Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: C49/IgKvo2e1+i7tf0HtmxIxsL942wbbNSIVGZJYC8s=
Subject key identifier: 05:35:C3:41:5C:C9:1A:65:A6:BA:90:A5:B7:5B:1E:17:9E:FF:55:28
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019F8F104FE3EF37448BBFCD380B8E9830E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0F2C
Signing time: Thu 23 Jul 2026 13:00:38 +0000
Manifest this update: Thu 23 Jul 2026 13:00:38 +0000
Manifest next update: Fri 24 Jul 2026 13:00:38 +0000
Files and hashes: 1: BTzuCE44rDIH7Pz-rptrI7qeNcc.roa (hash: V5yrPjJe+cVyMOCOK0ABvwS7gMjw/S3V3X3G/kpSiFA=)
2: YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa (hash: HUVAVch0tpB2Eafp8Rpcw9ARFWadeMwT0krWeIBPrQo=)
3: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: G6a1LRm1rl0osY+dfRm13aVTPWfBmES1UjGS0gOUkZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:4f:e3:ef:37:44:8b:bf:cd:38:0b:8e:98:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jul 23 13:00:38 2026 GMT
Not After : Jul 24 13:00:38 2026 GMT
Subject: CN=0535c3415cc91a65a6ba90a5b75b1e179eff5528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:3a:4a:42:db:c0:01:f5:86:ef:b7:c9:08:
19:bf:da:ef:a3:71:fe:92:9b:03:e9:a0:91:8f:45:
7e:db:fb:74:c2:a9:90:50:78:d7:96:e6:86:8b:63:
8d:e9:7d:4c:e5:8a:75:07:5a:76:2c:dc:df:1a:f9:
2a:3d:9a:2b:4e:50:53:fc:1d:89:c0:37:9f:54:9e:
11:1e:b4:60:91:af:81:f9:3f:56:80:3a:49:a0:d9:
07:3b:07:e1:01:8b:d3:7b:7a:19:ec:5b:84:5e:2e:
e0:21:d9:85:19:43:7d:b3:41:05:55:80:42:51:11:
17:f9:07:77:f2:c1:c6:16:40:ad:23:b9:be:77:7a:
0b:79:35:64:a2:b9:d8:32:c7:d6:d2:38:ad:75:1d:
81:d2:4b:b3:32:70:67:be:db:3f:e6:1f:c4:68:bc:
15:98:3d:a1:16:2c:49:72:74:82:bb:ed:1f:9e:f3:
4f:1b:3d:32:cd:a1:93:66:aa:72:de:66:b6:6b:e7:
0c:8e:e6:86:ee:0a:c3:02:cc:e7:fa:eb:15:79:bb:
dd:82:4e:96:25:27:8f:37:c4:31:a7:8f:91:24:83:
60:13:8b:5c:0e:9b:8c:e7:ab:0e:0f:2e:ee:55:62:
ea:27:e7:6f:9f:e7:32:d2:2e:c1:a9:8b:9e:35:14:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:C3:41:5C:C9:1A:65:A6:BA:90:A5:B7:5B:1E:17:9E:FF:55:28
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fc:a2:fa:94:18:ee:71:0b:ac:d0:22:7f:45:3f:5a:19:cf:
13:7a:11:36:ff:d1:32:50:e1:d1:55:55:a9:87:f1:5e:da:86:
e0:9e:0c:3d:37:98:a5:7d:94:f1:11:a6:8a:6c:bd:62:59:e7:
a4:d4:16:e9:05:94:ac:7a:18:d1:cf:2f:a2:a7:6c:9f:3d:5e:
4a:78:e9:cb:22:69:17:b8:aa:dc:18:aa:41:30:1d:26:a8:d9:
a6:07:5e:9f:41:3a:b1:61:94:74:e9:c6:69:66:55:bb:63:51:
4c:e8:a0:99:df:49:78:d0:e4:21:ea:93:74:24:1c:ca:59:72:
e7:b0:05:77:34:1b:cd:35:99:79:58:56:a6:24:52:f8:50:03:
de:6f:70:8c:9a:ec:32:5e:c9:35:f6:6e:a2:4b:27:a2:0b:45:
ed:65:4c:d9:9c:53:3a:da:9a:96:cc:93:d8:fa:71:9c:5b:e1:
2d:ac:39:ed:73:50:5f:93:57:e4:ed:04:11:59:56:1b:05:aa:
54:8a:ea:97:50:9b:a7:d6:47:d3:9e:fb:47:d9:da:36:ec:96:
e5:45:97:3f:d7:84:dc:73:07:2e:87:10:3f:88:7e:a8:09:aa:
0b:f8:ab:ed:8e:15:18:19:d6:31:1f:f6:6e:ce:7b:c2:dd:97:
0e:0e:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:37 2026 by rpki-client