Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: ZtZinVuFuI4xn9kEwvxVauRYBes5Zq/Ihg2jfQNBw7s=
Subject key identifier: B6:01:D1:B1:24:8E:76:07:4B:08:FE:E8:8F:8D:8F:F6:4C:F7:85:D0
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 019F8EA2C0F99020110402784615EC2D1B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 0A9F
Signing time: Thu 23 Jul 2026 11:00:58 +0000
Manifest this update: Thu 23 Jul 2026 11:00:58 +0000
Manifest next update: Fri 24 Jul 2026 11:00:58 +0000
Files and hashes: 1: 0suRCo-bzD4_wCdS0bD7dThrxnc.roa (hash: wYzbnfgbRv8G8hJvN4xYggJP/XRjyk7dwQh4KwDNFG4=)
2: SzpktkhtXMNAJGuEKNGRvpmUXeI.asa (hash: j2A/2g4CpNtdKf5zV+zzkonaFlk8ZnbNvL0SDLhKgjM=)
3: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: eQCe86i2vyvTnYZBqVCYeqMzsKpMO2Mh7ImhCQiMu6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:c0:f9:90:20:11:04:02:78:46:15:ec:2d:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Jul 23 11:00:58 2026 GMT
Not After : Jul 24 11:00:58 2026 GMT
Subject: CN=b601d1b1248e76074b08fee88f8d8ff64cf785d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:19:9b:30:a6:38:d9:87:a9:23:e6:11:0b:
66:98:6c:6e:15:45:01:6b:35:10:a3:0f:a1:1c:cd:
80:bb:c4:a5:66:26:18:7d:9c:a5:cf:09:c0:57:64:
03:0d:21:ef:2a:ed:a6:e8:68:57:08:5f:9d:a1:1e:
8c:3b:f3:e5:d4:eb:4d:00:12:4d:a0:30:a1:81:8a:
fc:8b:ae:06:e7:20:e6:ce:1b:07:32:51:d1:d0:29:
90:9d:a7:a4:f1:fd:2c:97:7d:8c:cd:f9:32:9c:37:
b3:cf:74:91:2d:11:a3:54:ee:49:52:c3:d5:c0:77:
b9:33:6a:47:2b:66:b1:ad:13:ad:bc:b2:79:8d:eb:
f8:65:33:18:55:70:72:b3:1f:23:f8:da:bf:dd:96:
20:1b:f8:f7:7b:3b:cc:e2:36:9d:1b:78:32:66:13:
93:e8:43:35:be:2b:e7:c4:e7:95:0a:06:da:88:57:
b7:aa:2f:5b:c1:9f:40:2f:ed:d4:15:93:11:50:71:
b5:0c:69:29:1a:4c:fc:d9:95:14:93:ce:57:1d:73:
e0:b5:a9:71:c2:23:b2:e9:ec:9e:1b:d2:c5:43:7f:
68:99:70:3b:b3:18:74:2a:79:03:7e:b6:bd:d8:01:
08:ba:c1:70:2b:28:e3:6c:54:85:f5:e4:79:87:d2:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:01:D1:B1:24:8E:76:07:4B:08:FE:E8:8F:8D:8F:F6:4C:F7:85:D0
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:d4:71:48:4a:b7:be:49:0a:bc:3a:54:19:56:9b:08:1a:
0f:74:af:b5:57:56:82:a8:15:ad:ac:e0:48:2f:09:e1:10:da:
44:11:72:55:10:33:eb:dd:1a:0b:45:37:60:a7:67:dc:5b:5a:
ea:12:70:20:46:88:57:d7:ae:b2:ae:23:eb:47:d2:3a:a9:d8:
da:7b:5d:9c:2a:9b:6d:f2:aa:56:73:51:f8:9a:8c:88:b3:6f:
d3:7f:d3:0d:83:27:83:f0:9a:6f:1e:15:27:49:9e:c8:8f:ef:
d6:c8:01:bf:c0:84:e9:0d:22:38:50:1c:cd:26:ce:45:21:f5:
a1:c1:fb:24:b8:58:1c:b7:5e:9e:2d:ef:da:d7:81:f3:bd:a0:
10:b9:fe:71:d1:a7:a9:a3:da:cf:cc:99:5d:b5:0d:67:db:bc:
09:19:ba:ca:ae:4d:5c:db:0d:45:0a:b4:fe:59:60:c1:a1:35:
af:3a:71:99:df:1b:50:19:a6:bb:77:db:69:13:8b:05:b0:58:
08:18:ac:37:a7:7d:d8:82:8f:fc:9c:d9:1a:e4:b3:8d:96:2e:
0d:05:1e:ab:11:fd:65:ea:09:1a:3a:d6:fc:81:69:a8:a1:32:
f0:1f:9f:34:b2:03:ae:45:9d:7d:1f:9a:7a:94:b8:94:61:75:
2c:d9:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:42 2026 by rpki-client