Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: a+gBSV/OXk42Ii2hPzS27dvRpjg1ncXoOnET9YlEToo=
Subject key identifier: AC:CD:31:16:77:9E:93:49:BF:D8:0E:52:86:85:A4:76:9B:8D:FF:9D
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019FAAF51636CFF69F98F2BFD850150902F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 1052
Signing time: Tue 28 Jul 2026 23:00:16 +0000
Manifest this update: Tue 28 Jul 2026 23:00:16 +0000
Manifest next update: Wed 29 Jul 2026 23:00:16 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: RAfySOxCkviERxhxZuR8YWxJNgIw2NA1s+TXf6qlu5E=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:16:36:cf:f6:9f:98:f2:bf:d8:50:15:09:02:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Jul 28 23:00:16 2026 GMT
Not After : Jul 29 23:00:16 2026 GMT
Subject: CN=accd3116779e9349bfd80e528685a4769b8dff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:29:28:d9:2c:68:e0:89:1c:99:01:6a:a1:
36:79:79:77:75:5d:b8:6f:17:00:f9:da:8b:92:5c:
6b:f3:58:3c:0b:28:80:74:0e:1f:e8:78:a6:a4:f3:
ba:ad:3a:9d:83:18:6c:91:a9:8e:f8:03:d6:4b:b8:
60:c1:73:4b:c4:24:0b:21:da:aa:0f:65:37:1d:a0:
91:30:a2:ce:01:38:21:48:3d:fd:36:de:ea:2a:67:
ac:6d:4f:2c:26:b9:10:b8:67:9b:b6:f1:14:24:bc:
06:1c:46:88:17:b8:9b:29:4e:1b:96:96:d3:2e:de:
e4:8a:49:47:4e:d4:20:1d:b7:5b:7b:7e:a4:68:0b:
fc:d1:fe:83:f6:2f:c7:7c:b7:31:8c:4a:05:04:6f:
3d:5f:37:80:35:86:0c:ae:e2:ab:1d:7b:76:b3:73:
ad:62:a6:d0:b7:dc:86:5e:b9:c8:10:a4:c7:6e:38:
9b:1e:49:3e:ef:f9:50:52:32:2d:24:9f:ef:e1:c9:
76:26:33:e9:40:13:37:56:a4:da:98:44:46:4a:8a:
13:ee:1c:b9:90:4a:11:65:00:3a:cf:5f:2f:b9:7c:
06:1c:f1:c0:8c:31:20:c2:11:36:b1:f1:2f:3a:d0:
c9:dc:be:86:e8:16:88:bb:b4:fc:8a:ea:4f:9e:ec:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:31:16:77:9E:93:49:BF:D8:0E:52:86:85:A4:76:9B:8D:FF:9D
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:c7:1b:bb:b2:75:96:41:fa:37:41:59:6c:ee:ed:37:b2:40:
54:42:d8:15:76:d2:d7:54:36:61:0f:d9:05:65:2c:aa:88:42:
49:c1:ba:d5:de:78:1f:3c:fe:58:67:3d:ae:87:31:6f:74:b6:
40:d7:25:f8:b1:a4:44:ca:f8:5d:38:bf:c7:c0:77:f6:09:99:
51:85:f7:9e:80:02:f6:52:ba:73:18:be:80:76:9a:89:34:01:
7e:1f:ba:fc:7d:00:4f:80:18:4a:21:40:09:44:21:33:cd:be:
cd:0c:07:10:f8:ed:56:c4:c5:ae:f5:7a:0e:85:bb:09:76:98:
9c:dd:16:53:45:48:f9:38:c3:d8:a9:67:33:f4:7d:68:97:71:
5f:23:aa:e0:3d:04:53:20:1b:c5:88:57:fc:f5:50:08:89:54:
d5:5f:45:f6:bf:1f:f6:cb:52:e2:45:b3:43:7b:e5:85:19:8b:
13:b5:4a:d5:b6:e2:3a:35:fa:d9:ca:de:a7:8b:e8:16:6b:e0:
3e:57:df:16:40:7d:33:aa:37:5a:55:9a:b6:d4:f5:19:92:dd:
ff:a0:54:8a:5f:f0:0a:fa:c1:eb:e1:1c:f8:bd:bf:b4:e3:1a:
32:ab:26:e9:9a:48:6f:da:03:80:33:b2:e1:fa:e1:c9:11:96:
b7:48:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:29 2026 by rpki-client