Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
File: oLwReyvH4FrFwOs1FaF0GBMP3oI.mft (raw, json)
Hash identifier: FHWre/bPXoUtrk9dX6Plzpdrs9xVGl3Dcv7XKGI1HTw=
Subject key identifier: 51:23:56:F5:A9:14:FB:F4:40:33:C1:C0:34:66:64:09:68:4C:25:F1
Authority key identifier: A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
Certificate issuer: /CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Certificate serial: 019F935C1C43665FB71D8F393853BD429547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:54 +0000
Manifest this update: Fri 24 Jul 2026 09:01:54 +0000
Manifest next update: Sat 25 Jul 2026 09:01:54 +0000
Files and hashes: 1: MMGfobkcPvFzzP7MQZnUAsVVZp8.roa (hash: WGW0WSapBDRofWXt8DtNDTEwEorTNTg8AzDt4Ue2MDI=)
2: oLwReyvH4FrFwOs1FaF0GBMP3oI.crl (hash: Kid6R7ekAwz/TbyUZ/8/Hp1G/KmHFD1MMPTVkAl28Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:1c:43:66:5f:b7:1d:8f:39:38:53:bd:42:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Validity
Not Before: Jul 24 09:01:54 2026 GMT
Not After : Jul 25 09:01:54 2026 GMT
Subject: CN=512356f5a914fbf44033c1c034666409684c25f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:78:2d:a1:1b:12:52:99:24:14:4e:59:77:
04:2b:cd:4e:61:e8:47:1d:70:f8:10:38:85:ce:2c:
1f:09:4b:c3:9c:05:27:3a:b0:8f:5e:00:c8:95:02:
5e:2b:a6:78:74:7a:7d:a0:4d:94:d6:d7:ca:7a:8d:
04:21:0f:83:8a:81:ce:02:34:f4:88:53:27:b4:af:
b5:99:58:a0:13:55:9a:05:5e:d1:e7:82:c5:a2:8f:
5f:60:b4:37:42:22:7f:c8:75:32:e4:76:36:e4:68:
17:05:2a:59:ca:af:a4:b7:ab:47:d7:67:be:81:59:
df:6d:85:23:63:2e:cf:14:89:e9:6b:93:4d:38:af:
88:af:89:b9:f8:68:95:9b:81:46:30:19:8d:51:31:
1a:43:9b:c5:f6:53:b4:5b:25:4f:fd:a9:ff:3b:1f:
c3:23:2a:f0:24:12:40:62:57:a2:d7:f1:59:5a:9b:
32:86:a0:46:89:f4:ec:c9:c5:e8:e1:c8:7f:f3:59:
1e:c7:ba:f7:32:9e:f2:1a:5b:58:89:37:a3:11:af:
55:62:d6:41:81:d4:41:ea:c5:07:57:1b:f6:fa:d6:
34:5f:c2:a2:02:f1:b1:a1:2a:d7:57:9e:41:35:f5:
71:5f:e1:0f:67:b0:8e:db:c8:c6:0c:3a:e0:45:b3:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:56:F5:A9:14:FB:F4:40:33:C1:C0:34:66:64:09:68:4C:25:F1
X509v3 Authority Key Identifier:
keyid:A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c0:9f:c3:29:33:cd:75:3d:51:23:12:aa:18:ad:15:d3:d9:
9b:55:1f:7d:a7:44:dc:37:3e:58:29:60:2c:b7:e1:fc:75:51:
73:41:7d:7a:ac:be:5b:33:9c:a7:bd:ae:90:78:5b:06:2d:78:
16:5d:14:ae:a1:52:5c:27:90:d6:2d:a3:1d:47:07:cb:97:4e:
c5:41:71:ae:d6:b4:6a:3c:44:af:d7:36:86:b5:03:b6:e7:4c:
07:3c:82:25:38:38:8a:5a:e5:37:9b:7d:71:9e:41:ce:07:12:
a7:8e:24:4a:67:92:38:13:84:51:4a:37:c7:15:21:d0:91:fc:
76:e3:16:b6:c6:f1:20:64:8e:8a:8b:56:69:eb:a6:87:32:b9:
77:82:86:80:95:c7:9b:9e:09:bc:f9:2c:59:de:a6:c3:14:73:
48:dd:76:ce:2f:88:88:03:23:02:60:d8:00:c4:10:e8:a0:8c:
d5:f2:bb:85:9f:4a:1d:e1:ca:bf:a5:c6:f4:86:67:58:80:e1:
ef:25:01:55:5f:b0:69:ba:ca:5b:7d:00:5f:a8:fd:d4:df:eb:
4d:9d:ee:b9:23:72:18:b9:8b:a5:0e:94:e7:92:9b:89:f2:92:
ab:f2:51:53:10:e5:22:c2:03:8d:85:e6:09:ef:72:ee:39:37:
ed:c0:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:19 2026 by rpki-client