Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: NWfRWnuY6AEeRJAiXAeCz1YH6yVOIFn8mBoRT+m/u8c=
Subject key identifier: F1:BB:8A:4A:FD:1D:A4:83:51:26:7B:87:50:59:DC:61:88:7C:61:49
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019D99CFD1AE9DBC854C28939F6914A5CF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0F40
Signing time: Fri 17 Apr 2026 05:00:26 +0000
Manifest this update: Fri 17 Apr 2026 05:00:26 +0000
Manifest next update: Sat 18 Apr 2026 05:00:26 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: attwQ2ELZNq3LDUL+pMh86EbJWUWxYtoPJ+UOv8ly08=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d1:ae:9d:bc:85:4c:28:93:9f:69:14:a5:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Apr 17 05:00:26 2026 GMT
Not After : Apr 18 05:00:26 2026 GMT
Subject: CN=f1bb8a4afd1da48351267b875059dc61887c6149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:9d:f8:b0:04:5b:8c:eb:18:c2:13:30:e8:
5b:40:b4:65:0a:5b:eb:91:c5:54:5a:42:ce:c5:77:
c1:2e:26:42:eb:20:85:ca:3a:d5:0d:ec:bc:ed:42:
4e:e1:9e:5c:29:dc:c1:50:8e:a8:19:4a:97:0f:46:
87:47:bc:27:15:43:30:25:1b:3c:3e:86:46:6b:d2:
b0:b9:03:f6:c5:c9:c4:92:fb:c3:73:43:91:c7:f1:
e7:8e:29:c1:a2:10:34:1c:23:0e:d7:45:0b:d0:ca:
3a:25:d9:07:b7:14:11:06:61:4a:80:da:3e:7d:bd:
82:b9:fc:12:17:b7:9b:09:6b:2c:9a:6f:e9:2b:cc:
ef:78:7a:3d:44:7f:9d:c7:ae:1b:12:a4:a1:2e:12:
46:d8:2b:e2:6c:04:45:f0:10:04:78:ef:a7:ab:2f:
85:bc:08:ae:94:fc:9c:e8:98:8a:b9:8c:42:74:01:
cd:c3:7b:41:42:2a:bc:a3:1e:be:a4:9b:3c:38:9a:
4f:08:76:ad:52:9f:45:28:5c:9d:f7:fa:60:e0:15:
60:b7:5e:56:35:55:af:2e:72:9c:98:3c:9d:b2:33:
e3:de:50:bc:41:77:b6:7e:29:c7:8a:75:9c:93:da:
ee:c5:76:bf:fa:8a:89:5e:50:1d:8a:f0:e3:9e:00:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:8A:4A:FD:1D:A4:83:51:26:7B:87:50:59:DC:61:88:7C:61:49
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:26:25:da:69:7c:2e:59:50:1e:e7:9a:8a:05:b7:63:10:84:
3b:e7:bc:fd:38:c8:7a:f6:ed:54:12:27:15:68:94:69:a4:d2:
48:b6:04:af:15:ac:ec:16:89:a9:32:f9:03:e3:23:60:57:8e:
93:7a:2f:8f:e7:03:b6:b7:e1:42:5c:e8:50:62:18:7b:7d:4c:
5c:4d:16:77:ec:12:55:8a:8b:96:aa:fe:62:44:f0:00:dd:0c:
bb:bb:51:28:71:e6:6b:0e:b7:e8:34:1a:7d:3a:32:87:0b:ff:
62:2c:25:a4:1a:5c:f2:19:a1:9c:20:82:5e:3b:65:63:bf:bf:
cf:65:44:7d:f2:36:b1:a6:a7:01:ef:9f:32:7b:24:2a:52:02:
0e:f5:32:9f:e4:68:26:ca:64:27:14:71:2d:c0:d1:f2:0a:d3:
23:1f:2f:f2:a5:cd:e2:83:04:33:b2:95:48:f7:cb:fa:6b:f7:
96:71:84:99:f9:31:1a:7b:bc:39:e1:bc:e7:63:f7:e8:a7:6e:
6f:4b:3a:c5:97:db:a6:b3:ce:45:f6:f1:5f:24:22:dd:24:bf:
3c:a0:6e:06:43:3a:6f:9c:b9:b1:ae:84:37:07:d0:53:a1:d0:
79:74:7f:f3:62:a9:07:3a:5e:fe:20:04:e4:5d:7c:75:21:2c:
d1:7a:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:44 2026 by rpki-client