Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: ADhWACAqvfcgS6ZvtTo0Lu0gkBH1RUuWIVkdxm/BRJ0=
Subject key identifier: BE:8B:D6:0D:7A:5D:F3:C0:C9:3C:19:B7:98:A0:61:89:F9:AE:67:32
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019F92B6A8E9A49E51C8E5FFCADBE31E529A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0EEA
Signing time: Fri 24 Jul 2026 06:01:12 +0000
Manifest this update: Fri 24 Jul 2026 06:01:12 +0000
Manifest next update: Sat 25 Jul 2026 06:01:12 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: 3OLApnZYvoslMG+hOGSfLs5aRhwl9ov27opTUCfH/Mc=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a8:e9:a4:9e:51:c8:e5:ff:ca:db:e3:1e:52:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jul 24 06:01:12 2026 GMT
Not After : Jul 25 06:01:12 2026 GMT
Subject: CN=be8bd60d7a5df3c0c93c19b798a06189f9ae6732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:9e:7a:8b:6d:35:75:fd:2b:2e:57:36:c9:
e8:e5:01:53:01:74:0f:c7:52:09:90:cf:c2:ca:4a:
75:62:0a:b0:a7:95:2f:e8:56:82:3b:91:c3:c7:65:
82:8e:68:3a:d3:35:d1:78:b8:e5:ea:53:fe:c5:b1:
3b:3c:aa:5a:0d:eb:45:54:3e:00:14:24:64:78:ea:
06:1f:e7:8e:4c:0a:17:35:34:ad:55:f6:c7:0e:ae:
04:8e:76:15:9c:c2:f7:79:b9:03:ff:af:49:09:31:
4d:3d:a2:51:b6:bd:a2:7e:7d:d4:10:97:e4:f4:e8:
a0:fd:85:ed:fb:f0:7d:77:10:70:f3:2e:47:ec:bd:
31:1c:93:b1:8a:51:84:02:cd:ca:94:e8:10:4e:0a:
83:21:ed:9c:66:22:2e:74:d6:27:42:b4:1f:50:c0:
c1:b9:f6:15:32:5a:c5:69:bf:f4:6c:cf:d9:13:e0:
04:02:cf:75:3e:a0:68:46:73:5d:bb:bf:db:e3:46:
34:59:cb:95:27:2b:52:37:4c:7d:48:1d:6b:d8:25:
d0:80:20:bb:68:fe:c1:fd:f8:48:03:df:bb:a4:1a:
9b:b1:0b:ac:5f:2a:74:59:26:fd:6f:1a:2d:5b:f6:
a9:31:b1:da:0d:6f:4d:b0:74:b6:f8:f2:9e:36:69:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:D6:0D:7A:5D:F3:C0:C9:3C:19:B7:98:A0:61:89:F9:AE:67:32
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:44:94:fa:b3:4c:1b:4c:84:b2:1c:a9:79:c5:54:4b:ec:3d:
98:da:be:d0:b2:d4:59:2e:f3:c7:ec:eb:ab:28:c7:78:92:e9:
af:20:ce:1b:03:87:8d:1c:5c:e3:5e:a8:4e:26:1d:c6:21:a8:
3b:59:bf:ca:e4:e0:60:47:9d:6a:4a:a0:48:64:4a:7f:2a:06:
fc:1a:45:1a:40:de:4e:0c:0b:62:f4:b9:e9:6b:ac:2b:05:ae:
26:58:6f:4b:be:f3:a0:22:aa:fc:61:58:1b:b8:de:8b:fe:8d:
bd:e1:77:58:a9:b8:18:67:2a:db:e4:f1:36:8c:3c:55:42:73:
d7:72:9f:92:a5:77:c6:e8:34:42:68:34:3f:c6:78:b0:99:84:
e0:8c:d9:53:0c:92:a0:f3:df:32:2c:1a:30:56:dd:c3:da:f4:
97:f0:af:84:d3:06:26:92:87:fa:d1:bb:05:0f:15:64:c4:3f:
ef:c7:45:6d:cc:3e:d3:12:1c:cf:a0:06:55:91:8c:2f:df:e0:
77:41:79:83:5d:84:ae:57:ce:17:01:0e:47:3e:d4:36:88:5e:
47:8c:4d:0a:06:7a:4f:b6:4c:90:e5:60:78:79:53:8e:d3:ac:
68:22:dd:8b:e4:bf:80:2f:92:d3:2a:cd:d2:96:28:8c:e8:47:
70:e0:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:44 2026 by rpki-client