Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: D9JQZjWJInnKom2Vpr/fmpnUJ4OizViBbAV4+eXBpqE=
Subject key identifier: 7B:46:E7:2F:EB:AB:5C:DB:33:93:EE:67:24:51:67:E8:44:EE:3C:FA
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019D284E2A1D27F86B50A18A7D74E16CDF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 14BB
Signing time: Thu 26 Mar 2026 04:01:44 +0000
Manifest this update: Thu 26 Mar 2026 04:01:44 +0000
Manifest next update: Fri 27 Mar 2026 04:01:44 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: 5gFPjNKSJDR8JKotQXGFge8Kbwzdvo4KC9MPS6JRYBI=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2a:1d:27:f8:6b:50:a1:8a:7d:74:e1:6c:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Mar 26 04:01:44 2026 GMT
Not After : Mar 27 04:01:44 2026 GMT
Subject: CN=7b46e72febab5cdb3393ee67245167e844ee3cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:9b:72:b5:cf:c8:f2:49:37:b8:77:6c:05:
3e:52:b5:8a:0e:27:a2:fc:a5:8b:aa:09:63:e4:10:
85:c1:22:c3:c7:57:4e:69:ae:0a:f6:7d:98:2b:e1:
f8:0c:1b:a4:b8:f8:70:0f:8f:74:d6:8c:69:5b:8f:
68:e6:de:ee:3f:84:8c:0e:dd:86:54:87:94:e0:fe:
93:cb:65:05:bb:01:52:66:24:17:c5:74:08:e4:8d:
a5:0e:03:4b:03:af:75:b3:5c:a7:18:3d:8d:cb:12:
70:56:99:ed:7e:44:dc:d1:99:3d:77:66:33:1d:6c:
e7:2d:e3:d2:29:84:70:b4:6b:3f:44:7b:04:54:6b:
be:fa:43:cd:b7:01:7b:cc:82:27:3d:8a:55:74:2c:
8a:15:04:2b:bd:70:69:06:52:35:3c:a1:3f:11:6a:
a4:62:cb:bd:4a:35:04:6c:bc:0c:3f:8c:c0:9c:e6:
a3:c8:5e:90:c0:9c:ce:38:82:32:e0:50:cc:0d:98:
6f:a2:54:1d:88:7d:0a:4a:af:86:f8:e5:a2:93:31:
c8:dd:2a:18:d2:a6:f1:4f:9f:71:d4:dc:c2:39:b6:
db:03:71:bb:82:e6:ee:93:b7:ef:01:c9:c4:c4:b8:
58:e0:51:ed:8b:97:c6:90:d6:87:b5:62:48:ad:f0:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:E7:2F:EB:AB:5C:DB:33:93:EE:67:24:51:67:E8:44:EE:3C:FA
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8d:d2:bb:c5:61:ee:2b:62:78:e3:d6:73:b2:40:c5:09:ca:
ff:48:36:23:f6:ad:45:f8:6a:01:16:ce:e3:66:16:17:0d:81:
e1:4c:16:f0:3b:d0:58:25:ea:6d:e9:93:1a:53:d1:8f:94:b3:
6b:51:8c:22:c8:85:13:c0:5d:0b:1f:30:1d:0e:27:41:7e:88:
59:fe:72:d2:6b:a2:8f:8f:fc:c6:9b:e7:d3:aa:45:f6:47:52:
80:e2:d7:31:3a:6c:31:46:eb:36:52:5c:e6:80:cc:5f:37:1a:
7c:a1:d1:1b:b7:7e:20:1e:c7:fa:93:47:b0:4b:4d:38:72:cd:
46:5c:7a:b1:6a:5f:c7:7b:6d:7f:5d:95:92:9f:e6:9b:c3:e0:
08:fc:e0:3c:fe:af:c0:50:e0:e7:63:f5:f9:5e:ec:d1:d6:f1:
78:f6:4d:97:5d:97:a8:19:1a:cb:6b:5f:8f:5e:3e:17:fc:60:
7e:f7:14:1c:8d:ef:f2:5c:ae:c4:f3:88:1e:6a:f2:c3:73:30:
37:3f:c6:bb:3e:54:a6:9e:fa:38:68:84:25:ee:6c:8b:9f:5d:
84:5a:2f:2a:2b:78:d5:2a:cd:ac:5a:34:04:c2:2a:35:65:68:
2c:17:26:f7:e1:73:5a:82:a8:91:4c:f0:8a:c0:65:d9:a5:d4:
3a:f8:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:14 2026 by rpki-client