Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: qnWUoLMlzyhR0iPZ1w9c/CCknjVUnDkxuTrIVWD1hds=
Subject key identifier: 53:37:6C:8E:4C:8E:F3:8D:4A:DC:93:D9:C1:D5:EF:F1:56:2C:1B:18
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019F9324720D782245E195569B9DD00CD8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 08:01:06 +0000
Manifest this update: Fri 24 Jul 2026 08:01:06 +0000
Manifest next update: Sat 25 Jul 2026 08:01:06 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: DjogGov/3pL0M2Y4ct19O2QaZgHbHwf665EfY2JhCrM=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:72:0d:78:22:45:e1:95:56:9b:9d:d0:0c:d8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Jul 24 08:01:06 2026 GMT
Not After : Jul 25 08:01:06 2026 GMT
Subject: CN=53376c8e4c8ef38d4adc93d9c1d5eff1562c1b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:80:7f:8f:c4:f0:ee:b9:8e:20:04:0c:c1:
d1:bc:79:fc:23:e5:d0:d1:f7:c2:85:e6:4b:cc:fd:
ab:86:5f:63:5a:2f:a2:62:11:32:ee:c6:2e:21:4e:
02:73:d8:d5:d7:16:0f:f7:fd:11:fd:0b:a9:ed:78:
e0:ce:e4:bb:a8:c8:78:9f:00:a1:42:51:50:81:fd:
1d:0b:ef:bb:f6:e7:31:78:8c:3c:b5:4d:ec:24:2b:
a4:57:c3:9e:00:2a:c5:c1:6f:95:e1:4c:41:a3:cb:
9f:20:b5:e8:d8:67:9f:06:17:e0:0e:cd:0b:44:3c:
02:0d:06:97:87:6d:05:92:9b:ad:b8:66:3b:ea:08:
91:66:fd:02:71:1b:78:7e:7d:ec:98:02:7f:ee:e9:
c3:a6:5e:45:e0:35:cb:f0:5b:7b:05:81:bf:79:58:
f5:01:4d:af:e2:86:ec:c8:9a:ed:37:4f:0f:98:ba:
c9:9b:db:04:b9:4e:12:0c:b3:31:39:e0:a7:ed:16:
27:c6:4d:21:a5:c8:05:17:67:b2:54:31:ea:e9:b2:
51:3e:a1:64:2f:fa:b9:4f:ef:c1:c5:99:90:d2:18:
3a:72:13:2a:b1:1a:c0:66:0a:86:8b:ab:8e:e1:c9:
4b:ed:93:db:d5:82:ff:22:08:ac:39:65:d9:db:e5:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:6C:8E:4C:8E:F3:8D:4A:DC:93:D9:C1:D5:EF:F1:56:2C:1B:18
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ea:78:51:0a:fd:d9:78:f5:48:49:ac:a3:76:8f:27:a9:21:
4d:ad:05:e8:44:83:0c:cc:eb:35:c0:05:ff:8b:4c:ef:af:db:
fd:ec:ea:43:9c:1a:ff:bf:f4:01:74:a5:79:82:9e:93:24:9f:
89:e6:7a:9c:aa:59:40:2e:eb:5d:57:b5:5a:82:af:b3:fd:2d:
55:b3:d7:50:d4:01:b2:67:41:25:a3:92:df:7c:67:67:8b:9a:
00:3e:b4:10:0f:23:75:e9:b1:bd:57:53:66:94:cf:69:2b:53:
15:d0:a1:9b:a0:c9:6c:8c:5a:2e:95:d5:d9:2e:58:1c:b3:86:
34:94:53:50:14:4a:02:56:41:3a:54:6e:80:ff:1e:3f:56:47:
2b:2c:48:86:2b:df:1e:c7:b7:90:87:e1:00:90:65:c6:78:23:
36:c9:9f:14:56:f2:26:4f:08:5d:cc:00:64:cc:14:bd:a3:c1:
eb:df:59:1e:ee:a2:4c:09:11:07:21:ed:01:b8:2e:ae:85:42:
95:92:c6:a2:91:08:87:2b:d6:95:21:8f:d4:44:b0:62:5b:d8:
79:eb:8d:87:05:53:f3:9f:e7:68:04:1b:14:3a:a6:0a:c2:49:
ce:ee:8b:2b:0c:18:33:01:ce:8d:19:7f:0b:b3:ec:7a:8a:d0:
9f:50:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:15:48 2026 by rpki-client