Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: 7AfCzhtr+CqUiZXx+ixXnV6NFqMrYNC+gmbLgc3Z1Uc=
Subject key identifier: 4A:B8:01:10:E9:F3:AD:7D:21:F5:A7:F5:FE:76:7E:EF:4F:5E:52:CB
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019F9059E4D137D36072B0ECBF387EE53829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 15FA
Signing time: Thu 23 Jul 2026 19:00:38 +0000
Manifest this update: Thu 23 Jul 2026 19:00:38 +0000
Manifest next update: Fri 24 Jul 2026 19:00:38 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: fhXkdtNqnX7MLbN0PiJXwYwoUKvqZoYTcRINleNiPgI=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:e4:d1:37:d3:60:72:b0:ec:bf:38:7e:e5:38:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jul 23 19:00:38 2026 GMT
Not After : Jul 24 19:00:38 2026 GMT
Subject: CN=4ab80110e9f3ad7d21f5a7f5fe767eef4f5e52cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:6c:b5:f0:c2:5b:64:7a:07:30:7c:15:19:
ee:40:de:0b:b4:79:b1:56:be:7d:dc:c7:91:04:b1:
6d:32:2a:8d:13:15:67:9d:5d:81:c8:c5:d4:7f:d5:
38:45:d9:8c:eb:eb:9e:af:82:9c:f1:ec:99:11:b8:
48:12:59:9f:80:f9:5d:b3:44:08:03:d4:82:1b:96:
fa:7c:35:f0:cf:a9:98:8c:5a:5b:62:96:42:10:cb:
2f:15:44:61:4f:e4:a2:ea:3b:c4:f9:f4:28:cd:d2:
64:87:2f:f1:14:c2:57:36:d2:90:5c:fe:93:45:0b:
fc:c4:15:5d:53:e8:9d:d0:55:9a:50:c5:41:4b:39:
d9:b5:d9:a8:04:72:c2:c8:5e:93:5c:53:f8:26:f8:
bc:cc:b7:5b:2c:44:ce:8e:33:33:80:f7:94:57:3d:
a9:08:09:3f:dc:4c:8f:9e:d4:9c:d6:9f:2a:53:77:
1d:1a:0b:13:9f:ad:8b:cc:83:91:51:2d:43:20:ea:
7c:0f:8b:cb:2f:69:fd:64:ab:04:5c:50:13:3b:eb:
9b:77:ef:a8:4a:f3:ce:fb:4d:53:18:f0:d0:69:cb:
56:87:3e:ea:ae:2a:18:41:d6:ec:2a:62:ba:83:d2:
fd:03:e9:57:d5:06:c2:69:3a:5b:6e:2c:48:44:5e:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:01:10:E9:F3:AD:7D:21:F5:A7:F5:FE:76:7E:EF:4F:5E:52:CB
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:68:1f:4a:76:6b:f0:cf:60:d1:9e:02:44:59:35:aa:9a:73:
d2:57:2f:ca:b8:35:4c:fa:6e:d5:ed:65:8e:64:54:ec:38:32:
e0:97:99:21:00:f9:4e:3b:55:0c:0a:1b:13:92:1d:e9:d1:b3:
67:7b:5d:a5:3d:b4:fb:b2:4d:fd:fe:3c:28:7c:3b:78:2b:45:
2f:a8:d0:66:cf:3a:55:cd:36:2f:fa:4a:d9:4a:f3:dd:aa:5b:
25:75:e2:5a:c6:04:f0:ee:65:be:79:7a:8c:20:5e:92:3a:d9:
b8:b3:56:3e:20:8c:30:4e:e2:05:44:9a:c1:31:e7:91:e6:5f:
c7:da:08:bd:1e:18:0f:c7:15:ca:c6:82:45:7c:31:9c:2e:f7:
10:04:b9:3a:4c:f6:fb:42:ed:ab:85:20:fd:45:67:72:b5:29:
8a:3a:cb:c5:a9:37:7c:53:11:d6:96:b2:63:9d:4d:55:75:d2:
4f:09:a0:2f:ff:88:38:aa:d8:03:fc:9e:1f:bc:fb:7d:89:d7:
da:e4:90:ed:4e:ee:d6:0a:b4:55:67:e7:62:eb:98:52:b5:55:
c3:14:c1:6e:69:c8:92:e6:a7:66:29:6b:0c:28:0a:ab:b7:52:
2a:9b:fe:c3:58:ad:3d:ba:6f:14:be:76:9e:90:cb:a8:94:3e:
ab:45:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:25 2026 by rpki-client