Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: RRWiFeHZMLzuNovCvC0bx7AUZmwQTvz5iS/pOSGIc/M=
Subject key identifier: 5C:C4:7A:38:FD:98:D3:DC:03:4B:F2:C7:3E:F4:AA:B4:E5:CD:76:92
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019F9392162CB031739B25D8F29931A42C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 018C
Signing time: Fri 24 Jul 2026 10:00:52 +0000
Manifest this update: Fri 24 Jul 2026 10:00:52 +0000
Manifest next update: Sat 25 Jul 2026 10:00:52 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: rFciJ68ntJWqb2Y/gwGKMR2b0JGf5kNcpcIM3PWNviA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:16:2c:b0:31:73:9b:25:d8:f2:99:31:a4:2c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Jul 24 10:00:52 2026 GMT
Not After : Jul 25 10:00:52 2026 GMT
Subject: CN=5cc47a38fd98d3dc034bf2c73ef4aab4e5cd7692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:23:81:0e:0e:95:d7:f3:7a:03:98:c3:9e:
2f:36:67:80:2f:fb:d8:e9:af:aa:0b:92:08:34:9c:
06:ac:ea:89:3d:3d:e3:04:23:9c:90:16:09:cf:1b:
87:9a:66:42:51:73:49:34:0d:d5:c1:67:c2:8a:a6:
1f:3c:c6:8a:27:af:67:52:8c:f2:9b:f1:2e:3b:b9:
dd:b7:4a:f2:91:a6:06:84:3e:94:60:db:de:ff:c7:
5d:31:d8:6a:45:1b:71:93:c7:f8:7d:ed:db:c6:7b:
76:25:8f:eb:1b:15:37:f2:27:fd:7d:15:b6:3c:a7:
32:69:dd:7f:85:2b:29:02:f7:c0:4f:38:fb:72:72:
4c:53:27:31:f4:28:46:28:72:dc:0d:c6:66:61:ab:
b6:97:54:b0:0a:af:65:8d:fd:01:03:98:c8:19:4d:
57:41:d6:80:e9:f8:a3:55:18:63:b3:c1:9a:c7:10:
69:53:e1:0e:e4:5a:16:ff:8d:ac:8e:27:c3:8c:86:
42:ea:f6:11:9f:47:fc:65:11:91:9b:f6:1f:e4:ff:
8f:e5:ff:74:62:2b:72:ea:82:d2:03:42:2d:34:96:
73:7e:ef:29:0d:03:c8:19:43:ac:13:9e:bd:dc:ad:
5d:fb:80:f4:0b:3b:19:30:29:cc:3e:31:c1:1d:71:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:7A:38:FD:98:D3:DC:03:4B:F2:C7:3E:F4:AA:B4:E5:CD:76:92
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e0:2c:86:a6:f6:d3:ca:75:85:e8:3b:df:1c:e6:7f:f8:a5:
22:25:9d:f7:3d:00:7f:9d:1a:a8:f3:88:be:45:c6:4f:4c:af:
d2:12:38:18:84:8d:04:c5:a0:0f:63:46:28:46:be:80:3d:ab:
20:d6:bd:9b:64:17:2e:35:7c:cb:82:09:0a:3d:50:aa:4e:93:
48:fd:14:cd:93:7e:86:ab:eb:77:41:34:25:0c:fc:a4:7e:54:
30:48:f8:a8:5c:ba:ed:f5:72:ec:fc:d8:40:eb:2d:ae:56:66:
7a:4a:25:e4:6e:af:d8:2b:7a:c0:95:63:10:06:9b:68:90:68:
85:35:76:ca:cb:42:3b:16:39:5f:17:f7:73:61:dc:e0:b0:7b:
dc:2c:e8:a9:79:d0:b9:7f:69:78:67:01:0c:be:e6:11:0f:79:
3e:2a:1d:3a:e9:24:6a:c8:dd:35:6b:96:7a:72:a0:53:3a:19:
14:fb:cc:00:1a:f6:c8:1a:b7:04:3e:13:ec:b3:20:1f:0d:03:
b6:7d:6d:07:f3:e8:bc:1f:c8:a9:89:b3:b5:29:06:52:50:61:
44:98:82:7d:b8:cb:60:36:99:89:16:0d:72:86:b0:df:bc:36:
c8:43:0f:64:6e:ca:f4:a3:0c:94:63:dd:23:67:f7:c5:ef:e0:
ee:33:c4:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkhYssDFzmyXY8pkxpCwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjkyNzgxZGY0ZDJjNDczNzNjM2ZkZjYzZmJiYzk5Mjc0
YmQ5ZGIwHhcNMjYwNzI0MTAwMDUyWhcNMjYwNzI1MTAwMDUyWjAzMTEwLwYDVQQD
Eyg1Y2M0N2EzOGZkOThkM2RjMDM0YmYyYzczZWY0YWFiNGU1Y2Q3NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6YjgQ4OldfzegOYw54vNmeAL/vY
6a+qC5IINJwGrOqJPT3jBCOckBYJzxuHmmZCUXNJNA3VwWfCiqYfPMaKJ69nUozy
m/EuO7ndt0rykaYGhD6UYNve/8ddMdhqRRtxk8f4fe3bxnt2JY/rGxU38if9fRW2
PKcyad1/hSspAvfATzj7cnJMUycx9ChGKHLcDcZmYau2l1SwCq9ljf0BA5jIGU1X
QdaA6fijVRhjs8GaxxBpU+EO5FoW/42sjifDjIZC6vYRn0f8ZRGRm/Yf5P+P5f90
Yity6oLSA0ItNJZzfu8pDQPIGUOsE5693K1d+4D0CzsZMCnMPjHBHXEX/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzEejj9mNPcA0vyxz70qrTlzXaSMB8GA1UdIwQY
MBaAFKIpJ4HfTSxHNzw/32P7vJknS9nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgt
NjllYTgxNDU5NThiLzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgtNjllYTgxNDU5NThi
LzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuAshqb2
08p1heg73xzmf/ilIiWd9z0Af50aqPOIvkXGT0yv0hI4GISNBMWgD2NGKEa+gD2r
INa9m2QXLjV8y4IJCj1Qqk6TSP0UzZN+hqvrd0E0JQz8pH5UMEj4qFy67fVy7PzY
QOstrlZmekol5G6v2Ct6wJVjEAabaJBohTV2ystCOxY5Xxf3c2Hc4LB73CzoqXnQ
uX9peGcBDL7mEQ95PiodOukkasjdNWuWenKgUzoZFPvMABr2yBq3BD4T7LMgHw0D
tn1tB/PovB/IqYmztSkGUlBhRJiCfbjLYDaZiRYNcoaw37w2yEMPZG7K9KMMlGPd
I2f3xe/g7jPEog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:31 2026 by rpki-client