Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: hI9vwzkqBNHpn2L4zSTvm77NQb8yBSyXRcjxik+gBeE=
Subject key identifier: D1:6E:C2:08:0C:C4:A7:BE:B1:84:89:31:71:B9:D9:F2:CD:35:2D:12
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019F94376947642218C971030B2E5660E107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0D27
Signing time: Fri 24 Jul 2026 13:01:27 +0000
Manifest this update: Fri 24 Jul 2026 13:01:27 +0000
Manifest next update: Sat 25 Jul 2026 13:01:27 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: 16yAArxGVqZBhQkgkpmhLufTjVp/NtWL4H61P7xLyEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:69:47:64:22:18:c9:71:03:0b:2e:56:60:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Jul 24 13:01:27 2026 GMT
Not After : Jul 25 13:01:27 2026 GMT
Subject: CN=d16ec2080cc4a7beb184893171b9d9f2cd352d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:a0:5d:d3:77:b7:b4:5f:7c:52:30:c0:90:
28:4c:59:8d:cc:5d:87:42:f9:6f:c8:06:46:73:48:
26:d4:a6:ed:d6:82:21:05:c4:22:44:bb:21:be:51:
28:7d:ab:3f:c4:70:1b:fa:ab:7b:1e:c6:b3:de:00:
f1:90:9f:16:43:7e:6f:c6:a5:58:bb:4e:65:99:59:
24:01:59:de:9c:c8:c5:bd:a4:bc:6b:6e:ab:32:f9:
22:00:34:67:e5:77:6f:30:01:eb:27:f7:66:0c:a7:
6d:34:5e:1c:a4:27:80:31:b3:fc:15:c2:d5:5f:a4:
45:fd:55:f7:e8:07:78:e5:22:95:34:2b:47:99:a4:
9d:25:3e:02:bd:35:d5:e0:06:1e:91:bf:7b:e5:22:
ec:44:cf:87:4b:01:57:8a:18:ce:3e:9e:88:59:e6:
8c:6e:f3:3a:ff:27:af:ee:63:95:95:d0:fb:f6:84:
18:80:5a:2d:14:98:d0:c2:50:19:e5:d6:e5:d9:7a:
84:fa:2b:b7:e7:d8:f9:27:22:88:69:3b:45:e1:73:
f5:0e:aa:b7:81:93:17:91:63:df:1b:c0:ee:83:b5:
fb:e8:78:91:a6:22:85:15:11:ff:14:be:97:3a:e8:
7b:fb:36:39:39:f4:99:97:1c:71:89:6d:23:f7:95:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:C2:08:0C:C4:A7:BE:B1:84:89:31:71:B9:D9:F2:CD:35:2D:12
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:51:35:07:51:ad:34:fa:56:48:50:1c:b1:00:e3:c5:3a:fb:
06:99:5e:58:6d:ff:19:1c:b9:15:8f:f5:07:09:00:d6:58:87:
e2:24:52:b4:28:f0:f3:c7:2b:76:27:73:f8:14:ed:e7:25:6f:
6f:5e:95:61:fc:b9:8a:25:05:7b:5c:5e:59:e7:69:f4:a0:26:
9f:da:ad:9f:61:5c:87:c3:74:7a:2d:13:af:ea:bd:fa:b0:1f:
b6:42:03:99:97:b5:25:64:5c:85:39:9d:d2:dc:eb:da:d2:88:
f2:6d:25:17:eb:39:a2:a5:86:6f:77:26:6c:27:4e:1e:ef:a1:
77:8a:0b:bf:18:de:3d:c5:1c:b4:69:b7:91:77:d6:4c:14:65:
ea:96:f2:7f:94:43:b9:f0:62:3c:22:b6:b0:ce:8b:d1:fe:af:
77:ea:cd:24:06:42:eb:49:df:2d:dd:4d:ef:42:fd:31:25:8b:
2c:c2:68:3d:ce:0e:bd:07:a3:63:8a:bc:ba:cf:f5:81:44:17:
35:ef:6b:c0:8d:ae:92:38:8c:94:29:f2:cd:bf:69:4c:6f:82:
91:cf:99:f8:4b:75:25:46:d1:22:35:04:5e:39:81:03:bf:9c:
95:4f:21:fd:eb:79:a4:b2:9b:16:7c:2e:52:1b:46:6f:9a:b2:
77:c6:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:35:31 2026 by rpki-client