Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: v7mdFIlld19ao+LANWt1RLqUbH8Byoe5rWsL+sZ9Jfk=
Subject key identifier: 22:81:45:22:90:9A:28:B1:C2:14:2E:DA:BD:DD:DA:21:E1:C1:81:45
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 019ED3F4548A6AF48B3972268286B29AF73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 01AC
Signing time: Wed 17 Jun 2026 05:01:05 +0000
Manifest this update: Wed 17 Jun 2026 05:01:05 +0000
Manifest next update: Thu 18 Jun 2026 05:01:05 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: X0pIIuq3fyc2m3iXz9C0LE09kT879b4RlF7OniZJp0Q=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:54:8a:6a:f4:8b:39:72:26:82:86:b2:9a:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Jun 17 05:01:05 2026 GMT
Not After : Jun 18 05:01:05 2026 GMT
Subject: CN=22814522909a28b1c2142edabdddda21e1c18145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:23:c5:bc:07:2f:d7:4c:d0:17:cb:73:8b:
bf:9b:e0:55:f2:48:49:a3:02:86:c3:01:1f:07:15:
5f:b7:d2:ae:a8:39:00:d0:72:37:8f:fc:70:b4:f2:
23:48:0f:2c:a5:cf:27:b0:88:03:d9:f4:9d:5b:42:
92:c6:c5:77:a1:a0:36:2e:03:79:08:08:af:16:e4:
78:80:81:ee:30:a6:3b:94:07:21:98:4e:64:fc:48:
63:92:0a:ff:03:db:12:37:e2:d7:09:ec:64:64:35:
ef:01:5e:97:9e:5c:96:0e:bb:3b:ec:96:14:7d:dd:
0c:a0:14:e7:c3:cf:54:10:8c:3c:14:ee:b5:78:5c:
ff:95:d7:cb:b2:d6:63:04:12:37:56:cd:99:e4:87:
9f:31:f5:88:15:70:b6:65:0a:47:27:92:4b:ec:3b:
f8:cf:d8:9c:be:82:46:0a:28:78:85:3f:57:f1:bf:
f9:0f:48:95:78:0b:81:68:2c:c9:b5:a0:28:97:55:
da:a0:27:65:04:d2:19:5c:52:3f:c4:f7:a9:c6:e7:
83:d7:56:36:bf:9e:60:53:72:1d:d2:c7:f8:4f:55:
f8:da:5f:58:a3:79:2f:f6:8d:e1:a8:b4:16:9a:7d:
61:9a:ee:4f:4b:27:74:a8:1c:40:8e:8f:ef:f5:d5:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:81:45:22:90:9A:28:B1:C2:14:2E:DA:BD:DD:DA:21:E1:C1:81:45
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ca:a4:2b:12:db:41:38:75:33:6e:29:32:74:70:db:0f:a3:
54:ea:8b:28:65:95:1b:cf:87:a5:aa:c9:43:5e:0f:43:a0:17:
af:dd:bc:d1:0f:bd:a9:88:6f:fa:c4:94:71:d1:66:d2:e0:29:
fe:7a:7e:51:f9:f7:39:46:8b:a2:25:8c:80:97:d5:d6:f6:8f:
6f:8c:4e:20:ed:2c:c7:ab:2a:60:eb:01:41:fd:78:57:39:47:
00:91:32:03:3b:02:3a:d5:46:61:0d:d3:15:c2:d0:20:be:5b:
fd:d2:43:82:a5:7e:32:d2:d5:0e:56:be:e2:3d:ae:23:fc:8b:
d6:59:e9:34:f2:45:19:f4:1f:f1:78:72:57:8c:ce:dc:25:2e:
a3:07:49:dc:6a:26:be:60:da:0d:b7:3f:1a:fd:08:c0:5f:cd:
03:b8:ad:18:4a:88:8d:01:c4:75:97:7f:f7:f1:29:d4:0e:73:
94:94:b9:d5:0d:f7:a0:13:6e:1f:3d:b8:0c:91:70:8b:0b:cd:
d5:5b:60:62:6b:bf:13:cb:da:f5:5e:bf:94:ad:62:14:02:d3:
bb:62:07:14:7c:f6:f2:cf:8d:a1:94:a9:e9:17:64:66:e9:2e:
d1:cc:78:45:96:33:a0:d0:63:c9:1a:47:84:f5:dd:91:28:72:
3c:93:57:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7T9FSKavSLOXImgoaymvc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2M1MDFlMmZmM2IwYWI1MzRiNDg0YzNhOTI4ZDFmMDkz
NWQxYjEwHhcNMjYwNjE3MDUwMTA1WhcNMjYwNjE4MDUwMTA1WjAzMTEwLwYDVQQD
EygyMjgxNDUyMjkwOWEyOGIxYzIxNDJlZGFiZGRkZGEyMWUxYzE4MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAMjxbwHL9dM0BfLc4u/m+BV8khJ
owKGwwEfBxVft9KuqDkA0HI3j/xwtPIjSA8spc8nsIgD2fSdW0KSxsV3oaA2LgN5
CAivFuR4gIHuMKY7lAchmE5k/Ehjkgr/A9sSN+LXCexkZDXvAV6XnlyWDrs77JYU
fd0MoBTnw89UEIw8FO61eFz/ldfLstZjBBI3Vs2Z5IefMfWIFXC2ZQpHJ5JL7Dv4
z9icvoJGCih4hT9X8b/5D0iVeAuBaCzJtaAol1XaoCdlBNIZXFI/xPepxueD11Y2
v55gU3Id0sf4T1X42l9Yo3kv9o3hqLQWmn1hmu5PSyd0qBxAjo/v9dVQGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKBRSKQmiixwhQu2r3d2iHhwYFFMB8GA1UdIwQY
MBaAFDl8UB4v87CrU0tITDqSjR8JNdGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQt
ZjdhZmNhNWNiMDM0LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQtZjdhZmNhNWNiMDM0
LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcqkKxLb
QTh1M24pMnRw2w+jVOqLKGWVG8+HparJQ14PQ6AXr9280Q+9qYhv+sSUcdFm0uAp
/np+Ufn3OUaLoiWMgJfV1vaPb4xOIO0sx6sqYOsBQf14VzlHAJEyAzsCOtVGYQ3T
FcLQIL5b/dJDgqV+MtLVDla+4j2uI/yL1lnpNPJFGfQf8XhyV4zO3CUuowdJ3Gom
vmDaDbc/Gv0IwF/NA7itGEqIjQHEdZd/9/Ep1A5zlJS51Q33oBNuHz24DJFwiwvN
1VtgYmu/E8va9V6/lK1iFALTu2IHFHz28s+NoZSp6RdkZuku0cx4RZYzoNBjyRpH
hPXdkShyPJNX1w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:43:05 2026 by rpki-client