Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: k83vI8xs63858JZ2+VWcN0vPLXFOcYqJ5GC/AWOPDG4=
Subject key identifier: 6C:89:6D:90:D9:61:F8:56:A2:41:DF:82:CA:40:AD:77:DB:14:28:E2
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019EC0DB45EF0BA8C8A95A4036BF9EB54DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 12:00:56 +0000
Manifest this update: Sat 13 Jun 2026 12:00:56 +0000
Manifest next update: Sun 14 Jun 2026 12:00:56 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: 88Z3wy2PaTm/V7QJDHM9HxziyUh/YQBXBMgRiK7IImA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:45:ef:0b:a8:c8:a9:5a:40:36:bf:9e:b5:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jun 13 12:00:56 2026 GMT
Not After : Jun 14 12:00:56 2026 GMT
Subject: CN=6c896d90d961f856a241df82ca40ad77db1428e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:70:4a:4f:3a:a8:d6:21:8a:e3:80:4c:7a:
59:6e:e3:d8:f5:19:8f:1a:ae:6a:5c:e3:bd:83:8b:
58:ec:a8:fd:0d:4e:fd:04:f5:b5:04:bf:e1:78:6f:
61:0e:54:b4:fc:8e:5f:73:e4:45:a1:c7:a2:25:fd:
9f:fc:e2:27:27:2e:64:c0:52:2f:06:81:5b:55:d6:
6f:ba:7f:b9:ac:69:96:14:8f:7a:b6:73:a1:81:f3:
29:c3:df:fd:1f:7a:cf:bb:5c:44:16:ae:e7:5c:1f:
b8:4a:be:cf:49:ee:17:01:c1:1e:3e:8c:31:6a:6b:
8a:8f:1b:46:d9:db:ab:01:dc:83:b7:50:0b:2b:09:
e0:00:69:bd:09:26:ef:8d:f2:fb:3e:98:03:5d:27:
b1:24:99:74:7b:de:fc:53:67:81:9c:9f:91:ae:ed:
86:f0:33:22:68:a7:df:e3:a1:2e:df:76:b6:da:9a:
da:b4:77:f5:4b:e3:75:d3:b5:2a:6f:2e:14:51:96:
95:66:65:eb:aa:d0:98:d2:8b:a8:2f:57:89:92:f0:
78:9c:a0:f2:ca:f1:3f:96:49:39:ed:8e:e7:5b:42:
bf:57:54:13:9c:ee:10:be:a7:df:e9:30:04:6b:c5:
2c:00:8d:87:55:70:3b:90:46:72:67:98:71:ec:95:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:6D:90:D9:61:F8:56:A2:41:DF:82:CA:40:AD:77:DB:14:28:E2
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f8:0d:15:99:21:54:bb:b5:c2:42:d3:e9:46:8c:1b:20:be:
47:c8:77:bf:ed:b1:ae:e6:0f:e5:89:f6:2d:f5:a6:21:41:e1:
5e:73:91:e3:98:13:dd:62:09:fd:b4:93:a0:8a:c3:8f:01:1d:
ad:7d:b7:4d:b7:b4:c6:fd:cf:e7:e1:a8:df:b3:65:85:ae:54:
91:d2:00:74:eb:12:69:ff:b8:1d:06:af:57:70:79:77:2e:1f:
fc:ad:19:0a:e4:c5:1c:b2:52:ce:c8:b3:8f:58:0c:7f:fc:30:
f1:77:e9:2e:81:35:1d:d2:ff:71:1c:bf:0e:2d:36:d8:c7:cb:
ac:f1:ad:dd:21:68:de:0e:30:f8:be:09:09:6b:d7:27:4c:b7:
3e:5f:e8:08:2b:59:a3:98:87:9d:89:4b:a4:93:47:8c:03:cf:
c0:65:93:dd:81:34:a0:a1:74:12:1c:7e:fe:36:1a:78:f9:bf:
ae:46:02:bb:30:cd:08:f3:4f:a5:64:e4:ec:44:65:8a:92:35:
dd:59:3f:ea:64:c3:cb:e0:db:ac:a7:4b:6f:00:6b:48:dd:f3:
fa:23:82:76:d9:61:1a:b2:cb:b3:ab:2c:a6:59:98:74:ce:39:
90:dc:1d:2b:77:d3:aa:84:9a:47:0c:3b:74:95:e6:86:8e:2d:
0c:7f:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:03 2026 by rpki-client