Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
File: 0oig9ya30Z93nrHaEq3aNfze1fE.mft (raw, json)
Hash identifier: XuoyhTx4aPU426I7zWoOIGh/j4jmKhjhUEHILaJB/Ws=
Subject key identifier: 0D:7F:13:A1:64:1F:28:29:A8:42:DB:5F:B0:2C:6C:6C:9E:95:18:CE
Authority key identifier: D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
Certificate issuer: /CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Certificate serial: 019F916D880CDDB85A6389AE5E32485FB564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:42 +0000
Manifest this update: Fri 24 Jul 2026 00:01:42 +0000
Manifest next update: Sat 25 Jul 2026 00:01:42 +0000
Files and hashes: 1: 0oig9ya30Z93nrHaEq3aNfze1fE.crl (hash: Fn3BZjfcVSvj6mwYnWOf0/Uf0dPc+eVwO7J740gPj3I=)
2: lxI2bP-RbOseqiIeg4ll7U67NmA.roa (hash: 9Z7qOwjkxiFujHt3P1/LDgIN/VCVJkJA0KjjP9BQQwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:88:0c:dd:b8:5a:63:89:ae:5e:32:48:5f:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Validity
Not Before: Jul 24 00:01:42 2026 GMT
Not After : Jul 25 00:01:42 2026 GMT
Subject: CN=0d7f13a1641f2829a842db5fb02c6c6c9e9518ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:8a:71:6b:4c:7c:b6:ff:6f:18:98:2e:75:
74:7d:6d:6b:56:84:cb:da:5e:2e:a5:80:76:da:63:
26:c4:57:0c:8c:b4:39:a0:40:86:ec:55:d2:17:4e:
b6:21:75:7e:38:2e:77:75:52:5a:19:f8:d3:97:64:
e2:1f:01:ea:aa:70:13:7f:b0:80:c8:8e:36:c1:32:
f8:1e:9d:2b:30:90:d1:41:60:3f:91:2e:80:53:b3:
d8:0b:f4:00:56:b9:67:e9:6c:68:bd:77:2e:39:f6:
9c:3d:85:47:27:5a:c7:b9:f8:e3:95:55:f8:4e:74:
22:52:e5:a4:b5:85:79:3b:d2:66:c3:0e:40:6e:c7:
59:62:37:44:3b:8b:0a:a0:61:a1:ea:b1:db:00:bd:
20:c1:3e:39:c3:3c:3f:8a:96:35:1e:9f:03:a7:41:
80:38:82:6e:13:0c:82:38:aa:77:1c:3a:ba:49:69:
fb:1b:e6:d0:88:e0:8a:f9:d0:2a:33:dd:44:27:10:
6f:58:2f:ea:7f:30:85:03:4c:a0:43:ce:68:76:20:
8f:65:ff:fb:fd:90:9c:fb:96:ea:df:6a:a1:dc:aa:
a1:d0:b4:ce:c3:f8:33:53:9a:d1:f7:c2:ef:5a:03:
c4:95:c7:42:74:8f:ff:c1:49:51:cc:78:e8:bd:01:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:13:A1:64:1F:28:29:A8:42:DB:5F:B0:2C:6C:6C:9E:95:18:CE
X509v3 Authority Key Identifier:
keyid:D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:12:ac:63:a5:f8:0a:5d:0d:cb:95:b8:bc:83:57:d7:8b:d2:
3a:49:e5:82:ab:f7:fa:cf:48:b2:8b:d3:dd:89:9f:3b:ef:da:
e7:cc:01:2d:3c:61:ae:52:7a:44:02:56:bf:b3:cc:82:b3:e8:
1a:e6:6e:16:de:79:69:f3:54:b1:e2:74:35:7d:a8:e3:15:7d:
8b:6b:5e:76:8c:8f:62:85:72:c8:3c:bd:8b:35:8f:b0:75:48:
eb:d9:77:60:61:eb:70:e5:14:a1:8d:0b:67:6f:3f:12:21:be:
25:fb:95:ac:72:ce:d2:3c:43:60:a8:47:f1:d1:55:d3:f9:85:
c2:f6:dc:32:a3:2f:8d:25:dc:b2:d1:df:67:52:fa:05:d9:08:
21:77:1f:62:f8:5b:3e:9e:b6:7d:2e:60:d5:45:01:25:b5:f4:
cb:0a:f5:e3:b1:46:4d:19:b1:73:ad:17:19:53:39:90:bb:73:
c6:03:a2:ce:38:27:06:a0:3b:47:af:55:5e:b3:3f:29:1d:a9:
c6:82:a2:ce:22:af:c8:b2:4d:76:2f:34:a2:c0:ea:1e:83:25:
90:da:41:38:bb:34:e3:3b:41:6a:c2:cc:63:2f:ea:7d:42:9f:
e8:88:7b:92:f7:b9:22:87:0e:71:7e:8c:5c:aa:1f:19:84:b3:
46:8b:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:26 2026 by rpki-client