Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: UbDlSwRn4dXX3f+zMHrZCix1sX25OJY8S+zOFX1OdiY=
Subject key identifier: BB:A9:6B:BC:52:BE:B0:53:4F:98:2E:D2:D8:50:29:3E:20:CB:B6:8B
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 019F93C933AD3C50E2406B4C594CA8463979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 195C
Signing time: Fri 24 Jul 2026 11:01:04 +0000
Manifest this update: Fri 24 Jul 2026 11:01:04 +0000
Manifest next update: Sat 25 Jul 2026 11:01:04 +0000
Files and hashes: 1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: TU3HPTlwppSV9RP9CljkB8kHItQZRE0c4lLgJm2odZ0=)
2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:33:ad:3c:50:e2:40:6b:4c:59:4c:a8:46:39:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Jul 24 11:01:04 2026 GMT
Not After : Jul 25 11:01:04 2026 GMT
Subject: CN=bba96bbc52beb0534f982ed2d850293e20cbb68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:06:bc:05:98:bb:71:1b:06:3e:15:cf:a8:
9f:75:65:0d:50:d5:05:61:08:0d:57:b9:68:00:94:
9a:34:b0:14:ba:96:17:ae:68:5e:21:80:0d:bb:8a:
0a:19:99:70:42:87:d8:dd:53:3c:bc:64:73:e9:4d:
a4:8b:1a:11:ce:60:47:7c:6a:1c:3a:f1:aa:09:9c:
b3:0d:cf:14:e5:33:07:b2:0f:1b:41:d2:1b:72:20:
2b:53:a0:02:bd:79:64:69:f1:76:3d:56:73:5a:f3:
9c:23:03:83:54:b1:b5:76:d4:0e:cf:fe:72:fc:d5:
fb:8a:66:ea:af:88:dc:4e:e8:f2:4c:9e:f5:48:91:
f5:3b:05:8e:3c:01:1c:b7:54:3d:cc:46:7a:72:f6:
d9:e0:09:e7:07:c8:0b:a7:22:5b:83:7b:cd:60:4a:
2a:8e:f7:29:82:05:98:c1:2a:90:90:89:4e:c4:94:
c6:74:dd:a8:fa:f0:5b:a1:e3:46:d3:53:dd:44:c9:
bc:4c:f8:97:1e:22:3d:b4:38:fc:4e:56:e1:00:8a:
fa:7f:f5:38:18:2b:04:58:0b:c7:49:e9:3e:13:5c:
c2:d3:bb:3c:b1:83:05:f9:f2:e3:22:b7:29:17:96:
2c:e9:1d:51:5a:ed:92:52:9e:71:61:14:e5:6d:fa:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:6B:BC:52:BE:B0:53:4F:98:2E:D2:D8:50:29:3E:20:CB:B6:8B
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8f:32:67:2b:84:84:9f:8b:30:6d:58:74:39:b0:80:5c:60:
37:ad:45:af:3f:60:02:7d:60:21:2a:d2:7e:05:6c:1d:d5:01:
b1:b5:22:75:1e:ea:7e:ec:51:77:c6:31:71:e4:6e:a2:1b:5c:
95:ff:86:c8:5a:fb:c3:d4:09:4e:49:ca:84:40:83:d0:0f:b6:
26:ef:1a:61:3e:e0:38:da:ed:e1:9a:be:60:38:ca:7b:f6:96:
56:34:e7:fe:d5:1f:1d:77:7d:72:af:2d:2a:3e:72:aa:93:68:
82:eb:42:3e:7d:26:ed:c6:fb:9b:a6:ed:8b:00:5a:10:e7:5a:
75:05:72:7b:42:5d:db:58:96:2a:8b:91:b5:f5:d6:16:18:56:
1b:bc:90:88:f7:f9:78:5f:3e:1b:b7:65:4a:b2:ba:da:55:79:
6b:59:5d:bd:1a:eb:63:c6:c4:d2:20:c4:0d:ee:e6:17:60:f4:
d5:5b:c3:da:d3:c1:2d:c1:03:64:ed:5d:4d:89:53:d4:34:de:
82:3e:d8:34:05:d2:f4:fc:0b:d3:17:ea:d8:6b:58:67:1b:ed:
5a:ae:4e:8d:fb:05:53:61:44:c4:7d:3c:85:30:ad:58:1c:ab:
64:bf:3c:68:d9:57:80:b7:09:af:c5:c7:dc:05:ef:62:53:76:
2d:24:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:12 2026 by rpki-client