Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: wWNMLGlW3GyuGhDty+ssv0SywnlvCRqqfvIUnZ/mbwE=
Subject key identifier: 84:F5:54:29:80:EC:70:79:55:E5:C7:C0:F2:BF:6F:E9:44:A1:AF:2B
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019EBEED40947003BCE798AFB9494FF600DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 0201
Signing time: Sat 13 Jun 2026 03:01:20 +0000
Manifest this update: Sat 13 Jun 2026 03:01:20 +0000
Manifest next update: Sun 14 Jun 2026 03:01:20 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: Hg3TUMvfqKTDmbuR1VTu8uUFXCw5DUBOCLVngqvl49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:40:94:70:03:bc:e7:98:af:b9:49:4f:f6:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Jun 13 03:01:20 2026 GMT
Not After : Jun 14 03:01:20 2026 GMT
Subject: CN=84f5542980ec707955e5c7c0f2bf6fe944a1af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:fb:a2:b4:b8:01:ff:f4:1d:43:65:c3:2e:
97:1f:88:bf:90:0c:be:46:9d:e3:c4:95:94:1a:2b:
bf:08:a1:b4:c2:5b:bc:26:16:08:30:23:02:57:23:
44:ec:ec:34:96:eb:ba:33:d7:f6:c1:3c:6f:be:c3:
49:55:09:d8:2d:70:76:ba:ab:73:1e:f7:8c:ec:6c:
bb:90:67:ae:37:23:6f:bd:8d:eb:c6:b6:cc:7b:8e:
51:4e:73:73:b6:28:f8:52:20:85:b8:31:21:22:2c:
82:06:95:26:0c:82:49:e4:3a:2b:e8:32:94:b9:a2:
ba:dc:87:de:72:80:d4:39:f0:2c:30:79:00:5c:72:
63:eb:1d:c7:2c:4c:f6:95:42:df:70:27:44:a0:0c:
0b:a3:ba:c9:b5:aa:a2:f5:eb:6c:4e:89:43:7f:65:
84:81:9d:f1:b5:e1:da:71:8f:94:41:9c:c5:08:14:
7c:01:da:b8:17:38:1d:8c:5e:10:1c:56:b6:e7:69:
c3:89:31:2f:b1:12:fc:b0:ac:ea:9e:4f:a0:e8:eb:
22:1b:7d:94:1d:e0:9a:fe:e8:84:71:0f:95:c5:d4:
11:04:c5:74:19:4f:56:88:14:c2:f7:96:c8:61:8a:
b8:4a:11:1c:f9:95:c8:81:61:d5:8e:94:5d:cb:55:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:54:29:80:EC:70:79:55:E5:C7:C0:F2:BF:6F:E9:44:A1:AF:2B
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cd:1d:86:27:53:2d:3f:43:34:d2:0b:a8:0b:83:00:11:bf:
be:fb:96:48:30:14:4b:3c:9f:43:bd:96:ab:dd:cd:16:65:a9:
99:45:fd:87:6c:08:31:91:84:8f:ae:3a:26:e8:5e:a7:9d:50:
63:00:91:17:ae:08:de:19:64:e8:73:80:7a:93:84:e1:88:1d:
35:2c:45:2d:d2:8b:eb:04:eb:84:b5:0a:40:dc:9c:c4:d5:9a:
c2:d6:d8:fd:ed:af:01:e7:1f:1f:f3:a5:74:23:61:32:04:72:
72:17:93:b5:78:bf:8a:9d:dc:af:b6:b7:7e:68:3e:cd:c4:37:
31:94:71:05:83:3b:2b:f2:f0:32:ec:cf:27:e2:e3:44:0b:71:
15:ae:b8:57:0f:20:6f:14:03:62:bf:f1:3f:6f:bf:ad:53:b6:
f9:a5:e2:73:9f:a7:5c:39:83:c7:44:81:cf:45:b7:b1:6a:55:
2d:b8:49:9c:16:85:bd:b3:56:c6:ea:93:56:37:7c:a1:3a:56:
75:31:42:45:88:8c:05:8d:91:bf:eb:aa:4a:3b:ab:4f:fb:38:
18:53:4c:4f:38:43:fe:33:e0:aa:4f:34:5e:d3:3b:5f:9d:80:
93:10:79:33:28:14:69:51:bd:bd:7d:e8:9f:2e:3a:16:39:34:
7a:91:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:47 2026 by rpki-client