Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: RY6+t1NUDa5uv7nqRacQjHb/MwhVtQOdRrw33jGNsW0=
Subject key identifier: D2:30:C3:46:94:55:8F:8E:C1:21:07:3A:A1:40:E8:B8:F7:4C:F4:85
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019F905A7E449E7A83FBA5829AD051562705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 049F
Signing time: Thu 23 Jul 2026 19:01:17 +0000
Manifest this update: Thu 23 Jul 2026 19:01:17 +0000
Manifest next update: Fri 24 Jul 2026 19:01:17 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: hPInJq9+1zPT3/YJdbvXi8/lcANoDC7IQ4P1suy7pkI=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:7e:44:9e:7a:83:fb:a5:82:9a:d0:51:56:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Jul 23 19:01:17 2026 GMT
Not After : Jul 24 19:01:17 2026 GMT
Subject: CN=d230c34694558f8ec121073aa140e8b8f74cf485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:36:aa:cb:30:4c:69:7c:59:20:86:11:97:
77:1f:e3:81:4c:f9:2f:1d:38:31:82:1c:e5:08:15:
0b:48:ef:5a:1d:ce:2b:0c:58:52:ed:40:f0:ef:8b:
99:4c:4b:aa:97:d5:96:0f:a1:3d:f0:4a:4e:0e:ad:
fe:c0:35:fe:45:e8:ce:0e:0b:f8:8c:fd:d3:1b:b1:
e4:0f:b3:4c:06:67:58:df:a7:51:70:01:ee:50:72:
99:de:a8:10:60:92:59:b1:c7:cb:11:54:b7:3a:55:
21:4a:cf:9d:4b:0a:ca:bc:c6:4a:f6:20:5c:85:0e:
a4:88:28:76:5e:83:79:4f:65:37:09:c1:c6:22:24:
c7:67:23:e5:0d:2c:11:23:d1:af:ab:bb:98:f9:d6:
23:dd:b6:8c:50:16:a6:90:34:a4:c5:e6:a2:9e:09:
73:da:d9:d5:06:49:48:12:6e:6e:c8:45:bf:64:a6:
82:f4:2d:c0:d0:f0:45:a0:c6:79:91:c4:2f:b0:61:
95:b0:7d:56:83:e0:0c:29:ed:31:25:fb:20:4f:cb:
5a:2e:e1:9f:91:a9:65:db:cd:3a:96:b1:50:24:94:
88:fd:e1:33:cc:d8:57:32:dc:75:57:91:56:ee:55:
1c:8c:7d:15:3f:21:36:9b:b6:15:cb:5f:7f:34:2a:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:C3:46:94:55:8F:8E:C1:21:07:3A:A1:40:E8:B8:F7:4C:F4:85
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:84:b8:ae:bc:be:ae:f5:3a:ad:89:79:bd:05:3a:a8:b1:82:
cb:18:43:39:c6:a8:95:75:5b:ce:cc:8d:ea:69:38:dd:0d:e9:
41:b1:90:83:c3:a8:4a:a0:a6:ee:93:47:19:b0:26:f7:fb:81:
8e:93:35:c7:59:4e:ce:d9:26:a1:f0:ca:6e:d1:2a:20:ed:2a:
4e:1b:9b:a2:e6:91:53:55:a7:03:3f:ac:f8:f3:4d:8c:9a:9a:
bc:6e:38:f8:20:f3:91:9d:1e:83:d0:63:b3:04:1a:e6:31:77:
ab:5a:4b:f3:51:a8:e6:10:e8:f2:91:2c:75:1a:b6:c4:60:07:
0a:33:f1:a3:70:44:19:70:90:1f:ad:8c:10:cc:fd:49:ac:c2:
f7:f6:0b:96:a8:db:a7:4f:4e:fb:09:30:63:9b:a3:80:3d:f6:
e0:d2:25:b0:c3:22:16:f7:9a:1a:db:9f:65:d9:05:b1:8d:1b:
34:3b:77:59:04:e4:47:12:2c:35:72:c2:62:ad:81:c3:0b:73:
d6:f5:c3:47:80:d4:7d:54:85:20:64:ab:ea:50:50:d5:34:17:
1f:42:fb:15:ee:fe:6d:57:fe:81:6b:0b:03:6e:e2:72:5b:bc:
60:08:ea:34:5c:3c:3d:de:97:55:f5:f3:64:6b:4b:f5:b5:97:
5d:2e:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:46 2026 by rpki-client