Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: dFYipRGnW5vRpqh1tX5TGd12RLP8yeLts0CDNtZimFs=
Subject key identifier: A3:C1:C6:14:FE:E8:37:96:0D:B4:EF:C8:4B:4D:F3:38:ED:09:7D:11
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019F921150E444C1B889A8EBEA55F5F21B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 090E
Signing time: Fri 24 Jul 2026 03:00:36 +0000
Manifest this update: Fri 24 Jul 2026 03:00:36 +0000
Manifest next update: Sat 25 Jul 2026 03:00:36 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 2zqd9eK1sdP2BKNXGM1aAZI94MrD/AM1qHXyvtM/7No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:50:e4:44:c1:b8:89:a8:eb:ea:55:f5:f2:1b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Jul 24 03:00:36 2026 GMT
Not After : Jul 25 03:00:36 2026 GMT
Subject: CN=a3c1c614fee837960db4efc84b4df338ed097d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:db:12:f4:af:e3:0d:c2:40:89:58:a2:e7:
1f:4e:f8:3d:2f:d8:6a:3e:de:f2:49:05:02:d8:60:
51:24:74:0c:df:7b:4c:69:3d:e7:2e:1f:51:8b:80:
bf:89:51:d5:63:de:39:ec:9c:99:5a:fd:4a:88:c1:
90:5c:f3:ad:fe:6c:fc:18:9e:b8:6b:83:f1:04:b0:
e4:4d:3f:a6:a3:34:5e:a6:c6:7b:69:48:52:d3:d9:
bd:6b:f5:ca:34:83:9a:9e:f8:20:4c:c5:07:b2:17:
5b:c9:11:9a:21:83:cb:ce:2b:bd:a4:e3:8f:e4:9f:
7e:38:58:f6:6e:8a:fd:07:a8:da:6a:91:a9:5e:79:
4c:55:a6:b2:c7:97:33:0a:aa:02:e4:8a:b1:47:72:
f9:5f:58:30:08:36:0c:c7:89:82:64:c1:e7:23:06:
26:a2:19:77:2e:46:ec:bc:75:a7:26:7a:f2:e2:5f:
9d:01:a7:72:02:52:46:8d:4e:65:ff:b6:43:82:82:
80:9e:8f:23:00:91:d0:54:47:f8:97:71:c8:0c:a9:
6f:cf:94:64:e3:0e:0b:26:92:6d:86:b0:d4:41:64:
c9:3f:89:b1:d3:96:fc:08:ce:1b:44:73:48:35:c1:
ff:f2:2f:58:ba:eb:96:f1:b0:72:d6:54:5a:c2:b1:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:C6:14:FE:E8:37:96:0D:B4:EF:C8:4B:4D:F3:38:ED:09:7D:11
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c8:f2:70:b7:03:6b:f3:40:5b:ce:88:ab:a6:c5:d9:23:00:
ac:b4:38:81:8b:6e:7d:09:5e:8d:50:3f:b9:62:c2:bc:24:29:
9f:9f:d1:ed:21:d1:52:0c:de:05:30:24:32:fc:29:80:4a:d7:
17:a0:e5:e7:89:51:b5:27:e2:4e:75:7f:01:c4:c8:48:12:4c:
18:bb:88:3a:d3:5c:8e:85:12:a7:2e:38:ef:77:3f:f7:8a:fa:
2c:0f:32:e2:ce:97:18:a0:e4:b2:5b:8b:58:63:08:1c:a1:94:
1a:c7:7a:c5:c1:d3:c5:b9:15:65:0b:59:93:83:ee:46:62:77:
80:b1:e5:b1:6c:a4:30:20:66:c5:cd:b8:5e:fa:c0:e5:52:83:
ce:19:cf:15:98:4e:06:2e:73:14:67:e5:1d:ab:f9:03:38:e8:
0a:9b:fd:bb:9c:94:9a:30:ca:c2:46:90:6a:04:66:d1:ce:9b:
cf:05:76:eb:a7:f6:31:e4:39:31:40:86:22:f3:23:d5:90:b5:
30:3a:e7:13:c1:d9:c8:48:7c:ed:e3:40:cd:85:b7:b4:d4:d8:
d3:53:7a:da:b5:a4:63:8d:6a:99:e6:ef:b5:72:37:ba:96:08:
eb:32:7a:2e:d9:42:52:12:b6:88:88:e5:e8:6f:04:ec:89:c3:
04:bb:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:11 2026 by rpki-client