Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: W3MHkYkRoKjHruDuF1ydDUyl9t7ffOgrd0YzooNXVYI=
Subject key identifier: A4:E3:F7:2F:C8:DE:58:4B:ED:A4:4E:1C:70:BB:27:BA:E7:39:20:67
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 01A0CD11425E67FFEC5E5B8E9B8DEBC8016F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 169E
Signing time: Wed 23 Sep 2026 07:00:55 +0000
Manifest this update: Wed 23 Sep 2026 07:00:55 +0000
Manifest next update: Thu 24 Sep 2026 07:00:55 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: sfjxO1OQDyVmeKAnNyQnEbPNUYZlAV/WTtMbKuM4rGQ=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:42:5e:67:ff:ec:5e:5b:8e:9b:8d:eb:c8:01:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Sep 23 07:00:55 2026 GMT
Not After : Sep 24 07:00:55 2026 GMT
Subject: CN=a4e3f72fc8de584beda44e1c70bb27bae7392067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:19:01:78:7a:87:54:ea:2c:8a:c6:53:64:
ac:9e:74:6e:e9:e3:e3:0b:2b:89:9f:0d:6f:d0:e7:
2b:86:67:8f:8b:33:66:25:ce:09:6a:35:1e:37:06:
e8:c3:56:1b:fd:cb:3b:7d:2c:c8:27:31:58:1f:99:
ee:28:b2:f9:ea:04:46:e8:f9:c4:84:d5:5a:a9:6b:
32:93:7a:af:79:b5:64:1a:0c:08:2c:1e:61:7d:56:
4c:35:c4:7c:0a:26:1f:4b:3d:7a:ff:fe:0c:29:17:
9a:84:10:1c:d1:24:ac:c2:f3:ca:28:ae:d4:01:ca:
3a:f2:75:55:7e:01:45:05:85:3c:74:54:fa:87:d0:
48:2e:1a:7e:1b:7e:fc:75:3e:2c:f7:cf:6e:83:34:
f9:15:f5:33:d7:28:4f:3a:44:42:2e:5a:81:23:c3:
0e:dc:b9:40:be:08:fb:1d:93:42:fb:15:9b:79:20:
82:b0:d9:74:b8:52:08:da:b9:0e:14:a1:81:0f:34:
9b:4f:27:16:90:4b:cf:5c:dd:7b:c9:8c:12:bb:99:
76:6a:21:cc:49:2e:b9:d8:9d:d6:89:ab:3a:20:24:
27:48:3d:23:05:1b:b2:75:73:3d:c3:26:58:d0:9c:
b4:8a:53:29:7b:c6:22:be:0b:7d:64:bb:f1:e5:f4:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:F7:2F:C8:DE:58:4B:ED:A4:4E:1C:70:BB:27:BA:E7:39:20:67
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:f3:c8:c7:38:c9:bd:e8:4b:2d:f4:3c:b5:70:81:e7:70:
20:a8:6a:e4:ed:a4:4a:52:24:3c:ed:e9:e9:9f:74:ed:59:05:
47:de:c2:06:33:ac:f2:a8:46:b2:5b:33:64:9b:33:ae:89:88:
29:cc:fb:6c:ec:5b:30:e6:02:99:63:7d:f6:0a:63:2c:cd:c4:
05:71:24:23:fc:1c:e8:16:bc:bd:29:5d:78:f2:49:ff:f1:8f:
4b:ce:be:03:27:52:2e:bd:62:2d:00:c8:a0:7a:6e:17:df:4d:
0b:28:6f:85:81:ed:a1:a1:39:c5:e5:1e:70:59:f0:51:45:e3:
e9:9a:33:0d:6f:5d:38:36:9d:33:82:60:e7:58:5f:4d:be:50:
3b:9a:97:6d:ab:6f:3f:9d:12:bc:65:99:81:11:88:fe:33:72:
7c:00:fb:ac:bf:9f:77:1b:16:8a:4a:fe:d4:1a:54:16:bc:6a:
f9:ed:a1:1d:df:c4:25:e9:94:af:c6:0a:61:65:14:b0:6d:98:
04:16:a0:be:d3:25:e9:c8:57:83:19:13:c9:9d:46:a6:ec:c1:
e5:37:ac:4e:1d:70:3a:93:3f:d6:32:4f:f0:65:c4:b0:14:3c:
31:a6:7b:6b:04:ee:c2:8b:c7:50:3a:63:43:5e:e7:0d:6c:ba:
83:eb:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:27:18 2026 by rpki-client