Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: r2Ce70znq5Q8sYZydGPJntpiCnZd+XxbWJuR6kbzSCE=
Subject key identifier: AA:B1:FC:EE:0D:C8:BB:9F:7B:7C:E8:EE:29:73:F2:C6:F8:EB:88:F3
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 019F9437150F7FFD090227281FB2CBB0F60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 12F6
Signing time: Fri 24 Jul 2026 13:01:05 +0000
Manifest this update: Fri 24 Jul 2026 13:01:05 +0000
Manifest next update: Sat 25 Jul 2026 13:01:05 +0000
Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: wgsdP/NFXh25dkTX6x4P2u3XKAP41dhgOAYXmnB6XwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:15:0f:7f:fd:09:02:27:28:1f:b2:cb:b0:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Jul 24 13:01:05 2026 GMT
Not After : Jul 25 13:01:05 2026 GMT
Subject: CN=aab1fcee0dc8bb9f7b7ce8ee2973f2c6f8eb88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2b:4f:20:90:82:8a:71:20:f4:12:69:03:c4:
17:dc:76:89:56:12:8c:8b:72:58:d4:0d:70:4e:b2:
88:4a:bc:d7:d1:0e:72:43:cc:e7:f9:e4:37:9e:70:
db:a8:de:14:85:9a:eb:06:f3:9d:33:06:b5:4c:17:
cb:9e:ad:a8:55:d1:f8:f4:6d:8d:f2:37:b2:0a:59:
96:8d:99:24:71:93:ac:73:1c:32:02:ac:33:c1:8c:
4b:5a:c8:02:a6:d4:e4:55:9a:c0:ea:49:61:38:d9:
4a:b8:2c:0f:dd:ac:c0:59:7b:9d:24:c6:e6:31:ef:
3c:00:af:56:09:35:95:07:9c:5d:22:10:4f:02:44:
04:bd:94:c6:42:14:d9:c7:30:9e:2b:92:66:cd:40:
e4:bb:3b:93:69:64:d6:22:68:3d:4d:7c:b1:45:e3:
9b:95:0c:3f:e5:25:38:62:57:f2:61:dd:aa:78:1a:
7e:39:c5:73:1f:77:96:66:44:e1:47:62:93:ad:e7:
19:43:da:55:2e:14:49:f9:99:82:cd:95:37:fe:69:
c1:48:d1:39:18:9e:f1:92:71:ce:4d:a7:5e:69:4e:
3b:54:f6:83:4f:5f:1a:b2:41:9e:ef:69:8c:c7:05:
2b:d0:53:84:7e:5d:a7:73:f0:61:3f:41:de:92:05:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:FC:EE:0D:C8:BB:9F:7B:7C:E8:EE:29:73:F2:C6:F8:EB:88:F3
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1e:6e:37:52:c1:58:a9:8f:fc:62:a0:dd:8c:c3:2b:d7:1b:
56:49:3c:be:e3:38:d1:ac:11:60:9b:ca:b7:13:3f:4b:b5:f6:
f6:01:52:20:2e:c8:8a:7e:11:de:27:2f:ac:ab:98:4d:6b:7a:
be:90:e9:58:37:e8:2b:88:0f:1b:08:c6:d1:48:12:5c:ad:ac:
ba:6a:aa:5e:b0:05:67:3b:de:2d:76:50:3c:7e:56:9f:ed:81:
ce:76:e4:19:ea:ab:52:2b:87:3a:60:27:86:75:21:51:31:d0:
47:64:14:5d:d2:48:d0:73:c0:ed:97:e0:60:41:e1:8b:e5:2b:
8d:51:fe:08:a9:79:29:d9:11:cd:67:38:7f:3e:ca:34:9d:86:
67:e2:f4:c9:c7:54:e8:1b:73:e0:27:b4:e5:1a:0a:dc:c4:35:
ba:cc:bf:70:b6:e9:3f:50:2c:9b:bd:f5:8a:3f:80:a2:10:5d:
88:ac:2e:8f:26:52:db:16:b1:8d:ac:44:ee:29:f9:e3:a3:37:
dc:c8:2c:16:5c:d5:f5:80:2f:f9:7b:87:d6:8a:16:84:37:4a:
74:76:d6:85:14:65:97:e2:f6:8a:c7:4f:02:77:b3:ce:e2:2d:
c4:f4:c7:7e:cf:71:89:a3:73:08:8d:fd:40:8c:5f:07:8f:54:
1a:0e:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:26 2026 by rpki-client