Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: bsK1IW36HyuKhB/aI0H4v3+mtHIeWJlC1vtuWldQCaQ=
Subject key identifier: 71:15:FB:71:1D:20:84:25:AA:DA:AA:C5:A1:22:52:A2:59:47:BB:10
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019E1ED9B021473776ACAF136BD951634CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: CB
Signing time: Wed 13 May 2026 01:00:43 +0000
Manifest this update: Wed 13 May 2026 01:00:43 +0000
Manifest next update: Thu 14 May 2026 01:00:43 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: 8coXaJjEsiDX/Y22Bg6DCk/0+2rn458BY01hEYd8h9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b0:21:47:37:76:ac:af:13:6b:d9:51:63:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: May 13 01:00:43 2026 GMT
Not After : May 14 01:00:43 2026 GMT
Subject: CN=7115fb711d208425aadaaac5a12252a25947bb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:40:4f:67:6d:91:08:24:b2:6d:16:4d:5c:
2c:5b:4a:8d:71:d9:34:ea:1d:1b:59:1c:d7:46:e2:
f0:b1:1a:aa:14:67:a1:73:45:e8:ee:b0:ae:01:ba:
30:ee:22:35:48:1f:7a:b1:c2:8c:f3:52:68:c0:b9:
e5:25:c9:0e:e3:9a:91:a9:0d:cf:94:6f:f2:5b:42:
da:5b:5f:07:c0:d6:84:82:3e:e1:d6:14:e1:ad:b3:
5c:68:67:0b:03:da:83:11:3d:3e:1b:a9:80:27:1f:
b8:27:13:cc:9b:a2:a9:e4:6c:5e:9f:73:0a:4b:77:
2d:87:d6:d3:09:ef:50:22:4e:47:6a:98:19:48:7b:
5f:9a:1f:97:40:43:e0:b1:d2:b3:a6:68:2f:65:78:
f0:7f:c8:ec:ce:cc:f3:ca:e9:51:20:1b:5b:c5:d1:
e2:a7:26:b5:2b:0a:f0:5a:13:79:0d:9c:35:f1:13:
1b:57:cc:8d:65:9e:c9:6b:dd:e9:d3:15:8a:e0:20:
18:de:1c:41:ef:29:ed:62:8f:08:4d:12:a0:bb:e9:
ec:bb:c3:e6:61:ce:37:61:e2:8c:ee:c3:9c:4c:15:
71:af:dd:96:97:eb:7f:d8:75:ac:54:0f:ff:08:de:
aa:d6:30:08:b4:3c:ce:c9:ac:c8:64:31:4b:93:ba:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:FB:71:1D:20:84:25:AA:DA:AA:C5:A1:22:52:A2:59:47:BB:10
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3b:3c:dd:3a:cf:26:29:c7:0d:4e:97:1d:07:4e:cf:37:32:
7f:ec:0b:1b:e0:71:be:45:fb:35:ab:5e:a6:18:2d:3b:6b:41:
6e:e8:f7:9a:7a:2c:72:14:54:03:26:3f:ca:be:c1:96:9d:32:
03:8f:57:2d:0d:47:3f:53:c6:bd:95:83:a4:22:63:95:92:6d:
e2:f0:35:a4:f7:69:4b:66:9d:60:a9:da:86:d7:e5:9d:9e:bc:
b9:da:4f:da:40:c4:c3:45:0b:9e:ea:04:ce:a7:1f:58:af:2e:
ed:81:0d:cf:87:07:a1:3a:80:23:b3:f0:21:28:97:9f:51:ea:
ac:12:dd:17:b1:1b:89:43:5c:23:fe:fc:9f:e1:ae:f6:73:91:
37:0d:bc:bd:8d:c9:1e:ae:5a:26:e4:92:39:2e:2c:b6:80:b7:
7d:78:7c:38:3d:d9:3e:58:1b:00:b3:52:5b:e5:72:31:5d:bb:
06:f3:e9:4e:7a:6b:22:59:d0:a9:5e:d6:cb:dd:fb:29:f3:ae:
f7:4a:27:4e:af:a5:6a:06:68:f6:55:b8:b7:b4:f3:de:ba:41:
5d:a4:55:85:95:6f:47:9d:42:77:4b:27:b0:50:d8:10:a2:f3:
d6:ba:eb:f2:f9:49:b2:59:79:76:ad:1f:b8:fa:c7:6a:4c:c0:
0e:0a:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:07 2026 by rpki-client