Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: HqfzOMJ8BVHDRThplXeFkMv7Px/lhllTZAOWMmbG7EY=
Subject key identifier: 4C:32:AE:A0:CE:E1:60:DF:4E:9B:F1:36:50:5E:65:36:1E:A8:56:EA
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019EC3A52E956D8C522CCCF2071DB8EA21CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0EA2
Signing time: Sun 14 Jun 2026 01:00:42 +0000
Manifest this update: Sun 14 Jun 2026 01:00:42 +0000
Manifest next update: Mon 15 Jun 2026 01:00:42 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: x/41UMX7HxCH5/Q06qtsKfmNEwiYTsMoU23bDT0gCr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:2e:95:6d:8c:52:2c:cc:f2:07:1d:b8:ea:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jun 14 01:00:42 2026 GMT
Not After : Jun 15 01:00:42 2026 GMT
Subject: CN=4c32aea0cee160df4e9bf136505e65361ea856ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:43:d6:ac:33:ba:0e:f4:3e:e8:6b:3c:3d:
8a:96:cb:01:f9:22:c8:a3:12:5f:58:9e:eb:47:65:
1b:2c:4e:41:9b:4c:67:d6:81:33:ee:25:fc:43:35:
ae:30:71:2c:c2:ab:6f:f9:af:19:45:a6:d0:51:29:
76:77:32:54:3a:6e:90:0d:24:53:1e:e2:5e:05:5f:
91:1e:c3:07:09:2a:b8:ca:b6:9f:c1:ac:f3:de:1c:
df:00:9c:93:5b:28:b8:d0:a1:43:7d:e4:96:cf:05:
c2:db:62:f8:ef:e9:96:ec:a6:6f:dc:14:6f:0f:85:
d1:92:24:d2:14:05:97:0f:cf:4c:30:a8:d6:6b:9c:
a2:56:9d:42:0e:24:8f:91:70:f1:45:50:10:9a:9d:
a4:01:7b:d1:b6:b7:86:b8:6d:0b:38:20:98:50:24:
e0:ba:11:2d:10:98:6f:76:f5:68:07:62:85:fa:e5:
7f:fa:b9:30:5f:c4:4d:a7:7c:37:d6:d1:23:e2:cf:
2f:32:80:58:67:4b:da:1a:b4:cd:0b:2b:ec:09:b1:
31:67:30:af:03:79:01:70:a3:fb:35:d3:ff:b0:d7:
fb:ff:1d:46:8c:cf:88:53:17:39:ff:1d:c3:6c:58:
b4:f8:c6:6d:49:98:90:e5:3c:4c:54:64:90:84:ed:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:32:AE:A0:CE:E1:60:DF:4E:9B:F1:36:50:5E:65:36:1E:A8:56:EA
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:ec:6e:9b:53:5d:e9:88:46:e4:ae:9f:90:3c:e4:3d:8e:
70:0c:c0:4b:a2:92:65:79:c1:13:7c:e3:33:08:31:35:a1:e4:
4f:b5:e0:40:01:4c:b0:e6:d4:6f:86:5c:df:ed:1b:ed:ee:1c:
43:99:ed:1a:f8:49:b7:8e:3b:00:f1:80:d2:d6:24:96:97:98:
e8:81:66:07:9e:d3:a1:05:93:c4:80:50:84:58:34:aa:8f:96:
21:fd:8e:de:d2:53:c6:85:b4:59:43:35:a6:36:9d:05:52:05:
7f:8d:45:ee:11:eb:35:b7:ee:a7:43:b9:7f:70:08:02:bf:7e:
0c:d5:59:11:1f:85:53:f0:25:5a:03:7b:6c:25:1f:4d:ee:f2:
a0:2b:77:32:51:a8:06:db:c3:e5:a8:67:b7:f2:66:25:e1:97:
74:74:9f:ed:29:d1:37:8a:6c:78:2f:bd:be:88:61:94:b3:b1:
81:39:73:b2:49:d5:5d:d7:a3:43:5f:79:71:39:55:1e:2b:b2:
eb:09:5e:bb:56:20:d7:ac:97:39:9c:6b:5c:34:62:5d:6d:2d:
a5:21:ae:db:00:61:35:eb:fc:df:24:35:df:88:ad:1a:e3:65:
ea:39:fa:96:52:3c:f6:95:2b:84:74:3a:ad:1f:d4:88:00:d6:
2f:6c:d8:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpS6VbYxSLMzyBx246iHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi
ZGY5ODAwHhcNMjYwNjE0MDEwMDQyWhcNMjYwNjE1MDEwMDQyWjAzMTEwLwYDVQQD
Eyg0YzMyYWVhMGNlZTE2MGRmNGU5YmYxMzY1MDVlNjUzNjFlYTg1NmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20xD1qwzug70PuhrPD2KlssB+SLI
oxJfWJ7rR2UbLE5Bm0xn1oEz7iX8QzWuMHEswqtv+a8ZRabQUSl2dzJUOm6QDSRT
HuJeBV+RHsMHCSq4yrafwazz3hzfAJyTWyi40KFDfeSWzwXC22L47+mW7KZv3BRv
D4XRkiTSFAWXD89MMKjWa5yiVp1CDiSPkXDxRVAQmp2kAXvRtreGuG0LOCCYUCTg
uhEtEJhvdvVoB2KF+uV/+rkwX8RNp3w31tEj4s8vMoBYZ0vaGrTNCyvsCbExZzCv
A3kBcKP7NdP/sNf7/x1GjM+IUxc5/x3DbFi0+MZtSZiQ5TxMVGSQhO38rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwyrqDO4WDfTpvxNlBeZTYeqFbqMB8GA1UdIwQY
MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt
NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh
LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRnsbptT
XemIRuSun5A85D2OcAzAS6KSZXnBE3zjMwgxNaHkT7XgQAFMsObUb4Zc3+0b7e4c
Q5ntGvhJt447APGA0tYklpeY6IFmB57ToQWTxIBQhFg0qo+WIf2O3tJTxoW0WUM1
pjadBVIFf41F7hHrNbfup0O5f3AIAr9+DNVZER+FU/AlWgN7bCUfTe7yoCt3MlGo
BtvD5ahnt/JmJeGXdHSf7SnRN4pseC+9vohhlLOxgTlzsknVXdejQ195cTlVHiuy
6wleu1Yg16yXOZxrXDRiXW0tpSGu2wBhNev83yQ134itGuNl6jn6llI89pUrhHQ6
rR/UiADWL2zYRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:33 2026 by rpki-client