Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: OAOPg/ijznaJav7jvbu2T6FO/GqFMFBpjrsySEfAy7Q=
Subject key identifier: DF:20:DF:F3:B7:0A:40:93:33:9D:1C:4A:54:00:85:82:27:81:31:D3
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 019F91DB381EF292A845550AE431049C61BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 02:01:30 +0000
Manifest this update: Fri 24 Jul 2026 02:01:30 +0000
Manifest next update: Sat 25 Jul 2026 02:01:30 +0000
Files and hashes: 1: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (hash: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: rNBiyGtVwdXt4oZ5ql/ok/Sxk21n9HBs0J0fL7wxfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:38:1e:f2:92:a8:45:55:0a:e4:31:04:9c:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Jul 24 02:01:30 2026 GMT
Not After : Jul 25 02:01:30 2026 GMT
Subject: CN=df20dff3b70a4093339d1c4a54008582278131d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:8c:2d:e7:da:61:57:29:6e:34:0d:9f:b9:
a1:09:92:4f:1b:f9:84:c2:6a:db:e5:3b:30:e2:73:
80:07:a6:02:7d:ba:5f:11:ce:25:b8:37:89:88:85:
9c:0b:72:97:25:e1:fd:2d:d0:8c:9a:39:27:9d:b9:
b7:21:4d:c5:44:68:28:66:9e:4f:1c:e1:ca:8b:35:
13:d1:0d:06:ad:09:14:6e:e2:bc:46:fe:44:c1:a6:
dc:a6:31:1d:81:64:18:1b:78:f9:34:ea:bb:32:9a:
18:cd:e7:e8:d2:b7:fd:e1:9d:af:57:a5:53:13:91:
78:e2:4a:9a:0e:00:78:72:07:ba:0f:e0:89:6d:af:
af:95:6e:9a:68:c3:39:93:ee:4d:db:86:03:7a:ca:
17:ca:d6:2d:29:1c:4f:b7:14:e4:73:c2:9e:0f:20:
a3:41:84:ca:d2:e8:5d:8a:f0:df:6f:95:c6:03:99:
8a:f2:c8:d1:51:2c:3f:cc:a6:45:f7:f0:d5:a1:89:
c8:f8:f1:7c:f8:10:54:dc:1c:f7:17:01:66:f6:0c:
4c:f0:96:ea:2e:19:7c:98:62:97:ee:79:6b:0c:4d:
c3:15:fc:0f:30:53:bc:e3:b6:61:e7:d8:93:98:a0:
01:53:55:75:14:e6:12:f8:6d:34:a9:7d:1b:33:52:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:DF:F3:B7:0A:40:93:33:9D:1C:4A:54:00:85:82:27:81:31:D3
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:45:dc:05:7e:f9:08:55:ce:98:1d:55:71:93:1b:05:25:
bb:1d:30:60:dc:7e:23:aa:78:4c:85:5f:9f:fe:ef:ad:9a:6c:
23:58:36:4b:ce:7d:31:8e:12:58:5b:18:a9:66:2f:62:f1:72:
9b:5a:07:a3:59:18:8e:0a:64:99:d8:48:97:5b:86:c9:61:4e:
15:13:33:1a:3b:69:c2:bf:56:43:fe:cf:58:8f:94:7c:f1:02:
97:e3:81:58:99:9a:6a:d1:bb:22:e1:b4:76:e2:99:fe:dd:47:
62:1c:1f:24:9d:86:8a:f6:c7:f6:a9:ab:ce:f3:d5:89:90:fa:
26:fa:8e:7d:b2:8f:15:53:43:95:4d:6f:a5:5d:ce:cc:1e:bf:
b6:e7:8b:0f:86:6f:2d:9f:56:ec:cf:c1:d9:02:4f:b0:6c:12:
12:7c:fc:f7:27:92:98:d3:6f:bd:03:14:47:06:57:2b:e5:5c:
ab:63:e7:f8:3e:54:0b:fd:75:ae:b1:29:dc:50:17:76:b1:a2:
6b:2c:9a:68:93:a7:c8:c0:28:bc:fa:15:c4:b6:6b:c1:82:f6:
52:2e:27:50:aa:0f:87:df:2b:32:36:2c:13:ab:91:64:52:a0:
0d:30:bd:d7:8f:39:d0:30:af:6f:a7:2b:ef:ce:1d:c7:41:7d:
b0:26:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:37 2026 by rpki-client