Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: WKLxy/BpQFlHnFwyxsswXftMIYsNASAG5dLYuua28+Y=
Subject key identifier: 85:92:0A:30:4E:92:2D:A3:0B:94:94:69:55:85:72:EE:77:44:CE:A6
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019D25F19AB87C3B1DEB6EBF05FD539F3E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0F04
Signing time: Wed 25 Mar 2026 17:01:23 +0000
Manifest this update: Wed 25 Mar 2026 17:01:23 +0000
Manifest next update: Thu 26 Mar 2026 17:01:23 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: 5HdZ1MIsZcZC0xeUxU1CuOQbm4wNBv475mNSB/VWoCQ=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9a:b8:7c:3b:1d:eb:6e:bf:05:fd:53:9f:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Mar 25 17:01:23 2026 GMT
Not After : Mar 26 17:01:23 2026 GMT
Subject: CN=85920a304e922da30b949469558572ee7744cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:6c:ed:67:bf:5c:bf:0b:6b:c6:c2:95:4f:
a1:bf:ab:0a:b1:9a:58:c9:26:57:b1:97:77:81:0e:
2e:a7:d0:ed:fe:0d:12:55:a7:9f:ef:99:28:23:56:
75:3a:4c:65:aa:03:29:a3:16:3d:c4:16:c4:b9:29:
be:85:20:cb:14:af:a5:3a:42:f3:a0:6e:9f:7b:38:
43:32:fc:c6:e5:7f:8c:e1:ed:41:12:d8:70:b4:2c:
c7:77:86:ce:28:da:f6:df:68:82:f8:b4:20:1e:b2:
65:77:88:84:ee:12:78:39:28:9b:cb:f8:58:d1:a8:
0f:d6:59:ef:b9:03:af:52:a1:29:16:62:7e:64:e7:
cb:4d:67:60:b7:dd:f4:96:29:c5:a4:22:0f:cc:20:
b5:3a:7f:31:52:aa:10:f0:e0:33:98:fc:0f:04:9b:
66:60:94:d5:c9:c1:80:02:41:88:f4:76:47:3a:25:
df:65:de:bc:cd:c1:d3:1c:a3:ad:e3:ac:b2:f1:21:
f0:f1:56:58:32:72:33:dc:d1:4c:a2:b5:5b:4d:25:
1f:cc:a2:5d:c2:a2:83:24:f1:ca:13:65:e7:b2:8a:
7f:9b:12:6b:8d:60:07:5f:15:d7:68:4b:ef:00:e6:
18:ef:2f:0a:67:18:99:55:12:6e:08:c9:7b:cc:d8:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:92:0A:30:4E:92:2D:A3:0B:94:94:69:55:85:72:EE:77:44:CE:A6
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:1c:1e:e5:3f:dc:1f:66:30:e4:aa:c3:04:f4:8d:9a:9d:a1:
b5:26:06:a3:e0:b5:31:4d:07:a4:6b:32:fe:b9:d1:70:fd:bf:
62:7a:d7:5a:53:a8:a6:05:be:43:68:91:df:ab:92:2e:ed:c9:
0f:27:d9:3d:66:27:8d:3d:1e:a2:5a:49:6c:6b:f2:2b:ae:0e:
a8:68:5f:25:f1:43:11:7b:24:4d:c1:0b:1b:b0:1b:28:01:b3:
7b:e4:7c:dc:d5:a5:ef:ec:5f:6a:8e:61:00:dc:05:b9:20:b0:
79:00:ad:15:22:9c:27:84:21:a0:fa:d1:27:15:42:dd:b2:ed:
60:e1:a3:39:35:38:c5:d4:2c:da:a3:91:9d:b2:82:a4:ac:24:
6c:43:72:ed:17:70:ee:a6:5e:87:41:27:2f:7f:e4:85:33:37:
c7:2c:f4:c1:d2:79:bf:ae:26:0d:15:5f:32:a1:15:e0:d3:d6:
3d:28:38:88:c0:ca:14:f3:79:b1:dc:11:2b:2f:95:64:ad:4d:
77:f3:22:ab:63:7f:06:a7:a1:cf:e6:5c:1f:a7:88:5b:33:69:
61:ff:13:cf:2a:bc:5d:57:3d:ee:dc:9e:19:52:db:a6:97:ae:
0e:b6:ff:56:75:9a:5d:2e:75:8f:f5:7b:d6:46:25:23:a1:c5:
fa:0d:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:06 2026 by rpki-client