Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
File: oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft (raw, json)
Hash identifier: z9da1yrSfPa8f331cvi9ZriPBGefTllXL2St4VQ4DfM=
Subject key identifier: 74:DA:C0:3F:82:CB:85:08:22:99:87:2B:1A:E7:04:F5:E1:AC:90:9E
Authority key identifier: A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
Certificate issuer: /CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Certificate serial: 019F9549252420600F5A663C710F110CDB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:26 +0000
Manifest this update: Fri 24 Jul 2026 18:00:26 +0000
Manifest next update: Sat 25 Jul 2026 18:00:26 +0000
Files and hashes: 1: 3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa (hash: 9PxpYct4ZYiB2ZINKKmfgomCpciPW9Ne+TgfTCByrxM=)
2: oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl (hash: KOLFAnC2t3jVOT2VNdUZJs7CLbk/w7BJQPZU8akfHCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:25:24:20:60:0f:5a:66:3c:71:0f:11:0c:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Validity
Not Before: Jul 24 18:00:26 2026 GMT
Not After : Jul 25 18:00:26 2026 GMT
Subject: CN=74dac03f82cb85082299872b1ae704f5e1ac909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:91:a3:ed:2f:bd:40:04:e8:ea:b6:14:30:
9d:3e:5d:19:26:dd:b3:c9:2b:13:4f:87:de:26:4b:
57:98:8f:c4:6a:d8:ce:5b:cf:c9:a7:fc:43:d0:cb:
d4:98:0b:9c:87:1e:0f:c4:99:1f:e1:2b:57:5b:54:
25:02:5d:4b:5e:42:16:a0:a9:33:24:21:4e:e1:3a:
78:71:d2:63:c7:25:73:37:cd:d7:91:29:31:c1:a8:
04:c2:8d:75:9b:04:e9:81:19:27:e5:1d:6b:48:68:
55:fd:8b:d2:2a:e7:17:8f:94:1f:b4:97:9c:2f:4e:
40:ff:70:b9:9e:8f:ae:a0:bb:47:ab:ea:b8:e3:72:
71:5f:56:3f:f7:cf:06:e6:a5:25:f1:7d:4e:53:60:
3c:bf:b4:17:a7:0e:a6:91:53:e7:56:c3:e9:fe:af:
fd:d0:6b:40:e1:fc:38:18:2e:9f:2e:7a:52:a7:53:
41:18:70:65:72:0a:07:5c:01:10:1a:65:32:c9:80:
2a:08:e0:e1:35:80:55:a0:4d:07:f6:02:03:0d:f3:
fa:89:cf:6c:15:27:72:78:19:5d:2f:0a:0d:f7:e2:
bd:36:ee:88:50:76:f3:7c:4f:25:0d:2e:23:36:71:
3d:d2:53:38:d9:60:ac:0f:f4:79:55:41:64:d4:1b:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:C0:3F:82:CB:85:08:22:99:87:2B:1A:E7:04:F5:E1:AC:90:9E
X509v3 Authority Key Identifier:
keyid:A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4a:dd:8d:63:68:30:0c:3a:27:25:66:31:7f:ec:a7:4b:cd:
a4:f4:ed:9d:91:61:c5:e9:f3:e1:d7:f0:d0:34:cc:ce:99:e3:
4a:12:d6:1d:54:8a:14:a1:d9:45:d4:2b:9d:ba:b4:5e:47:3a:
91:ff:91:58:b3:50:91:d4:e8:b3:f5:9e:c7:e3:d4:32:68:84:
8e:19:5d:c0:dd:9e:16:23:2d:db:53:2b:35:6b:85:7a:c2:1f:
b4:aa:64:25:fc:3a:57:68:cf:04:97:f5:9c:fc:55:b4:fa:43:
38:a9:9f:9e:ea:3c:15:84:51:8b:e3:02:db:78:42:02:4f:7e:
68:4c:b3:d6:39:3f:64:86:45:69:19:c7:4d:49:4a:6f:5f:ed:
47:c3:d7:b9:86:b1:46:25:35:68:df:b9:f3:08:61:23:f4:98:
d2:65:d1:08:15:39:72:d8:af:9c:82:53:19:52:5a:19:d1:09:
82:f1:0b:3a:b0:e7:0e:a0:44:0d:90:7b:cd:f4:ea:b5:47:f4:
20:ea:7c:84:43:e8:31:f2:31:05:0c:0e:16:7a:94:e9:ec:a3:
e8:87:42:6b:cc:21:98:3e:98:7f:13:a5:d1:1e:5f:8b:c1:d0:
b1:70:95:d8:07:31:79:59:42:c0:5b:56:4c:84:8e:e7:91:d5:
ff:e4:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:45 2026 by rpki-client