
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: z2tPyMZucmMJ04ldhERTRVtmhgpMVrJtM59zv/7VpYA=
Subject key identifier: 40:ED:6B:53:52:8C:27:6C:8A:ED:DA:38:67:4F:32:F6:A3:13:7F:A2
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 019F9248DB244D1840FD942A4ED1E1EB92E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 0B1C
Signing time: Fri 24 Jul 2026 04:01:15 +0000
Manifest this update: Fri 24 Jul 2026 04:01:15 +0000
Manifest next update: Sat 25 Jul 2026 04:01:15 +0000
Files and hashes: 1: Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa (hash: kvdg8wCS9egZQzAgHG4zTvTOgP+Bu8A9k8hcSeFomOA=)
2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: 3g/177c/6JH6LM9MjO47FZAJn05+NePcWaqXw2dYZYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:db:24:4d:18:40:fd:94:2a:4e:d1:e1:eb:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Jul 24 04:01:15 2026 GMT
Not After : Jul 25 04:01:15 2026 GMT
Subject: CN=40ed6b53528c276c8aedda38674f32f6a3137fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:d7:db:e7:9f:9c:5d:0d:20:e7:d7:6e:9c:
56:90:bc:eb:83:10:55:3b:68:27:20:48:e9:4b:f3:
a2:7e:c4:c9:a1:f3:d7:f7:15:b6:83:3e:e7:dd:56:
21:e0:e0:80:e3:50:8f:9a:a1:d1:5d:29:3f:3f:a8:
3d:29:00:0f:d4:c9:9c:88:b8:e6:b5:6f:08:71:c1:
9d:07:67:4b:1e:d2:68:90:5e:bb:df:dc:83:f0:8a:
57:7c:7c:6e:e0:06:c2:3a:29:ef:a1:cf:e0:df:ce:
07:76:b8:ef:69:24:4e:39:5c:08:33:fd:4c:fa:1a:
81:db:19:42:1e:91:a7:a1:86:a0:d4:20:ad:b8:7e:
02:6e:d6:b8:f9:c0:b2:05:7e:2d:42:4b:04:b2:28:
ba:65:e2:3c:d2:f2:c6:55:61:d7:0a:ff:a8:a2:77:
58:c0:06:0b:86:55:4e:38:00:db:5b:b2:c8:82:e6:
f7:f9:87:f3:66:1f:20:45:14:42:71:14:b3:2c:98:
ea:74:31:b2:a5:12:5b:a6:37:ed:73:25:ad:85:65:
3f:b7:81:df:98:ec:0a:33:35:0e:db:1a:18:7f:ce:
75:dc:a1:f8:93:9f:3c:45:b9:92:27:2d:be:00:a3:
88:3e:1b:3b:d5:9e:84:2d:14:f5:52:09:d0:46:f9:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:6B:53:52:8C:27:6C:8A:ED:DA:38:67:4F:32:F6:A3:13:7F:A2
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b8:c8:fc:37:43:58:b9:c9:08:16:9b:88:ea:c7:c3:09:7c:
9c:90:ce:a1:52:d7:4a:da:a7:a8:fe:74:03:e5:02:89:95:67:
a9:0a:a0:f0:2b:01:77:1d:ea:28:74:b2:99:5f:f4:51:b8:db:
27:6d:33:67:f9:34:82:3a:99:49:2e:54:33:25:87:7e:05:69:
ca:79:84:37:c8:4c:03:14:44:0f:6d:22:f1:75:5c:23:92:ac:
1f:06:47:2e:db:24:95:a6:25:9e:c1:f0:18:37:0a:a8:ba:33:
e4:bb:83:bd:09:ad:58:2f:a7:c9:50:0d:e9:b8:a1:7b:9d:f9:
39:d5:02:fb:17:ff:66:2c:b6:cb:27:94:5a:fc:29:d6:a0:d3:
75:30:bd:05:37:8b:fb:61:f4:4e:8d:b9:33:f2:00:75:33:f9:
b4:72:66:ec:82:a0:90:8f:93:11:cd:7f:55:b2:89:09:1b:2c:
5d:86:a9:75:b7:dc:bc:74:c7:98:d1:11:f6:ce:62:7d:cb:a2:
17:e4:83:3d:65:91:ff:c0:be:53:14:e6:92:b1:5e:c3:ae:bf:
52:9b:7e:79:4b:80:00:da:6c:a7:e6:8e:c8:df:23:e1:8e:a4:
8d:d4:e8:4f:ae:01:1c:ae:12:7c:78:0a:b5:8f:76:dd:ce:c5:
af:3f:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:36 2026 by rpki-client