:
b1:50:6b:e4:a9:d7:b1:95:fd:ea:bf:b8:f4:04:c4:d7:91:07:
55:03:78:5d:fb:52:3e:7b:55:7d:4a:c2:c5:57:fb:3b:b1:a9:
09:49:43:37:3c:9b:61:0b:e9:55:20:36:dc:a4:e7:8b:5e:9e:
fd:60:3c:90:92:f4:72:04:f3:61:cf:6d:5f:8e:4f:6c:70:e5:
fa:18:22:0b:73:2c:b7:20:5b:6b:f6:92:00:d2:a1:f4:d6:c5:
26:29:c0:d5:39:ec:c9:94:aa:1e:21:de:6a:1e:d2:7d:82:f1:
de:50:78:22:57:b8:75:0f:43:d7:f5:45:63:b9:a3:1e:75:2e:
42:9a:31:6d:4b:f5:5b:e5:5f:59:6e:f7:3a:a3:8e:9f:23:20:
06:be:1a:26:53:e7:26:c7:7e:0c:bf:7c:34:c6:4d:28:dc:2f:
c4:24:8d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:42:45 2026 by rpki-client