Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: 8GOOA7l4g2fiIH5FZztSFLV1X0OUbcN86VSCjoZMIpM=
Subject key identifier: 32:27:2D:A7:8A:BE:CB:2E:39:87:49:2B:D1:09:76:01:59:63:37:43
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019F95B72F92DBFC5AC2069E954B2476F96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 1047
Signing time: Fri 24 Jul 2026 20:00:38 +0000
Manifest this update: Fri 24 Jul 2026 20:00:38 +0000
Manifest next update: Sat 25 Jul 2026 20:00:38 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: 5+YBiK43rA/zekqY6euKT5AdR3DP563XQATc8OfcUhQ=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:2f:92:db:fc:5a:c2:06:9e:95:4b:24:76:f9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Jul 24 20:00:38 2026 GMT
Not After : Jul 25 20:00:38 2026 GMT
Subject: CN=32272da78abecb2e3987492bd109760159633743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:96:60:9a:fe:43:dc:01:2b:c8:9f:ea:06:
b1:df:4a:97:ed:47:4c:20:38:0b:66:9f:9f:3e:06:
b1:02:a7:c7:74:57:5b:1d:d8:d4:21:ca:92:17:17:
37:88:e8:42:74:58:1e:66:f0:b3:f9:0b:92:52:d8:
c7:f3:70:1f:27:fc:43:fb:e4:8e:38:cf:2a:53:ce:
03:1d:78:3a:d5:46:89:7e:09:e5:39:30:00:16:2c:
85:51:7f:19:ae:bb:37:bf:b7:d7:7c:61:7b:cb:d2:
c5:8b:15:21:e2:e7:85:9a:b9:dc:62:cb:60:f8:ba:
f6:d2:1f:fc:2f:1f:e3:8d:d7:56:e2:35:1a:4f:ec:
16:8c:94:03:61:50:b8:fc:3c:3d:0f:10:d6:e6:67:
8d:9e:75:38:e4:b6:0c:5b:b0:5d:b0:a2:b5:04:27:
ac:a3:e2:cd:4a:ff:36:23:fd:22:01:d0:c8:37:75:
5b:ec:6a:85:d8:ce:08:98:09:ed:eb:63:4a:97:76:
95:91:ac:ec:2d:96:b4:54:ec:ce:36:3d:62:fa:09:
80:e9:fe:20:c6:7d:3e:5d:9d:3b:8c:19:16:91:d4:
6b:17:69:34:fd:df:ce:b1:1f:62:e4:04:30:94:f7:
47:a4:df:17:d8:39:60:d7:6f:3c:ec:d4:4b:a9:d9:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:2D:A7:8A:BE:CB:2E:39:87:49:2B:D1:09:76:01:59:63:37:43
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bf:78:5d:c7:30:7a:ce:f9:54:fb:82:90:a3:89:79:45:af:
79:9f:98:e4:8e:96:64:b9:d1:b9:27:9c:0a:a3:b7:d1:af:3a:
05:4f:6f:72:d8:09:9c:63:b9:01:bd:00:20:0f:a3:38:2a:8a:
e1:8d:13:bf:82:e8:53:5b:a7:68:a1:ef:49:88:d7:95:3b:45:
b6:73:f2:62:8c:ae:12:8b:b4:2b:d8:2e:23:f8:59:66:3b:eb:
91:cb:84:d9:a0:f9:d0:32:9e:ff:f5:77:f1:01:16:ca:ec:b9:
09:06:2b:10:13:df:f8:52:cd:ec:05:84:53:e6:8e:78:c5:54:
57:db:9f:92:72:a0:1b:8b:28:3f:8b:c7:cf:81:fc:b8:21:c0:
9b:dc:c0:ab:15:1f:40:2c:00:1b:52:6e:e9:7d:df:90:7d:3b:
5f:e8:05:6a:5a:1a:b5:44:4a:14:c0:f0:48:5a:be:cb:fe:4d:
fc:b1:ab:a4:03:24:1a:84:10:e2:19:d2:5c:1d:d2:7d:ec:7c:
c8:ec:b5:a6:a7:17:3f:c9:e0:4c:3d:00:38:40:c3:ca:fb:f4:
48:3c:7f:a9:9e:0e:f7:37:66:4f:34:4c:1d:c2:25:cc:7b:fc:
ed:a1:61:a6:e4:9a:95:99:0c:a1:34:a5:05:ca:c4:84:49:68:
34:20:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:06 2026 by rpki-client