Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: Ddey4ke6simmpj17wiM67s63ngVSXIUoUcER1JD8NVA=
Subject key identifier: FF:50:EE:46:C6:8C:A6:EB:77:3D:55:EF:81:8B:0E:39:D7:D6:18:E9
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 019F92ED200F4AE6278B84D65FD67616E84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0D22
Signing time: Fri 24 Jul 2026 07:00:41 +0000
Manifest this update: Fri 24 Jul 2026 07:00:41 +0000
Manifest next update: Sat 25 Jul 2026 07:00:41 +0000
Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: reNQCyhRDetwq2OCJKY99p9Ad96sLcLqK6qvCwIW/eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:20:0f:4a:e6:27:8b:84:d6:5f:d6:76:16:e8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Jul 24 07:00:41 2026 GMT
Not After : Jul 25 07:00:41 2026 GMT
Subject: CN=ff50ee46c68ca6eb773d55ef818b0e39d7d618e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:4a:de:2e:80:b6:de:e6:67:77:73:d3:1a:
01:69:38:9e:d1:fd:ff:20:5d:8d:0b:0a:e9:87:53:
78:16:17:ff:5b:a4:47:85:9e:61:58:ff:48:58:08:
cb:9c:9a:26:87:60:97:00:73:29:2f:c5:5d:b9:e3:
40:30:c9:99:3d:3f:a1:d3:27:83:ae:45:9d:1a:87:
1e:8f:a8:12:e8:05:ac:6e:06:49:4d:a3:a2:7c:8c:
8c:67:a4:2b:89:28:70:13:ea:1b:89:c7:83:c1:11:
84:71:17:d6:9b:88:9e:a1:d0:c8:e9:dc:a7:e5:1b:
b6:a5:1b:1c:31:03:d1:ab:f2:8b:0a:ce:c3:14:b9:
58:06:3c:33:0b:ce:8d:c1:35:72:0d:76:aa:d3:ba:
b7:c0:47:12:0a:22:21:af:91:23:a1:3c:fd:8f:3b:
f6:28:e6:2c:53:ac:49:5e:a5:af:fd:18:11:ff:4e:
b4:ff:b2:3b:a2:df:39:4f:c4:2c:61:de:5b:d2:a3:
52:5b:53:e0:03:cc:63:c2:16:73:67:52:0e:33:ad:
e2:a0:97:fb:3e:b6:9a:46:e5:18:40:77:8a:84:47:
47:ed:33:3a:b0:90:44:9e:ec:89:15:71:f6:8d:4a:
f5:14:21:a7:e3:27:28:9a:ef:a0:7d:19:bb:23:93:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:EE:46:C6:8C:A6:EB:77:3D:55:EF:81:8B:0E:39:D7:D6:18:E9
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:bc:01:6b:7b:fc:aa:93:f4:f4:1f:75:08:c3:8c:55:f7:
c4:44:d0:63:ef:6f:72:d7:64:a6:82:dd:b8:9a:69:70:ca:d9:
ac:79:f6:7b:29:ff:ae:1d:53:c0:76:a3:58:35:19:93:59:31:
48:c6:b0:d1:49:34:c8:04:8f:9c:b2:bb:9a:00:6c:1d:07:f5:
e9:b4:a1:74:4e:52:df:4b:7e:8a:1f:be:a1:fd:de:d8:e7:50:
c5:98:39:10:4f:41:e2:a6:88:78:e1:f4:e9:38:54:5c:6e:04:
10:a2:dc:38:2e:95:5c:79:de:d3:7a:22:a3:b6:f4:a1:18:6b:
73:0a:d6:fd:44:5d:c9:76:af:41:c5:f7:61:bf:db:a1:08:84:
b8:55:db:c6:7c:dd:3a:66:ed:15:39:6a:e6:c1:56:3d:63:4e:
96:bf:c2:13:ac:3f:71:1f:d5:16:16:44:b0:d2:e6:77:78:7a:
28:1e:3f:7e:32:ff:62:49:6a:0c:8a:00:a5:58:59:4d:3c:63:
52:da:0c:ca:4d:2e:8e:2f:20:df:1f:e0:57:24:39:af:9a:41:
89:2d:51:6e:cb:87:3c:08:39:0f:13:6a:45:4f:e2:0f:50:c3:
69:02:3c:b8:12:fc:72:f0:ec:bc:9d:bc:ca:a5:26:85:48:a6:
e7:c1:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:01 2026 by rpki-client