Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: dFZFJ35Nm2eE+l+/ZJ4M11wko9IEF1W/D+6DxViVL/Q=
Subject key identifier: 49:71:23:11:8B:B4:F5:0F:54:7A:DF:41:8C:B4:23:57:48:F5:E2:A5
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 019F8FEC547AE6D508CE1DE18913919995E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 09C9
Signing time: Thu 23 Jul 2026 17:00:57 +0000
Manifest this update: Thu 23 Jul 2026 17:00:57 +0000
Manifest next update: Fri 24 Jul 2026 17:00:57 +0000
Files and hashes: 1: EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa (hash: /VjX2BQnC3wIjMi5VEBP8mPkyeVmam6lGlm8WGBjxBI=)
2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: D7t4WYcbnrD83Y5Csw60ShZwoH0jUmtwSEM+yee3i3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:54:7a:e6:d5:08:ce:1d:e1:89:13:91:99:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Jul 23 17:00:57 2026 GMT
Not After : Jul 24 17:00:57 2026 GMT
Subject: CN=497123118bb4f50f547adf418cb4235748f5e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:e9:7d:19:a6:37:b3:b3:a3:4a:b1:e2:22:
f6:17:e7:8d:87:27:12:b4:3f:a9:53:65:49:85:19:
cf:92:92:eb:79:23:e0:70:b6:a7:6c:72:d3:21:a1:
92:22:c5:b7:e7:50:bc:f4:fd:d3:ab:92:5c:b0:33:
00:a4:3f:2c:e2:72:d7:ca:cb:71:44:f3:f1:29:a0:
3f:b5:a3:42:5a:49:51:a2:88:2a:35:0f:6f:e2:ce:
0b:f7:cb:24:80:8d:3f:fe:fd:97:26:54:49:3d:ef:
2b:5f:17:2b:97:dd:c0:fc:63:11:f5:6f:16:3a:be:
df:32:8c:44:59:1b:54:cf:56:cc:4b:26:a5:0d:90:
f8:6e:71:32:5c:57:74:8a:08:26:96:2c:0b:2f:aa:
ce:8f:81:d0:ee:41:82:58:dc:97:7d:3b:03:c6:3d:
37:59:07:24:91:95:dd:53:35:32:ca:78:85:48:a8:
49:39:ed:9d:fb:55:3a:7e:7c:1e:66:f8:05:2e:cf:
f7:0e:b3:26:cb:a2:b6:3b:06:b3:69:4b:5e:67:b2:
7e:c7:df:e0:9c:be:08:84:61:d0:47:8e:ce:b1:86:
67:08:97:7c:50:3b:f4:10:ff:fc:5b:a6:5b:46:44:
07:47:e5:5f:f1:b3:24:82:ab:ad:d8:12:e4:81:45:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:23:11:8B:B4:F5:0F:54:7A:DF:41:8C:B4:23:57:48:F5:E2:A5
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:92:3a:c6:45:7d:e7:52:0c:e0:2f:e6:2c:06:3d:d4:9a:d4:
16:c3:2b:da:a5:c9:8d:f1:0d:63:91:a8:88:53:d7:7a:d3:58:
7c:c8:78:46:9f:76:12:5b:ef:fc:3a:05:34:1c:cb:9d:2c:87:
5c:8a:6e:cc:26:0e:85:a4:b1:ba:e8:9f:e1:b0:d9:30:ac:a9:
a4:57:78:81:39:bb:1b:c0:10:d7:f2:10:a4:ab:8b:b7:b9:0b:
3d:da:d5:dc:ed:2f:0b:4f:e9:95:b6:07:20:c3:39:84:cf:1b:
b2:6c:59:8f:32:fd:d7:f9:47:b1:7b:9b:73:1c:ac:ff:51:89:
cb:f3:d6:d9:f1:e0:d1:f5:f2:fe:68:b6:c7:a9:a7:d9:94:70:
a8:f5:97:6d:ca:e3:a3:ab:82:fb:01:ea:16:79:f5:11:cf:6a:
34:ea:ac:6b:79:9e:d3:0f:bc:9c:d1:60:db:2b:22:15:f1:f7:
cf:47:3d:b6:aa:4d:42:41:c9:8e:4b:1c:e2:cc:d6:85:9c:30:
7a:7a:fe:44:d3:78:de:c2:c3:0e:aa:e7:4c:bc:d9:c1:5d:f1:
09:67:de:9a:27:e2:d8:f0:2f:f3:be:18:f5:3b:fb:15:d4:d8:
eb:58:55:21:ac:1d:0f:89:c5:12:d5:07:a8:1f:84:27:64:c3:
46:f6:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:38 2026 by rpki-client