Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: UiXfvbUbgWgExMmdM72h3404nbgT9DvJiVoDne2UVuE=
Subject key identifier: 69:B5:38:7A:FB:BC:1B:48:19:42:B0:8F:D8:8B:C5:0E:DF:A5:5B:36
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 019F9247F766E2451FE9A89FBE595698FD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 04:00:17 +0000
Manifest this update: Fri 24 Jul 2026 04:00:17 +0000
Manifest next update: Sat 25 Jul 2026 04:00:17 +0000
Files and hashes: 1: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (hash: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: oDSU8eqXoj68y3J2HHEtt8UOPgKQb7cCLgRETx0IWfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:f7:66:e2:45:1f:e9:a8:9f:be:59:56:98:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Jul 24 04:00:17 2026 GMT
Not After : Jul 25 04:00:17 2026 GMT
Subject: CN=69b5387afbbc1b481942b08fd88bc50edfa55b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:1b:72:21:88:25:26:9d:3c:0b:44:63:09:
54:2d:3d:76:8e:e2:8d:d7:6a:4d:2e:2b:98:ae:c3:
23:6d:4b:f4:fb:ab:92:ac:aa:fe:f2:9f:ad:2d:a4:
1f:07:79:60:16:d2:e5:75:23:3b:af:c5:73:ba:94:
18:e8:fb:c7:7e:0a:4e:6a:00:9e:da:4e:86:68:1d:
f6:58:2a:a0:61:6d:91:de:1a:84:2e:08:46:b4:27:
28:c8:c5:52:45:c0:fc:96:d0:f6:fd:65:da:8a:f9:
92:f1:2f:c9:be:8d:4d:98:2f:5e:b8:45:e4:ff:e0:
2d:c1:ce:92:90:96:cc:16:06:d6:a0:16:63:0f:1a:
66:10:c8:f5:c8:0b:d4:c1:fa:35:17:a2:b3:1a:61:
5d:10:2e:36:41:a6:96:b0:97:c6:b8:98:dd:85:72:
68:d4:73:8f:7f:35:be:af:59:78:80:13:a6:9a:c7:
8e:3d:33:26:4b:55:cf:6f:ff:17:b4:24:1f:00:8e:
69:b3:fe:2d:4f:43:8b:9b:7d:ca:8b:40:99:b3:78:
3b:3c:6e:bf:f8:8b:fe:52:99:e8:99:0f:37:cb:89:
37:26:15:ea:a5:81:79:08:86:8b:24:94:b1:d2:87:
0e:2c:ac:74:5a:c2:ae:70:69:cb:eb:f9:c0:9f:86:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:38:7A:FB:BC:1B:48:19:42:B0:8F:D8:8B:C5:0E:DF:A5:5B:36
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3d:9b:09:ab:84:ed:11:a2:d9:b6:f3:ca:ed:1b:a2:77:27:
ab:d1:b9:2d:6b:f8:a4:36:7f:61:c6:99:5e:68:b6:73:fb:ac:
44:c0:f3:c1:af:30:20:79:00:5b:67:bf:13:f1:f3:29:e7:e4:
54:10:54:9d:fe:16:b0:74:95:64:cd:96:03:f8:2b:c7:65:04:
fa:7f:2f:a6:40:5b:86:e8:90:02:32:a6:5d:76:05:22:b9:8b:
39:e4:fc:b9:31:91:c8:f7:ad:a7:bb:37:75:c4:14:62:6d:5a:
9f:1a:f6:74:53:a3:8a:ec:33:8e:21:2a:43:0f:d2:6d:3a:26:
93:02:f9:96:83:59:45:17:e0:48:ea:0b:92:05:1a:ac:35:e9:
4f:66:98:bc:c1:7f:07:26:c0:20:5d:12:ff:c9:fc:bd:fe:f5:
1a:7b:de:2d:54:88:c0:b2:d2:e0:48:17:c6:3d:d1:7f:26:cd:
30:0c:7b:84:77:e1:3e:8c:97:bc:c8:72:88:5e:29:cd:48:aa:
fd:41:e4:ac:de:3c:21:54:68:8e:68:eb:84:4c:ae:5d:51:ae:
eb:d3:e9:b6:cc:e9:7d:ef:80:ac:0d:a7:2a:ae:52:12:f9:7b:
8e:9b:e4:f7:5d:8b:07:d2:7d:66:a6:7e:96:e3:af:86:f3:cd:
3f:8b:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:57:49 2026 by rpki-client