
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: fxSNFV3ClNRowbKsgL5cGNiSrTysVVd5bZb00vBQCp8=
Subject key identifier: 3E:7F:44:82:02:CE:6E:90:1C:EA:1F:94:61:EA:37:C2:A7:BE:D9:B3
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019F91A3AF17EA9EC868628232BCF146376A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 01:00:51 +0000
Manifest this update: Fri 24 Jul 2026 01:00:51 +0000
Manifest next update: Sat 25 Jul 2026 01:00:51 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: CU/hYYZreQBbQWiRS3+nIUHi6upZkw00qmMFugrSecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:af:17:ea:9e:c8:68:62:82:32:bc:f1:46:37:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Jul 24 01:00:51 2026 GMT
Not After : Jul 25 01:00:51 2026 GMT
Subject: CN=3e7f448202ce6e901cea1f9461ea37c2a7bed9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:26:41:99:2f:b3:dc:f6:f3:43:55:70:ca:
07:72:4f:04:51:93:c9:d5:ad:1d:52:a2:9d:19:fc:
64:b7:10:17:7f:da:9f:31:39:5b:4c:74:22:4a:cb:
59:f9:35:25:3c:3f:5d:43:63:b1:43:08:6a:89:d6:
ae:0c:bc:f1:84:a5:3f:cd:78:e3:6d:60:25:89:d1:
eb:88:af:52:1c:0a:a3:f4:32:c8:a2:a6:c2:46:09:
64:55:fa:c3:63:f9:4a:f2:14:f6:92:99:5d:94:34:
7e:60:ff:5e:32:5a:1d:30:01:e7:39:a6:a8:ce:50:
f5:2e:72:6a:ef:0e:2d:d4:91:36:ed:f1:da:4d:bc:
03:af:2b:c8:1b:64:06:fa:35:48:89:cc:b8:23:34:
91:26:7d:f0:82:34:18:02:f8:ac:21:7b:72:f7:18:
84:66:a9:ff:0e:e9:b2:90:c6:93:af:15:fe:49:16:
d8:a7:58:ee:f8:34:97:a3:00:49:97:95:30:1e:53:
91:cb:f4:39:c4:d8:3b:b1:7d:b4:46:e4:e7:39:0e:
69:0d:b9:92:54:6e:95:62:83:3e:e0:16:83:6b:ad:
2b:04:75:74:fc:1d:1c:28:c3:55:4d:13:35:ff:37:
2d:05:c8:35:61:09:27:66:a1:5a:3b:31:32:a3:b8:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:44:82:02:CE:6E:90:1C:EA:1F:94:61:EA:37:C2:A7:BE:D9:B3
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:71:f1:38:bf:ee:e0:f8:17:17:38:93:a9:b5:fa:f1:c8:f7:
85:72:96:46:7a:bc:57:dc:4f:6d:b3:ce:71:16:d1:c2:63:db:
73:52:78:62:18:25:75:e5:cf:a9:98:dc:92:c6:ee:03:5e:96:
24:f9:ff:3c:b2:78:dd:aa:54:bf:5f:ca:8d:db:78:57:ba:c8:
12:b8:ea:33:f4:57:bc:a4:ec:97:bc:d7:66:8a:32:dd:48:fa:
98:8f:e3:cc:eb:3a:d8:70:73:18:36:66:a5:b8:28:23:0a:33:
b3:f0:bb:d6:ec:d1:55:85:9f:a0:8d:3b:a3:9b:e6:4d:14:f6:
08:f9:e9:b1:a1:8e:2b:54:bd:89:75:ff:62:04:2c:47:6f:16:
1d:62:d5:3a:04:0a:73:05:93:8f:70:91:e9:44:57:f1:7c:62:
48:ac:fc:80:ed:0b:23:62:2d:05:0b:a0:85:02:f5:f6:dd:c5:
5a:b5:1a:96:c3:80:3d:ac:92:81:5d:04:0d:2c:4e:e6:04:f1:
a4:02:26:ec:26:b9:dc:9b:44:81:00:99:1a:0d:14:1d:91:af:
08:63:ac:30:8b:66:15:fd:b0:3a:47:d8:1b:79:1c:a2:11:66:
1f:2e:e1:84:68:de:ed:07:53:87:3b:21:ce:32:f4:09:61:64:
1e:1c:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:34:10 2026 by rpki-client