Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: B5SLuOPf/ctojgT3FJoXEFco4UDAfJm8jWyEV26ljpM=
Subject key identifier: 01:CA:8D:57:F1:08:71:2B:66:61:0B:3C:54:54:C1:C6:93:4C:A0:69
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019F932415BAD57B8C4F420848324ACAC784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:43 +0000
Manifest this update: Fri 24 Jul 2026 08:00:43 +0000
Manifest next update: Sat 25 Jul 2026 08:00:43 +0000
Files and hashes: 1: 1-DKuT0Y95446hJar0aywH5NXXto.roa (hash: 4mgppEdu742P8IDESBHDFQTYQI/R8xwD+SJ+IXCYWM8=)
2: 6M-8u5qByP1ggl6JEnWWtX94ybY.roa (hash: l+WD+P0RUvIhdtRWjkkKIzP6RPO3rfOXr22R2FZ6eyo=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: PhDd2Mi/wYqAx8pYL08/zGZXbgh2ciLFnbMAP073WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:15:ba:d5:7b:8c:4f:42:08:48:32:4a:ca:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jul 24 08:00:43 2026 GMT
Not After : Jul 25 08:00:43 2026 GMT
Subject: CN=01ca8d57f108712b66610b3c5454c1c6934ca069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:c7:ce:f0:43:ca:f8:6d:cb:5a:93:73:0a:
0f:19:70:76:15:63:98:d4:72:78:a0:5e:45:bd:5c:
e7:5e:8e:f6:6a:a4:55:b7:e7:43:0f:d7:43:40:b1:
f9:48:62:3f:84:51:46:92:7f:bf:52:60:d5:be:51:
24:7a:3c:b4:1c:99:bd:dc:64:25:06:e2:f6:eb:a7:
5a:37:71:7d:1b:c3:48:99:da:8f:b2:5e:ac:5a:d5:
33:d0:a7:75:03:60:36:9c:65:d5:46:77:85:5a:ea:
f1:01:4f:1f:20:36:a4:48:7a:a9:b5:15:c9:ff:cb:
9f:36:8e:2d:cb:20:1a:f3:0a:e6:ca:6e:52:7c:40:
fe:19:4f:eb:2d:8d:ff:6e:a9:e1:18:1a:b1:67:a4:
1b:ba:e4:f5:aa:14:6b:62:64:6e:3b:78:07:cd:b9:
67:99:2f:23:c5:15:90:e4:c6:07:7b:b1:63:64:a8:
cf:62:c3:91:7e:f2:e3:22:58:50:36:30:b9:db:8f:
b9:c0:3f:01:ce:d7:86:be:26:ca:28:1c:91:70:b3:
db:25:1c:bc:0e:37:0c:30:81:cc:f3:c8:2b:d8:df:
30:a0:c1:d3:90:c2:8b:0b:77:07:50:a8:08:08:73:
e4:f0:c9:16:67:38:5e:05:46:ac:ae:e6:55:06:7a:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:8D:57:F1:08:71:2B:66:61:0B:3C:54:54:C1:C6:93:4C:A0:69
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:73:18:f7:10:db:36:37:7a:2e:6c:fb:e9:8b:f6:be:f4:62:
dc:1b:71:c9:c8:aa:4f:bf:a7:65:2d:94:25:ca:71:ec:f8:c8:
5b:00:66:62:a5:21:eb:e3:15:88:fc:7d:1c:bf:3a:88:0b:44:
72:b7:d2:ab:40:77:fb:52:76:f5:d5:23:23:a9:43:98:30:ff:
26:60:a9:80:75:f5:7f:29:bb:77:65:f9:dc:ae:bf:71:ec:45:
6e:a7:1f:84:73:a7:d4:11:63:2d:d8:19:32:48:1c:b1:6b:09:
ed:bd:d4:eb:a0:e9:c4:fa:1f:eb:e3:53:8c:2b:1f:6f:18:aa:
0a:e6:1c:a8:21:b3:6e:bc:76:5d:58:e9:e6:58:be:b3:2f:bc:
5f:17:4e:d7:b6:ba:09:05:52:3f:66:7d:7d:d8:72:1c:6d:3e:
41:99:9a:22:be:c9:5e:8c:e8:bb:d4:45:08:9d:da:b9:57:59:
02:f5:79:48:b2:f3:74:77:58:f3:07:1e:82:44:76:61:09:a7:
ba:7e:61:72:e9:dd:f2:1d:32:51:56:52:f4:06:ab:23:85:ad:
0d:30:09:15:ae:6d:a3:f9:6b:f1:2f:73:9b:c1:2c:93:15:fd:
92:48:fb:f8:b8:c9:30:0b:73:d8:17:94:36:d4:f5:71:30:e6:
78:0c:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:08 2026 by rpki-client