Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: b7c31aehiphyM0ZWzP8YR4/UdfS9qosRnOb5gvKWMoQ=
Subject key identifier: 2C:84:97:9D:F0:E2:3D:D5:E2:DF:BE:61:44:6C:88:DA:89:34:A8:BB
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019EBFFF37D4C62020F07656E4FC06E166F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 08:00:34 +0000
Manifest this update: Sat 13 Jun 2026 08:00:34 +0000
Manifest next update: Sun 14 Jun 2026 08:00:34 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: IGyPIZbUj4q6nkhkZwGOdP0Io+8d9R9+OPP7Duo8SbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:37:d4:c6:20:20:f0:76:56:e4:fc:06:e1:66:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jun 13 08:00:34 2026 GMT
Not After : Jun 14 08:00:34 2026 GMT
Subject: CN=2c84979df0e23dd5e2dfbe61446c88da8934a8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:cc:40:c6:16:f2:84:64:b4:82:a4:35:84:
24:b9:19:54:c0:8c:e0:97:3d:74:2f:b2:61:1e:71:
85:5f:c4:50:8e:f6:9c:84:49:6b:06:64:d4:d6:7c:
44:a3:df:84:c0:42:13:90:17:7f:c0:cb:eb:bc:7d:
9c:bf:a8:1a:a1:6f:34:54:07:2f:ef:5d:05:de:e5:
1b:b6:68:d2:e8:38:23:17:26:a7:c9:30:83:28:0c:
fe:7e:f5:0f:3c:04:1b:bf:a5:35:46:a2:05:2e:bb:
43:fa:b6:bc:6c:a8:f7:a3:54:7f:b9:ba:45:77:4b:
4a:0a:8f:b3:be:54:03:bd:8e:d7:82:01:7b:73:63:
00:c6:af:d4:a6:40:e4:6a:53:8c:ca:3e:62:3d:5e:
b5:d4:1c:51:88:63:86:71:02:4b:fc:eb:f9:a6:ee:
a1:11:e1:4b:69:72:df:14:d4:73:bb:8c:7c:fc:ae:
c9:63:16:74:6a:40:07:ec:82:6f:2b:bb:c5:dd:17:
5a:df:ef:cc:a5:62:f5:c5:ef:29:ba:ca:55:a0:74:
e2:43:69:26:7c:d5:35:a0:c9:92:7d:b5:63:33:fb:
13:a5:4e:ec:de:81:6d:5a:3b:0c:4b:c9:72:42:69:
02:48:e4:85:27:25:13:c9:73:9b:89:74:d6:fd:f2:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:97:9D:F0:E2:3D:D5:E2:DF:BE:61:44:6C:88:DA:89:34:A8:BB
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:14:55:cd:9f:81:60:5e:63:2b:c0:a6:56:0d:60:2d:a9:
48:d4:67:b1:1c:45:83:6d:89:1d:b3:6b:88:c4:fe:6e:1d:f2:
59:2d:dd:3e:31:c0:3d:e2:ad:9d:54:f5:dc:a9:9e:7d:99:57:
b9:fe:8c:90:f4:05:e8:cf:16:1e:1e:26:18:b5:5e:c9:bf:4b:
7e:42:a4:28:cb:ad:9f:06:7f:0b:6e:34:f3:41:92:4d:a5:fe:
10:8d:4c:cb:86:fb:40:2a:34:64:54:cf:3e:5a:ed:4e:45:70:
78:d3:9d:ec:b2:ea:7f:7f:2f:4a:57:e6:fc:22:63:90:3f:35:
73:81:40:57:0d:3f:d3:9a:cf:25:6f:01:54:43:38:8c:40:e2:
7a:64:a4:d3:2d:81:f4:5a:44:99:85:fa:73:07:97:06:87:53:
fc:d6:96:8c:a1:02:28:42:79:53:f1:b1:5e:37:7c:4e:f6:c0:
2d:14:b0:b8:fb:96:85:a4:29:2a:4a:ec:44:06:f1:dd:44:07:
29:4e:ad:05:ef:7c:a2:89:20:be:f7:45:f3:31:42:d4:c9:c3:
0e:79:ab:e8:60:e7:41:41:63:c2:bb:3d:2c:8b:40:96:36:8d:
6a:09:40:f8:8c:21:95:ef:fc:bb:de:e7:fb:e1:3e:7a:2a:29:
fa:9b:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:59 2026 by rpki-client