Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: YIer5pVQv23iAvQF6qpK+M+PSW/oRMcy+PBrvwdQWhk=
Subject key identifier: 18:2D:E2:B2:5C:81:5A:48:5D:DD:F6:EA:23:5F:FA:7A:FD:A9:C8:1F
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 019F935AFC4C3AE1C4CA46D49018537F3165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 15AA
Signing time: Fri 24 Jul 2026 09:00:41 +0000
Manifest this update: Fri 24 Jul 2026 09:00:41 +0000
Manifest next update: Sat 25 Jul 2026 09:00:41 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: zPX8jGxKpWzYh4LR291miEpwiyhb+YHL3q27U8D57hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:fc:4c:3a:e1:c4:ca:46:d4:90:18:53:7f:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jul 24 09:00:41 2026 GMT
Not After : Jul 25 09:00:41 2026 GMT
Subject: CN=182de2b25c815a485dddf6ea235ffa7afda9c81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:bc:70:b9:23:35:3a:25:08:95:34:40:9f:
71:56:1b:f6:6a:db:21:e5:24:28:21:f5:6a:9b:3a:
70:12:33:cd:38:71:e0:ae:2d:c8:c0:5f:eb:6c:b6:
2b:fa:de:6a:47:6b:da:9c:6b:91:9b:6d:b0:92:cb:
dc:a9:c8:af:82:76:ea:b1:9f:ce:ef:fd:e5:ba:1a:
ca:62:1c:29:7c:2c:a2:40:69:52:90:d4:22:41:ca:
32:63:ec:91:47:2c:76:38:02:09:34:be:8b:66:8f:
36:fd:8f:64:1e:4d:4f:8c:22:4c:d9:c9:51:23:03:
a4:08:3e:e6:2c:59:fc:32:62:54:47:21:6e:26:e3:
18:bc:95:d9:9b:14:1d:49:fd:7b:e7:34:b2:77:f8:
2f:61:d6:1b:11:67:a1:7e:ba:42:4e:e1:b3:97:e3:
e9:5a:24:c1:e3:66:0a:60:dc:a7:d7:04:47:b1:94:
c1:73:9b:1f:80:10:2e:f7:58:2e:91:b8:c6:cd:ec:
be:50:d8:49:cb:c0:04:2f:cf:8f:94:f6:46:13:c1:
b8:e2:cd:67:48:7b:91:b7:9e:48:ea:ec:2e:6a:cf:
68:53:a8:8e:53:8d:46:cf:f2:da:31:e2:83:e1:e8:
f4:2f:bc:69:27:7d:57:47:ce:f3:aa:be:7a:46:69:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2D:E2:B2:5C:81:5A:48:5D:DD:F6:EA:23:5F:FA:7A:FD:A9:C8:1F
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:38:30:3f:2c:b6:5d:7b:c0:bb:a1:1a:91:3c:1f:05:5f:4d:
21:1e:15:55:f2:b3:0c:bc:cd:d9:80:d9:ef:ed:e4:48:9f:44:
ee:2f:51:86:61:1f:82:f6:33:24:d3:2c:c9:55:71:fb:d3:c5:
e0:58:c5:cf:4c:5b:e4:ac:33:4b:54:87:74:a4:ec:c8:c9:3f:
8d:11:af:2b:74:8a:7a:c6:7a:21:17:64:b8:e1:ac:ac:63:73:
04:16:2c:5b:c9:30:5d:12:d9:c9:ff:6c:0f:fc:82:27:4e:1c:
a5:a9:ca:8f:69:09:84:a1:09:25:17:9a:1a:24:74:4a:c3:1e:
f6:bd:12:02:34:d3:99:90:87:a6:e0:44:4f:eb:b1:71:80:fd:
45:c0:d2:77:cf:0c:bd:06:cc:c2:16:35:d8:13:20:5c:74:58:
8b:a9:b8:ec:f8:1f:f0:e6:2f:8a:07:15:3c:2b:3c:64:ed:a1:
a6:ac:b7:71:0c:dc:8d:e3:72:83:40:9f:ab:b1:75:2e:a2:7f:
1a:df:aa:ac:3d:4b:c0:3a:51:24:de:a4:15:a7:aa:ea:87:b9:
72:31:07:c5:1b:3a:1b:27:a4:cd:b8:1e:99:6c:f1:7b:ab:33:
41:8f:a6:a2:5d:21:9e:be:c6:68:34:33:f7:52:35:56:98:2f:
3d:81:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:38 2026 by rpki-client