Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: kjlTfDOQBwdFK/MDqZTdrXNjwa3+d7/C7Z37ZDtueBo=
Subject key identifier: B2:06:65:52:0A:81:F9:11:E9:6E:69:3C:6A:76:5F:F2:62:8B:61:CF
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019F9324602AC6A61994E2B9BC816E3E8CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 09FE
Signing time: Fri 24 Jul 2026 08:01:02 +0000
Manifest this update: Fri 24 Jul 2026 08:01:02 +0000
Manifest next update: Sat 25 Jul 2026 08:01:02 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: C1JZTPyD4R7QSeMc8drW0Bp4kQg3S1pZFsWLNSKT3UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:60:2a:c6:a6:19:94:e2:b9:bc:81:6e:3e:8c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Jul 24 08:01:02 2026 GMT
Not After : Jul 25 08:01:02 2026 GMT
Subject: CN=b20665520a81f911e96e693c6a765ff2628b61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:bb:fc:9d:7e:bd:ac:78:19:bf:dc:20:7c:
d9:15:11:86:15:44:21:b1:01:ff:1a:cb:00:29:cc:
15:0e:2e:20:8e:fd:19:54:4a:b0:a6:15:e1:3d:a5:
b7:79:5a:12:88:4e:37:62:3a:f4:c7:19:de:4e:68:
11:6e:29:84:38:46:a9:80:9a:44:77:75:39:dd:02:
a4:da:8f:d0:df:44:5f:db:b4:be:d4:84:e6:d7:b0:
92:0c:dd:69:5b:d4:df:74:31:de:9b:5e:69:73:6e:
40:ac:d5:0b:d3:ff:2e:d0:b2:7f:54:c1:4a:49:c2:
0a:87:0c:cc:48:91:1c:94:7d:da:f6:be:01:b7:47:
67:c0:ee:24:6d:f3:b4:aa:37:41:41:a4:ed:4e:22:
bb:60:79:56:92:b7:dd:e3:ef:84:33:d9:a7:a5:37:
9e:c9:4f:5c:74:25:0e:09:e6:e3:f3:8d:3a:2e:f2:
d8:3e:de:7e:f6:12:0a:be:4b:60:13:a3:9e:25:d8:
c1:f4:2c:ca:70:dd:40:eb:e8:93:97:31:5c:ac:dd:
ef:28:7a:be:a2:c5:9c:10:18:dc:57:08:33:17:8f:
9c:bb:5a:af:19:1d:8e:aa:25:e0:2e:ba:c1:f7:2b:
0d:a7:52:ea:e8:f8:6b:59:d5:33:60:5c:34:29:23:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:65:52:0A:81:F9:11:E9:6E:69:3C:6A:76:5F:F2:62:8B:61:CF
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:17:ac:12:8d:5e:86:a7:50:53:6a:b0:19:22:e7:eb:40:c6:
8c:05:65:db:3b:2b:3e:34:d5:ea:44:01:63:f6:3b:10:0a:03:
ff:3f:3f:55:f4:94:da:23:14:ff:fb:c1:d9:41:13:c9:84:40:
0c:be:f9:89:21:93:87:b8:ae:f9:13:1a:96:04:ac:66:8d:aa:
6e:72:52:d2:f1:d5:a8:4c:a1:d4:7f:ca:65:c1:21:93:27:2b:
18:a8:c0:4a:67:14:8c:a3:67:5d:07:1d:c6:54:55:70:cd:35:
3f:89:2c:14:bf:3d:be:87:04:d3:66:a1:f2:51:56:79:75:de:
4e:47:99:60:ab:27:95:f3:48:c4:26:47:7e:d4:6c:19:24:64:
fb:53:39:67:81:a6:79:53:b1:1e:7c:ef:80:e4:35:db:1c:10:
de:54:a3:e8:01:8f:8d:b2:2f:3f:25:ca:76:52:09:25:df:61:
67:39:17:4c:67:c1:59:0e:cd:11:5e:b6:e8:ee:bc:98:7d:bb:
b2:fb:75:90:be:3d:95:85:11:d9:38:48:58:9c:c0:20:d5:d6:
5f:1e:de:7e:2d:9e:57:b9:23:04:6d:b8:e6:ee:de:2a:75:93:
6b:cb:5e:c7:ad:b2:01:a4:e7:ec:4f:e8:7c:ce:fb:cf:27:7b:
c3:b7:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:56 2026 by rpki-client