Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: oB/t2H/CV3ReDIou2vZEhC/wfavUVdbZ52iewNqSc9U=
Subject key identifier: 5B:47:DE:B6:8C:DF:5F:17:46:01:7E:65:A9:86:7B:AF:7F:BB:23:67
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 019F95B7284F947C00EF28AC6C1289B3290F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 20:00:36 +0000
Manifest this update: Fri 24 Jul 2026 20:00:36 +0000
Manifest next update: Sat 25 Jul 2026 20:00:36 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: hKplDvIplBPR85cCSrn9jNrJck+wv7BlVNfqksqtRRA=)
2: jr5zaX72B88EPr7fF-QkGP5Dx98.roa (hash: oiKQk5Ow8W6lhAid4jGIfOCDhwPg0xWcUUAnbvjLz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:28:4f:94:7c:00:ef:28:ac:6c:12:89:b3:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jul 24 20:00:36 2026 GMT
Not After : Jul 25 20:00:36 2026 GMT
Subject: CN=5b47deb68cdf5f1746017e65a9867baf7fbb2367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:57:44:31:be:77:e3:32:40:2d:37:7c:4c:
a2:6b:6f:01:fb:10:1a:03:09:84:54:8a:84:a5:c4:
5d:5b:61:49:68:11:8f:81:b7:89:2a:60:d5:15:14:
34:40:28:83:55:74:d9:96:9d:c0:c6:b9:8c:22:2e:
52:3a:ed:e3:67:b0:31:0f:38:8e:a4:9c:1f:82:c5:
69:e3:6f:a4:4f:a3:ce:d3:dd:ef:bc:ed:27:bc:42:
6c:3f:da:03:20:2c:74:47:e1:af:29:68:98:0f:6c:
21:0d:5d:49:98:fe:07:c0:5e:8a:4e:af:ab:7c:d2:
cc:2f:d6:c2:b0:79:01:66:5d:9a:a3:ed:2d:af:46:
d9:12:e4:9d:d7:1b:8c:2c:0a:76:77:9b:45:56:0f:
4a:f5:8c:ce:18:30:39:fc:69:c3:64:e2:7b:cf:bc:
4c:0e:46:4b:b0:38:3e:67:67:38:43:ea:a9:c4:cf:
b3:a5:65:fb:51:b5:cd:4d:42:fc:68:6f:e9:34:4f:
a9:20:b7:ec:ed:1d:f4:f9:61:30:11:38:3b:e2:b5:
ca:05:87:31:24:9e:52:2a:25:c0:c1:50:09:a6:33:
1e:b1:7e:00:43:47:fd:d0:45:00:0f:57:8e:c4:21:
f5:f9:99:93:f7:91:b8:b6:6a:b7:54:df:dd:f5:ba:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:DE:B6:8C:DF:5F:17:46:01:7E:65:A9:86:7B:AF:7F:BB:23:67
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6b:f7:c6:16:12:3a:5a:ff:5c:0f:48:d2:d6:26:c2:86:97:
09:85:62:bc:5c:ce:a0:cb:95:d1:08:62:3d:03:2c:47:55:6f:
90:dd:d0:d6:a7:e7:a3:cc:ea:77:3a:19:72:01:74:21:05:3b:
a1:fe:b5:8c:39:31:80:bf:f8:bd:00:d3:f1:81:74:65:a1:df:
23:b6:d7:47:60:71:1d:6f:1f:d3:61:10:f7:dc:4f:e2:93:53:
a9:54:7e:e7:4b:60:0b:da:2b:61:29:6d:00:2f:27:26:95:f1:
1d:97:14:d7:6f:9e:ea:68:5a:0c:bc:66:0a:6d:ec:40:2a:e1:
53:e9:eb:eb:6f:86:fa:24:82:c6:a9:6f:65:b3:03:fc:b1:69:
fe:85:1b:89:f0:46:7a:51:64:f0:cc:82:10:df:05:c0:dd:83:
3d:b9:8d:b9:30:af:c6:f8:25:e4:ff:2b:91:29:55:f2:9d:a1:
60:78:c5:e2:c6:d1:4f:91:4f:61:c3:00:a2:bc:46:aa:e6:89:
46:a5:e8:4a:d9:c7:a1:68:ed:3d:8a:52:93:ae:c5:f2:81:a9:
02:50:8a:f0:0b:d9:81:28:2b:ff:20:16:61:cb:68:d9:0f:21:
ae:1d:a5:2c:15:bb:c6:1f:06:86:0f:a9:87:19:bc:ee:12:93:
d9:6a:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:55 2026 by rpki-client