Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: KmvgKgEPGcQJwRTnT3Vj6GDH0o67qoz3NQwVOnN+RY8=
Subject key identifier: 1A:CD:F4:01:EF:25:EE:DB:62:09:BA:B7:7B:45:BB:5D:97:65:82:C7
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 019F9248119135E42F1FFB010AC891FF87A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 0B9A
Signing time: Fri 24 Jul 2026 04:00:24 +0000
Manifest this update: Fri 24 Jul 2026 04:00:24 +0000
Manifest next update: Sat 25 Jul 2026 04:00:24 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: AknQ+zNgcywTLgrfQhjd95Q6GDX6HHWbK/uv1w/t0OM=)
2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:11:91:35:e4:2f:1f:fb:01:0a:c8:91:ff:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Jul 24 04:00:24 2026 GMT
Not After : Jul 25 04:00:24 2026 GMT
Subject: CN=1acdf401ef25eedb6209bab77b45bb5d976582c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:69:d1:e6:b4:df:59:a3:a6:eb:99:84:24:
3c:d9:7b:24:5f:62:be:0a:69:2c:f9:44:a4:a1:3f:
4a:b1:e5:c0:54:c0:0d:1a:9b:4e:08:36:0a:f4:e8:
e9:f0:8d:db:e2:f2:06:8f:6d:23:49:0d:e5:c4:71:
06:b9:74:ec:b0:99:b5:09:8e:5b:0b:7c:27:9e:5a:
a5:ba:eb:74:fb:d2:0d:fd:84:11:a4:14:39:3a:f5:
68:89:cb:7e:4e:b6:89:18:ad:6f:30:dd:fc:38:fc:
0b:ef:99:36:09:e6:d9:27:fc:80:9f:c0:7f:c9:49:
4f:90:7f:42:3a:d6:af:22:97:d3:0c:a7:79:d6:f8:
ee:dd:7a:a4:61:f4:7e:7c:e5:58:8c:ff:ba:4b:ed:
9c:01:71:65:99:ea:8e:cd:dc:ed:bc:64:77:41:ed:
dd:81:28:d4:a1:49:f8:38:d0:0a:6c:96:bd:b0:33:
d7:04:44:6c:40:fd:49:b9:46:6a:bd:61:1f:cd:33:
53:18:b2:7f:dd:f2:31:ac:d9:e9:6e:aa:71:a2:e3:
91:c1:1e:b8:04:5d:90:2c:b1:cc:3b:7b:d3:3e:f4:
ea:6c:51:2f:a4:b3:72:e8:4f:fc:cc:e6:7f:f6:76:
28:f7:4d:44:8a:64:08:83:9c:9c:62:3e:66:3f:13:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CD:F4:01:EF:25:EE:DB:62:09:BA:B7:7B:45:BB:5D:97:65:82:C7
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:44:03:00:f2:d7:33:a8:e3:a4:79:39:10:47:32:09:c0:94:
c6:79:fb:df:ad:2e:19:90:a4:74:02:f3:f7:87:71:14:95:62:
31:f5:80:d7:4e:36:89:c3:5f:f1:05:cb:61:4f:02:8d:5f:c3:
09:73:d7:69:8c:40:a1:2c:90:51:14:7c:1d:e0:94:a2:38:c8:
d6:d5:c4:0f:5f:27:c2:61:58:1e:71:6e:af:66:01:69:1b:f0:
dd:db:50:98:8f:9e:dc:6d:9b:e2:ed:ed:5a:cf:ee:1d:eb:f7:
57:0b:ca:1e:e5:96:51:cc:e3:1f:c4:30:56:dc:d9:9d:40:c8:
d8:95:fa:9e:16:86:65:1c:77:ea:7f:15:6b:3b:de:80:b1:af:
5f:1a:a5:08:82:0a:f8:e3:e2:52:55:39:68:4a:29:bf:a7:46:
81:07:e7:58:28:97:4f:2e:20:67:09:2d:59:b0:89:9c:3f:f6:
f1:c3:69:46:f6:e9:50:ba:0c:38:43:39:11:67:dd:14:8a:c5:
10:c4:cb:3f:f9:0a:f6:ae:c0:80:a6:08:84:02:cc:1d:4c:d1:
71:2c:2f:c1:ee:2c:30:a9:fd:8d:02:51:73:bd:0d:a9:be:c4:
05:eb:0a:15:40:b7:80:a3:b5:ed:24:6a:06:35:43:73:d8:d4:
0b:98:7b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSBGRNeQvH/sBCsiR/4ejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmU2MWIxZGRjODFkYzRmMzM4YTY4OWZlYmQ4ZGZkZGI0
NGJmNDQwHhcNMjYwNzI0MDQwMDI0WhcNMjYwNzI1MDQwMDI0WjAzMTEwLwYDVQQD
EygxYWNkZjQwMWVmMjVlZWRiNjIwOWJhYjc3YjQ1YmI1ZDk3NjU4MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHJp0ea031mjpuuZhCQ82XskX2K+
Cmks+USkoT9KseXAVMANGptOCDYK9Ojp8I3b4vIGj20jSQ3lxHEGuXTssJm1CY5b
C3wnnlqluut0+9IN/YQRpBQ5OvVoict+TraJGK1vMN38OPwL75k2CebZJ/yAn8B/
yUlPkH9COtavIpfTDKd51vju3XqkYfR+fOVYjP+6S+2cAXFlmeqOzdztvGR3Qe3d
gSjUoUn4ONAKbJa9sDPXBERsQP1JuUZqvWEfzTNTGLJ/3fIxrNnpbqpxouORwR64
BF2QLLHMO3vTPvTqbFEvpLNy6E/8zOZ/9nYo901EimQIg5ycYj5mPxP52wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrN9AHvJe7bYgm6t3tFu12XZYLHMB8GA1UdIwQY
MBaAFKIuYbHdyB3E8zimif69jf3bRL9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTkt
N2JhYmEyOTczNzQ2LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTktN2JhYmEyOTczNzQ2
LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEQDAPLX
M6jjpHk5EEcyCcCUxnn7360uGZCkdALz94dxFJViMfWA1042icNf8QXLYU8CjV/D
CXPXaYxAoSyQURR8HeCUojjI1tXED18nwmFYHnFur2YBaRvw3dtQmI+e3G2b4u3t
Ws/uHev3VwvKHuWWUczjH8QwVtzZnUDI2JX6nhaGZRx36n8VazvegLGvXxqlCIIK
+OPiUlU5aEopv6dGgQfnWCiXTy4gZwktWbCJnD/28cNpRvbpULoMOEM5EWfdFIrF
EMTLP/kK9q7AgKYIhALMHUzRcSwvwe4sMKn9jQJRc70Nqb7EBesKFUC3gKO17SRq
BjVDc9jUC5h7xA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:21 2026 by rpki-client