Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: 6zsVx3Y8D0X8TMohir3a/6VJpiDQHSM9blAsdqGpZRI=
Subject key identifier: 19:93:82:CD:2C:26:E1:96:76:FF:32:4F:7D:2D:43:02:34:65:3A:05
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 019EC0DBBCE2AD31E095B7BEF40B4A7BAEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 12:01:26 +0000
Manifest this update: Sat 13 Jun 2026 12:01:26 +0000
Manifest next update: Sun 14 Jun 2026 12:01:26 +0000
Files and hashes: 1: dqDFD25-lBr1H4kU-f-eIMyH1ao.roa (hash: aZMJNfpwSLS2DvVJl8WR74MQgSeC0Vd4cP1ssZtEpxQ=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: Io0+eFPH24KGfuyMaucIGZJcI4l7Q0diWR+NmS++gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:bc:e2:ad:31:e0:95:b7:be:f4:0b:4a:7b:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Jun 13 12:01:26 2026 GMT
Not After : Jun 14 12:01:26 2026 GMT
Subject: CN=199382cd2c26e19676ff324f7d2d430234653a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:54:2d:62:fe:4f:ad:15:13:1a:c4:b0:03:
0f:c2:a0:48:77:ea:63:a7:5f:3a:d1:2a:30:b2:2d:
21:0d:71:a9:3a:ce:c4:07:75:69:eb:b5:03:4c:19:
0d:00:77:cc:d7:a0:d9:57:8c:97:e9:9a:62:3d:31:
34:bf:6c:62:a0:d0:06:ed:0b:0b:23:97:57:50:b8:
09:f7:db:d7:54:dc:a7:02:5b:46:81:da:3e:63:30:
0a:c2:36:a1:09:f4:76:87:b1:fa:f9:72:7a:6c:96:
cf:d0:92:d4:1a:c4:54:fe:39:3d:66:d0:73:1d:62:
12:24:07:6d:81:56:5d:93:13:13:ae:29:40:d7:cc:
17:36:b4:6e:e9:b1:3b:60:f2:ef:a2:4a:4f:4f:b2:
15:59:55:ae:f6:1f:67:80:1a:fd:e4:f6:ed:88:0d:
eb:c1:78:38:10:64:d0:75:08:7d:53:4d:3f:4c:08:
a8:ca:38:5b:6e:a4:6b:00:97:58:e2:2e:85:53:2f:
ee:f7:61:2b:d2:4a:97:b5:f1:77:de:08:ea:25:8b:
0a:45:c7:98:98:c5:a4:bb:f0:f5:08:3c:39:5a:06:
b1:f2:9b:70:6d:9e:44:5c:f3:d3:25:af:61:11:fe:
28:e0:fa:f4:90:dd:90:dd:52:93:ff:7c:a7:35:eb:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:82:CD:2C:26:E1:96:76:FF:32:4F:7D:2D:43:02:34:65:3A:05
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:c7:20:59:6f:17:28:82:82:75:42:6b:f6:09:3e:24:c8:
10:3d:7d:68:52:f4:19:7d:57:c3:4f:7b:c2:98:84:75:f0:60:
3a:bd:43:a9:15:09:e5:4d:b5:13:cb:47:63:5d:b9:38:e6:0b:
77:8b:3f:f6:2c:b4:a1:0e:e1:0e:b5:95:79:39:db:09:b2:de:
aa:e8:66:e9:85:82:5d:b4:08:89:a8:0c:f2:9a:fe:73:c6:cd:
5d:74:ad:03:9e:b9:c5:dd:ed:68:e4:ac:9d:8b:3c:52:02:c4:
b6:27:f6:d4:e3:39:de:1b:dd:8e:2f:ad:dc:93:7d:d1:0a:78:
32:26:69:e3:04:5f:5b:84:6d:3b:38:a4:b5:20:8a:f9:16:bf:
44:75:a8:64:12:6f:52:b0:d6:1b:63:be:6e:67:4c:a2:c9:03:
95:67:2d:d0:85:d1:a5:53:a8:c5:85:58:98:f2:d3:b6:39:eb:
25:ae:8f:83:81:e3:4d:7a:ea:78:12:a6:cf:7f:ab:e6:d6:2e:
72:8e:ff:46:39:af:89:d6:ae:12:3e:63:12:fc:e9:9a:5e:c6:
f0:27:0d:fc:b9:52:92:a4:dc:6d:c6:27:ed:c3:0a:e2:84:da:
bd:48:06:a7:56:d0:02:07:5c:71:9d:12:c7:6f:de:73:7e:27:
f6:a6:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:56 2026 by rpki-client