Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: 5eT/DpA1f1zESk57rd6btUjJZc0+rZlnSYZafhT/5+w=
Subject key identifier: EF:73:08:2C:2C:EF:15:36:5F:21:BD:0E:16:85:1A:A9:88:02:A9:DA
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019F92B62F9DAA7DCD83C23609FC75FC4195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 0137
Signing time: Fri 24 Jul 2026 06:00:40 +0000
Manifest this update: Fri 24 Jul 2026 06:00:40 +0000
Manifest next update: Sat 25 Jul 2026 06:00:40 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: hpw740REppTrivfdQTu9SPXYtLu5nbOyMePkG/GXFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:2f:9d:aa:7d:cd:83:c2:36:09:fc:75:fc:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Jul 24 06:00:40 2026 GMT
Not After : Jul 25 06:00:40 2026 GMT
Subject: CN=ef73082c2cef15365f21bd0e16851aa98802a9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:2b:da:25:39:4f:96:e0:cd:a8:44:a5:e5:
92:85:38:c3:a7:10:f5:83:70:51:d2:4a:af:3a:ec:
48:4e:d9:b5:4a:38:bd:0c:a2:1d:af:dc:7e:31:7c:
20:33:1c:3e:3d:27:bb:8c:b0:9c:2d:2b:8b:8b:d5:
1b:0f:ae:2e:11:69:0b:69:74:1e:55:79:f0:bd:ec:
89:49:c1:5e:56:b2:1b:03:36:e4:7a:57:39:bc:a0:
9d:f1:0c:0c:70:3a:ce:41:bb:e9:2a:c9:44:56:4f:
08:54:16:5a:59:5f:2a:5d:73:d9:77:48:12:99:d5:
1c:54:95:2d:5f:0b:a0:38:66:d7:c2:f5:ce:b7:90:
32:c3:ee:01:e3:46:7f:e2:4d:e3:dc:0c:28:59:a1:
f1:ee:33:c4:67:35:18:24:e8:0c:8a:ce:f3:a1:7a:
3f:d2:0e:e8:59:d3:58:5a:9b:d1:59:b2:e0:35:71:
27:91:7f:da:7b:8f:77:8f:0d:3b:dc:74:ae:79:87:
de:5d:a7:96:85:20:3c:48:67:96:cf:a6:92:34:2d:
05:3b:02:83:03:b7:6a:ea:af:9d:1e:90:f9:a5:5f:
98:fa:07:d6:ca:a8:cf:fb:ab:fd:14:d0:2a:0c:1f:
04:fd:67:80:cc:6b:56:8d:d9:c5:b1:a9:1f:4a:fd:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:08:2C:2C:EF:15:36:5F:21:BD:0E:16:85:1A:A9:88:02:A9:DA
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:48:54:8a:bb:02:0a:43:ee:c7:e7:91:e5:f2:ba:3a:74:75:
0b:b7:f2:33:43:0a:4e:16:67:91:44:58:37:47:a2:4e:e7:00:
47:a1:c6:8e:5c:2a:bc:5e:15:21:40:ee:f3:44:cf:22:33:e8:
07:d7:70:4d:6c:2f:0d:fd:33:61:6b:ea:ab:c7:c2:78:03:c7:
38:f2:b2:fa:7a:c0:ba:ba:e8:a4:66:88:b2:a1:8c:aa:48:a3:
8c:82:11:00:73:bc:55:bf:a3:4d:d6:1f:8f:40:e9:f5:4b:56:
71:be:1a:fa:5e:ee:6f:88:9e:b4:7e:1e:be:0e:19:29:db:ec:
bc:a0:28:00:80:18:9c:7f:a7:78:38:ef:9f:0c:40:35:88:8e:
e8:99:52:21:79:f3:5f:6b:90:fa:0d:02:fe:f9:c6:77:bd:ae:
d5:63:3f:0b:10:80:09:44:79:88:1c:f0:62:a9:43:b9:be:ec:
4f:13:f9:fc:2a:51:25:01:89:66:1a:54:dd:44:6e:81:f3:ec:
8e:33:94:39:66:72:b6:0a:df:f4:d9:4a:c3:ea:f5:15:88:64:
11:aa:c6:5c:72:80:7c:4b:b1:6c:95:3b:39:0e:5a:3e:f5:c0:
11:7c:b9:98:a9:87:7d:37:0d:a9:03:52:9f:48:73:6d:80:6f:
67:bd:9b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sti+dqn3Ng8I2Cfx1/EGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNmJkMzA4Zjc0MzI4OGFmNGNjMjExOTk3M2VjOGRjMDI4
OTM3ZjAwHhcNMjYwNzI0MDYwMDQwWhcNMjYwNzI1MDYwMDQwWjAzMTEwLwYDVQQD
EyhlZjczMDgyYzJjZWYxNTM2NWYyMWJkMGUxNjg1MWFhOTg4MDJhOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVgr2iU5T5bgzahEpeWShTjDpxD1
g3BR0kqvOuxITtm1Sji9DKIdr9x+MXwgMxw+PSe7jLCcLSuLi9UbD64uEWkLaXQe
VXnwveyJScFeVrIbAzbkelc5vKCd8QwMcDrOQbvpKslEVk8IVBZaWV8qXXPZd0gS
mdUcVJUtXwugOGbXwvXOt5Ayw+4B40Z/4k3j3AwoWaHx7jPEZzUYJOgMis7zoXo/
0g7oWdNYWpvRWbLgNXEnkX/ae493jw073HSueYfeXaeWhSA8SGeWz6aSNC0FOwKD
A7dq6q+dHpD5pV+Y+gfWyqjP+6v9FNAqDB8E/WeAzGtWjdnFsakfSv1HkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9zCCws7xU2XyG9DhaFGqmIAqnaMB8GA1UdIwQY
MBaAFKBr0wj3QyiK9MwhGZc+yNwCiTfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMWY1MzAtMzk3Ny00OGI4LWFlOGQt
YmE0MWJjMTk2MGQ4LzEvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jMWY1MzAtMzk3Ny00OGI4LWFlOGQtYmE0MWJjMTk2MGQ4
LzEvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0hUirsC
CkPux+eR5fK6OnR1C7fyM0MKThZnkURYN0eiTucAR6HGjlwqvF4VIUDu80TPIjPo
B9dwTWwvDf0zYWvqq8fCeAPHOPKy+nrAurropGaIsqGMqkijjIIRAHO8Vb+jTdYf
j0Dp9UtWcb4a+l7ub4ietH4evg4ZKdvsvKAoAIAYnH+neDjvnwxANYiO6JlSIXnz
X2uQ+g0C/vnGd72u1WM/CxCACUR5iBzwYqlDub7sTxP5/CpRJQGJZhpU3URugfPs
jjOUOWZytgrf9NlKw+r1FYhkEarGXHKAfEuxbJU7OQ5aPvXAEXy5mKmHfTcNqQNS
n0hzbYBvZ72bQQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:08 2026 by rpki-client