Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File: OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier: x5FprHxW0+xrdtxB9mjFQKP1vYlw2eAioilO0WeELOc=
Subject key identifier: 7D:02:B0:FB:0C:22:E9:8B:38:C7:63:F3:94:04:D3:5B:F9:8C:70:76
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer: /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial: 019F8FEC9AF02392725B19B20047DC49753C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number: 0BD8
Signing time: Thu 23 Jul 2026 17:01:15 +0000
Manifest this update: Thu 23 Jul 2026 17:01:15 +0000
Manifest next update: Fri 24 Jul 2026 17:01:15 +0000
Files and hashes: 1: 5hv4H4ReHOgoU2j6GHM3gxKuVNM.asa (hash: S/TCcSWUgUNlvh+ikvdbt5fB2XvB1d7QClP906FqOhc=)
2: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: lU+s8EFk8elBY/RH2MxACN24VzqmaU4wVtGGJ7kxcwI=)
3: UlsTdR6iXILlELiEa_LKJSYv9dE.roa (hash: TsAC0FSS4xzyyilfdtL8K8wERh4UskS3qmNYtY3fKi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:9a:f0:23:92:72:5b:19:b2:00:47:dc:49:75:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Validity
Not Before: Jul 23 17:01:15 2026 GMT
Not After : Jul 24 17:01:15 2026 GMT
Subject: CN=7d02b0fb0c22e98b38c763f39404d35bf98c7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:69:ac:ba:a0:d6:29:1f:93:c9:cf:fd:d3:
c0:f3:62:37:8f:b4:28:6c:e0:ca:b9:2c:9d:ec:e9:
52:c7:05:db:5d:e2:87:a9:2a:a9:68:9b:bd:01:6c:
93:b9:b1:c9:b1:88:06:e2:79:f3:f3:fc:18:e7:bd:
82:9c:35:37:fb:20:2a:4b:f9:5c:49:71:33:80:90:
ed:ef:c6:90:ca:f3:4a:a5:36:96:e5:2e:d8:f3:08:
4f:54:6a:26:1b:b6:c5:dc:3e:3b:c0:bd:e8:88:fc:
c2:77:c9:c3:d2:db:fe:f4:41:35:fb:77:02:f3:ec:
68:51:66:8f:21:c0:dd:1b:8c:b4:3d:a3:e2:61:17:
d7:e0:08:55:87:6c:1c:bd:c0:c3:0b:03:37:f9:9a:
2e:28:85:25:07:7b:70:28:46:74:32:c7:6c:dc:32:
71:0d:9e:3f:29:18:32:e5:12:93:43:e1:1f:7d:bb:
5c:4b:86:98:f0:80:a1:4c:7d:aa:ce:6b:82:d6:b4:
64:e2:e3:a0:d2:87:ee:1c:ec:08:6d:12:d3:39:1a:
8b:9e:65:23:04:41:60:a8:96:5d:5a:af:3b:26:5e:
15:16:c9:fa:8e:09:17:e8:de:fb:76:2e:5b:3f:b6:
d0:94:be:f1:97:a1:a5:41:3c:84:bb:4b:9b:ab:5f:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:B0:FB:0C:22:E9:8B:38:C7:63:F3:94:04:D3:5B:F9:8C:70:76
X509v3 Authority Key Identifier:
keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:34:48:28:ae:7a:8f:e0:7c:1e:79:63:5c:fd:e5:5d:ec:52:
07:4f:19:37:f6:ad:08:9a:5d:4e:65:db:0a:30:0c:ed:39:5d:
da:b7:56:df:e9:c2:f5:5c:62:e7:0f:77:a8:1c:a4:6b:a6:2f:
a9:16:8f:99:30:6a:32:5a:af:b4:ca:7a:33:2a:13:b4:96:eb:
af:78:7c:dc:65:e9:39:33:a6:db:2e:4d:8e:f3:01:f7:5d:0f:
69:56:1c:17:e5:76:f3:2e:9f:d9:5d:19:d1:12:57:c6:9a:f9:
66:0c:08:51:c6:43:9c:20:71:bf:33:76:a7:5a:71:f5:94:75:
4c:ba:bd:2a:ac:df:68:de:e5:7c:e9:34:ba:61:e6:1c:a2:58:
b4:ca:b1:3c:e0:fe:95:d3:ba:7a:38:98:07:f2:a2:7d:4d:80:
83:fa:b0:70:a9:e8:8a:4c:28:5c:67:c8:e8:7e:9f:ee:bf:72:
3a:5b:b8:b7:c8:b1:ce:64:6b:67:2e:3e:c3:3c:1b:e6:c6:95:
f6:3c:06:b8:22:22:ab:89:ca:b9:3a:f5:3b:6e:47:0b:66:3a:
78:aa:a1:08:97:34:ce:94:15:f6:03:bb:cb:40:ef:24:b8:59:
e2:23:2b:d7:81:f6:75:3a:85:fb:4a:b7:ba:3a:47:5c:d2:2e:
d8:b2:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:57 2026 by rpki-client