Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: hMh7CbKg3u57PWqx+B7zDv3WUv7i5/gY17wdjLpXZ0Q=
Subject key identifier: 7F:14:4C:7F:ED:D7:36:78:82:4A:64:FA:63:E6:B0:CA:FB:FC:87:3C
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 019F93FFE8C7A95A111505F6A6357E18DB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 12:00:49 +0000
Manifest this update: Fri 24 Jul 2026 12:00:49 +0000
Manifest next update: Sat 25 Jul 2026 12:00:49 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: vbo2D5LJK4CsZaqbGyveE3cIJbfSW1HXlGSn2QNnbLs=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:e8:c7:a9:5a:11:15:05:f6:a6:35:7e:18:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jul 24 12:00:49 2026 GMT
Not After : Jul 25 12:00:49 2026 GMT
Subject: CN=7f144c7fedd73678824a64fa63e6b0cafbfc873c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:d0:a8:ec:70:ab:d8:2e:9a:e8:3a:10:35:
fc:c6:73:54:ba:10:ad:91:23:d6:d5:4e:f2:89:17:
4e:ba:1f:98:40:5a:b4:71:2c:ec:ed:cd:91:43:bd:
5a:36:83:3c:60:87:70:15:ca:da:b1:1a:99:e5:d9:
06:c5:e8:75:7a:a1:a0:1c:14:68:e7:3e:25:24:30:
44:00:0f:53:23:68:3a:c4:f8:18:5f:9c:7a:c1:73:
07:95:6e:4e:0b:0a:90:7c:6e:e9:15:a6:25:87:1f:
1e:c9:28:c3:e0:d4:4e:e5:f4:99:1d:30:50:22:fa:
88:3d:95:01:26:b5:11:c9:ce:3b:7d:2c:98:1f:18:
87:7b:55:9b:5e:e9:4a:a3:15:6a:39:91:31:ca:77:
34:e5:21:76:dd:d4:bf:21:3d:f9:48:bb:56:7f:04:
6a:d3:47:16:f8:0e:14:13:04:d2:15:5d:92:39:9c:
2e:ba:82:11:f4:e7:2a:0f:97:a7:ee:7b:4d:25:26:
fb:93:fe:76:67:fa:01:4d:c8:9e:46:5b:57:3a:8c:
e3:35:a4:3e:1e:53:67:55:f3:d8:03:bc:82:e7:6d:
c6:e9:e7:d5:5f:34:e8:69:be:52:b9:50:0e:b2:8d:
84:ca:5b:32:b1:88:57:4e:ae:db:bf:eb:98:a3:df:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:4C:7F:ED:D7:36:78:82:4A:64:FA:63:E6:B0:CA:FB:FC:87:3C
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:95:cd:85:4f:bc:f8:ba:99:16:84:e6:b5:f7:49:52:e8:0f:
ce:f4:e4:3e:85:f4:f4:9e:4e:f6:88:38:11:19:38:33:ba:2f:
25:d5:39:76:f3:aa:69:cf:9d:66:87:3e:3e:a8:7c:8b:73:45:
88:62:3c:5f:39:69:ed:5a:8c:e9:3f:28:9f:e6:13:c2:12:04:
17:5d:6b:41:cf:c2:d0:cd:5b:07:00:4c:b2:75:81:1a:7c:99:
83:94:36:6d:b5:b4:56:51:e3:ee:28:ea:23:68:d2:33:c8:76:
ed:38:e1:66:10:3a:4c:c8:7b:10:9d:97:79:57:8b:0d:8c:40:
65:71:f0:e2:fa:1e:c6:50:79:e1:9e:a9:45:90:7c:8a:6c:a5:
b7:25:06:fe:23:d4:01:d3:64:fb:f7:f5:5e:52:9d:f1:9a:55:
5a:22:55:f9:7c:cc:31:db:0d:33:3b:b0:32:6f:9d:89:a7:9d:
0a:42:a6:3a:d8:8a:e7:9a:0d:af:c0:20:53:78:dc:11:b2:22:
ba:5e:21:de:09:91:e0:78:ee:47:7a:01:d1:fb:5f:8c:26:51:
70:66:08:01:ee:f8:fb:0c:44:ff:2b:3f:b1:83:72:b0:1d:9d:
da:82:14:d5:aa:d6:56:55:c6:36:92:90:74:4f:e7:c9:f5:84:
eb:96:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:05 2026 by rpki-client