Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: 2dXGGcjBIS8e2YRAWJ1HFXTsJ0QvW6BET/L+9SPtjnk=
Subject key identifier: 06:26:A7:8E:4F:AA:F0:B9:8D:FD:D1:1B:EE:7A:1B:C2:AE:31:5D:73
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019EC337315535A9E20D2FF4E96FAED4F5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 18B4
Signing time: Sat 13 Jun 2026 23:00:34 +0000
Manifest this update: Sat 13 Jun 2026 23:00:34 +0000
Manifest next update: Sun 14 Jun 2026 23:00:34 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: GBih+IIIvhXIWLGtCQaZZFOt24HYFh12UmLK10V6luo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:31:55:35:a9:e2:0d:2f:f4:e9:6f:ae:d4:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Jun 13 23:00:34 2026 GMT
Not After : Jun 14 23:00:34 2026 GMT
Subject: CN=0626a78e4faaf0b98dfdd11bee7a1bc2ae315d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:ff:fd:91:5f:1e:a2:9e:d9:dc:e8:83:58:
43:7c:e2:64:b7:01:27:bf:09:80:73:a6:94:d9:ab:
2c:74:58:49:39:31:18:1a:59:59:58:30:32:e7:46:
87:f6:57:c9:91:14:68:1e:d2:92:68:ae:86:37:a0:
68:03:14:4c:7b:c7:68:da:39:e3:e0:b6:f3:02:32:
6a:5e:89:ce:13:dc:9c:73:c1:9a:64:31:06:10:8b:
77:19:bc:95:67:37:f0:00:bf:8b:20:b0:34:b4:14:
42:c5:f6:a3:be:ab:04:7a:1b:48:3b:f8:5d:32:24:
aa:d9:59:91:3a:78:2a:72:14:66:38:20:97:52:5e:
b0:eb:0a:54:40:9c:d8:1f:a8:d4:35:89:2c:b1:cf:
fc:d6:73:09:ba:d0:a1:dd:27:9b:9b:a6:48:7c:4e:
b3:7e:f6:f6:9d:4d:01:3c:24:22:60:0e:c1:5b:08:
d5:d5:d0:ad:3b:23:90:1e:a1:10:d5:fd:ed:88:af:
bd:e1:66:92:15:e7:b0:84:d3:4d:1a:0c:0b:e0:ee:
81:52:8f:db:68:41:4e:a3:55:7b:b2:2e:44:cc:71:
00:d3:09:25:b0:c5:0b:8c:b5:3a:19:f9:96:2a:28:
99:ba:40:69:40:d9:3c:2c:a1:91:48:1e:dd:25:ce:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:A7:8E:4F:AA:F0:B9:8D:FD:D1:1B:EE:7A:1B:C2:AE:31:5D:73
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:1a:87:d0:75:aa:cb:55:2f:ed:4a:83:de:ba:84:8c:9b:
39:af:7e:00:45:83:dd:63:fd:56:4f:14:39:b1:4b:c5:a7:22:
0e:c9:2b:6f:f4:2b:4f:ab:88:32:8f:07:4d:20:ae:45:00:2a:
0c:88:f9:20:12:6e:a8:4b:e5:9c:5c:49:10:d9:b6:ac:12:5d:
64:25:80:f7:60:1a:5c:b9:fc:e3:a8:8d:da:c3:06:d7:be:ee:
32:36:42:f3:bc:8f:79:b4:4b:71:fe:51:4e:36:0a:fc:3d:6c:
b9:b3:ac:84:58:2d:3e:03:a9:8e:63:ea:a2:51:00:0e:81:fe:
24:23:c3:61:33:6f:74:2f:a4:32:90:cd:bd:5e:71:f6:66:d8:
82:4c:05:9a:b0:e7:7b:ce:05:20:0c:c1:e9:c1:b1:8d:2d:bc:
ee:7c:9c:6a:7a:e5:c3:2f:c0:06:00:ac:06:5d:94:0f:1f:a6:
d1:a1:bc:2b:96:ca:ef:b6:ac:ae:60:f6:5e:b2:64:3a:4e:1e:
72:b3:42:8d:dc:dc:31:24:4d:6b:ba:e5:7d:c4:6f:9d:de:7e:
fb:25:94:23:d9:63:ba:0f:57:91:22:91:05:93:15:1f:52:63:
d8:92:14:ea:64:64:16:42:f1:43:eb:a0:68:7e:ee:fc:75:e4:
f2:7f:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:12 2026 by rpki-client