Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: p9EARaDuHIc3iLGNb7OINMc4ZeT0Di3NMdHhIDvuY2E=
Subject key identifier: 96:D1:9E:D0:3C:9B:FA:D1:69:FE:8E:90:F8:DC:41:A2:5C:78:E4:9B
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 019F94DB2B2B405B6D279B067E7E91B0D990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 1877
Signing time: Fri 24 Jul 2026 16:00:19 +0000
Manifest this update: Fri 24 Jul 2026 16:00:19 +0000
Manifest next update: Sat 25 Jul 2026 16:00:19 +0000
Files and hashes: 1: 1-5k5xjduxlogWOiXreI7TJnM024.roa (hash: IbwzFMhgk6SMkYxfNDiP7rzrsaMadpQ6ZIFm72M7F0g=)
2: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: OS4AdbUya9BkLrMSL4NA/yBq3DfukCLQiJMsI+nrUEc=)
3: hoZB4uwEY_q6KMB_f7K8Wv-PN1E.roa (hash: oRaNPiY2nbAHYZp302rtEoBRBq8TpuSrhYRfxHIcF88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:2b:2b:40:5b:6d:27:9b:06:7e:7e:91:b0:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Jul 24 16:00:19 2026 GMT
Not After : Jul 25 16:00:19 2026 GMT
Subject: CN=96d19ed03c9bfad169fe8e90f8dc41a25c78e49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:9e:9a:e1:62:bd:63:cc:38:50:62:fd:34:
b3:8f:00:99:d1:b5:5a:12:74:d8:c1:cc:74:2e:17:
6b:66:f6:aa:91:65:19:c5:0c:cd:cd:43:4c:32:2c:
26:4d:79:bc:6c:77:7e:b4:3f:f5:d9:58:32:f0:5a:
08:5b:b0:1b:53:04:8f:ec:c6:b0:4d:f5:ca:e2:25:
1d:0f:82:24:bc:3b:09:12:c8:9f:1a:07:d2:1f:b1:
61:bc:8f:ef:4f:b8:8f:50:56:f4:b2:63:96:ff:d3:
ee:5e:66:ab:19:22:4b:62:94:cc:2e:6c:9f:79:d9:
2d:ac:5f:61:d5:89:03:68:b6:5d:a2:94:64:38:35:
79:a3:93:37:5e:53:28:1b:02:d1:29:85:ef:84:c6:
f0:dc:20:f1:ea:a3:99:7f:08:eb:b2:24:4a:3a:ba:
be:7d:bd:87:bb:b9:d5:ad:97:7d:c8:8f:8d:16:3b:
bd:8d:4b:25:bb:b5:51:5f:57:74:79:1e:5e:d3:84:
bc:23:46:7d:38:05:7c:b1:9e:e7:aa:c2:1d:77:e0:
d8:bc:c0:86:c6:1b:e4:d5:fe:b8:e6:48:4b:d3:4a:
14:fe:2b:62:92:60:8e:41:da:a8:82:6c:b2:05:38:
f4:a4:00:47:bf:2f:11:64:65:5e:88:99:c8:9f:56:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:9E:D0:3C:9B:FA:D1:69:FE:8E:90:F8:DC:41:A2:5C:78:E4:9B
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:99:83:06:b0:2d:47:27:7c:a2:fb:90:23:e7:c0:e9:9e:b4:
4c:a7:f1:f0:b1:a1:2c:f8:f1:04:9d:60:72:d9:ce:5d:56:d5:
02:a4:f4:bc:c5:04:c2:8e:7d:84:9f:16:44:8d:cb:c1:fc:a3:
14:65:ef:46:29:62:08:88:45:f7:37:5e:d7:56:37:9a:d8:55:
56:97:35:4e:6f:21:da:c7:db:5a:b9:97:7c:c7:91:2f:51:87:
49:d7:a7:7d:a8:d1:2c:09:63:10:d2:66:f5:e5:22:13:5a:d4:
ba:af:55:a4:9b:26:d3:f3:d3:86:d2:46:d1:df:59:fb:97:27:
db:f8:de:67:39:f8:77:af:f3:97:d3:be:ab:07:d1:b4:19:c8:
c3:35:03:d9:64:d2:a8:d9:c7:b9:c3:f9:2c:c5:2f:8f:9d:d5:
cc:71:06:dd:39:21:d0:ad:c8:f6:12:31:61:2c:cb:b1:42:9d:
1f:a1:0b:d0:98:56:74:ae:97:8c:65:72:46:14:97:88:3c:f6:
17:d7:b7:be:8e:7e:5b:3e:d4:01:f8:d5:9a:4f:47:e0:a3:e5:
6b:5e:d4:dc:a8:5f:5a:1c:69:f9:5a:cb:ff:ee:55:aa:0e:6a:
7e:63:64:b6:64:21:ac:e2:3c:8b:41:19:4f:a3:d3:53:6d:b1:
fa:6f:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:08:39 2026 by rpki-client