Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: ngttwfjUC9EZV1ANd5VREI8wNyw0BpYvqonul+BCAug=
Subject key identifier: B8:5D:66:A4:CF:EF:30:8F:F1:75:F7:E4:27:32:FE:A1:6F:40:2C:C6
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019EC1B722A514C0DE6ABC14F49BD7471B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 16:01:04 +0000
Manifest this update: Sat 13 Jun 2026 16:01:04 +0000
Manifest next update: Sun 14 Jun 2026 16:01:04 +0000
Files and hashes: 1: 6vVSpTChTKj56P_S9G3QSGEzPpI.roa (hash: oBJVrXqcl3ZmvttgmWCt09AlKEv4UiFRHlZlA6agM0s=)
2: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: p/tbYN0nm7N0F1VXI8mdwLBUEGdzWDVaBo9Y+dHwV0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:22:a5:14:c0:de:6a:bc:14:f4:9b:d7:47:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Jun 13 16:01:04 2026 GMT
Not After : Jun 14 16:01:04 2026 GMT
Subject: CN=b85d66a4cfef308ff175f7e42732fea16f402cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:25:15:d0:71:b8:1f:bd:d6:5b:31:f5:2f:
4c:da:ca:94:8d:d1:e7:46:d0:81:de:81:00:fa:b5:
8d:84:8c:b2:ff:a6:43:30:93:84:5b:c8:95:2d:3a:
02:cd:5b:7b:1e:b1:06:c5:88:67:d2:56:4c:dc:68:
49:2d:d7:41:6f:f5:aa:fa:17:be:58:df:78:31:c4:
df:2c:5d:17:b6:f2:8f:4d:3d:a0:d2:65:fe:d5:80:
aa:7d:6e:a4:a5:76:1e:7c:6d:57:ee:a9:ca:92:5f:
27:1b:3a:d3:9f:b9:66:32:32:d5:b0:a3:0e:26:ce:
6f:f3:83:6a:fb:2a:0f:80:63:de:24:94:69:e4:52:
33:88:cc:6c:52:a5:e0:6d:c9:a8:f6:8f:7a:33:2a:
cb:6a:d0:c9:68:e2:75:35:8a:d3:ce:a4:4f:b9:6d:
58:c5:ae:2c:43:6d:9d:a5:b8:93:fc:bd:46:15:be:
54:be:24:4d:36:e4:af:79:15:37:bf:3b:89:fe:bb:
1d:db:19:b0:9c:90:33:58:31:0e:e3:f7:b6:e3:7b:
6e:d5:0c:4b:84:0e:6e:03:f6:b9:82:d9:a3:60:95:
71:4a:4a:6b:a7:ec:b0:f5:48:c2:d9:18:60:22:a4:
57:91:02:59:f5:24:9d:df:87:da:1e:b2:ea:3f:67:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:66:A4:CF:EF:30:8F:F1:75:F7:E4:27:32:FE:A1:6F:40:2C:C6
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:26:61:be:da:b6:1e:1f:25:5e:af:d6:5b:d1:ac:57:33:51:
65:e2:f8:99:18:f0:9c:f0:0c:f3:18:e3:1a:0a:41:97:ae:7d:
56:ca:03:62:69:e7:c6:8a:cc:97:64:66:c7:fe:5e:3b:df:d5:
b4:cd:c3:49:c9:f0:a2:d6:2f:60:3c:c4:16:68:45:50:96:01:
d5:19:bb:16:76:36:cd:f5:86:10:27:60:92:b8:a9:72:74:ab:
d3:69:4d:50:82:9a:e6:00:0a:88:15:2f:66:cd:26:e3:d0:66:
b1:7a:c7:39:c0:e4:92:53:28:66:7e:84:d5:7f:9d:f8:b6:04:
3c:e1:3f:72:d6:e7:46:e5:41:dc:98:3f:29:7f:4d:0a:6e:cf:
f4:7a:01:84:7d:04:ed:f2:df:e7:55:5d:33:9f:23:6d:5c:88:
4f:3f:cf:96:15:05:23:c4:5c:17:9f:53:90:0b:e9:3a:3b:dd:
21:44:63:4a:a1:16:d7:2b:af:f1:ee:6d:23:e9:9f:fc:2b:ed:
d3:2a:1f:9e:d7:16:65:91:ae:dd:68:f8:a5:96:5f:33:ed:db:
3e:c0:f8:6c:c9:a0:35:63:58:a3:9f:9b:6b:37:0d:84:85:06:
09:d3:2a:73:d2:5d:c1:96:7d:ee:47:50:0f:f8:45:5a:cf:b8:
54:97:12:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtyKlFMDearwU9JvXRxtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj
NTVhZjkwHhcNMjYwNjEzMTYwMTA0WhcNMjYwNjE0MTYwMTA0WjAzMTEwLwYDVQQD
EyhiODVkNjZhNGNmZWYzMDhmZjE3NWY3ZTQyNzMyZmVhMTZmNDAyY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkYlFdBxuB+91lsx9S9M2sqUjdHn
RtCB3oEA+rWNhIyy/6ZDMJOEW8iVLToCzVt7HrEGxYhn0lZM3GhJLddBb/Wq+he+
WN94McTfLF0XtvKPTT2g0mX+1YCqfW6kpXYefG1X7qnKkl8nGzrTn7lmMjLVsKMO
Js5v84Nq+yoPgGPeJJRp5FIziMxsUqXgbcmo9o96MyrLatDJaOJ1NYrTzqRPuW1Y
xa4sQ22dpbiT/L1GFb5UviRNNuSveRU3vzuJ/rsd2xmwnJAzWDEO4/e243tu1QxL
hA5uA/a5gtmjYJVxSkprp+yw9UjC2RhgIqRXkQJZ9SSd34faHrLqP2c7VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhdZqTP7zCP8XX35Ccy/qFvQCzGMB8GA1UdIwQY
MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt
Nzg4ZjVhNTgwNDRmLzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm
LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCZhvtq2
Hh8lXq/WW9GsVzNRZeL4mRjwnPAM8xjjGgpBl659VsoDYmnnxorMl2Rmx/5eO9/V
tM3DScnwotYvYDzEFmhFUJYB1Rm7FnY2zfWGECdgkripcnSr02lNUIKa5gAKiBUv
Zs0m49BmsXrHOcDkklMoZn6E1X+d+LYEPOE/ctbnRuVB3Jg/KX9NCm7P9HoBhH0E
7fLf51VdM58jbVyITz/PlhUFI8RcF59TkAvpOjvdIURjSqEW1yuv8e5tI+mf/Cvt
0yofntcWZZGu3Wj4pZZfM+3bPsD4bMmgNWNYo5+bazcNhIUGCdMqc9JdwZZ97kdQ
D/hFWs+4VJcSwA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:46:48 2026 by rpki-client