Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: c63NOVbesuCBoWYafymRpmtuBvFgcLveC0lGbgywVoo=
Subject key identifier: 4F:3F:7B:BF:9B:E5:28:D1:DF:BF:29:36:5D:74:96:22:85:7A:5B:37
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019F93FFB0A24445BA1AF8882DB3E869947D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 11F6
Signing time: Fri 24 Jul 2026 12:00:35 +0000
Manifest this update: Fri 24 Jul 2026 12:00:35 +0000
Manifest next update: Sat 25 Jul 2026 12:00:35 +0000
Files and hashes: 1: GtRugG7rUNXwN8D-4_Fmv8xBbi4.roa (hash: /BvITM4S5y0rZ1AQGGceJ5QHF+EoXg6/6ygN/nHgl9Y=)
2: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: wpE/D4UaFRoZf6o5Pr7jvYZENP6a/TBU3oz3Li0m5+A=)
3: _09CYID6_CGhAezIzwAbTFbsCi8.roa (hash: dZSTZUSxmSRc4nvVBTT8GAEBkxmPLHGJ4SuadjBnT94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:b0:a2:44:45:ba:1a:f8:88:2d:b3:e8:69:94:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jul 24 12:00:35 2026 GMT
Not After : Jul 25 12:00:35 2026 GMT
Subject: CN=4f3f7bbf9be528d1dfbf29365d749622857a5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:ce:63:bd:7b:4c:4c:38:78:68:d5:77:16:
05:64:ac:68:a8:ab:ba:32:5c:7b:ab:ca:10:77:77:
72:1b:8e:46:af:cb:58:86:2f:e5:01:57:d6:3a:cb:
4c:30:1d:f4:ba:b7:55:c5:e7:12:ad:2b:7c:03:c7:
83:7b:33:1a:f2:a6:12:b9:ad:db:84:99:b0:41:0f:
6b:c2:c9:5d:43:b8:af:58:d0:3e:94:66:9e:7c:33:
b2:11:cc:ad:e1:e1:77:b1:ff:62:c3:af:20:7e:6e:
68:0a:7e:d2:fb:bb:8b:35:42:64:76:4d:db:3e:48:
69:92:a7:fa:3d:57:7e:8b:9b:bf:45:4e:3c:88:da:
4d:04:16:62:20:93:ba:52:7f:55:db:3e:f7:6a:da:
ac:12:dc:50:42:71:18:61:1a:90:49:b2:aa:4d:68:
cc:6a:0f:61:e9:06:66:0e:ca:d3:19:bc:ff:ce:92:
42:76:0d:a0:8f:52:3c:c9:84:a8:61:53:ac:b8:7b:
8f:90:e6:82:54:9d:1e:0c:a0:f1:66:89:11:41:7a:
88:a5:b7:a9:d4:83:c1:22:75:a9:cd:fa:21:4a:ce:
19:6f:d7:bf:9a:68:17:33:1e:73:d4:dd:94:4a:50:
ff:50:4b:d2:b0:25:c1:01:c7:08:05:46:b9:0c:bc:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:7B:BF:9B:E5:28:D1:DF:BF:29:36:5D:74:96:22:85:7A:5B:37
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:cc:db:ba:ec:fe:e1:18:1e:e5:27:7d:ed:7f:1b:67:b9:
87:4d:29:38:bc:1e:32:73:4f:1a:4f:c2:38:3d:bb:fe:5d:20:
1b:dc:d6:aa:1b:66:42:81:87:cc:1f:68:1a:f0:98:6e:47:c7:
e1:ea:fc:53:27:01:38:33:01:d4:08:fd:7c:d2:12:76:36:5c:
f6:de:ab:04:91:79:da:e2:1e:5d:0d:c6:87:e8:47:a3:35:87:
6d:63:43:10:f4:1e:64:d9:dd:a4:95:22:35:39:1e:ce:48:02:
d7:cb:52:2f:29:f4:08:e8:aa:3b:7a:b2:22:0d:83:2f:b8:2f:
04:a9:66:07:14:26:75:9f:16:fe:31:fb:95:ea:92:c7:4a:b0:
60:a9:c1:97:37:61:bf:c2:97:4f:35:7b:14:54:79:39:21:15:
75:a2:51:26:05:bb:ba:4d:87:48:25:bd:4a:e9:a9:80:31:75:
9e:b7:d2:97:64:0a:c0:86:29:79:c4:ff:17:20:f5:d0:b4:6e:
0a:e7:60:f7:df:37:9b:49:81:fd:2e:38:b9:87:84:43:75:c7:
be:3b:dc:fd:02:e6:58:8d:90:c7:31:25:70:92:2a:e1:0c:d2:
84:cf:c1:3b:b1:dd:e1:f6:3b:d9:84:a5:d5:73:1d:dd:eb:27:
c4:18:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:42 2026 by rpki-client