Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: bu+ujPiWmJ2Vx5hjdNJ/YnFrihBvDYBcpLVM+8yl4Ig=
Subject key identifier: F0:B5:0A:D5:02:85:99:76:6F:0C:59:02:8F:1D:10:37:CE:D8:9D:8E
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019F9135D09C87C63E544D568CD8AE4B5B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0869
Signing time: Thu 23 Jul 2026 23:00:50 +0000
Manifest this update: Thu 23 Jul 2026 23:00:50 +0000
Manifest next update: Fri 24 Jul 2026 23:00:50 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (hash: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: Z54AJMdsb0BlWCXrkzsY+PWzmpY4QagCUfdEmfOmcbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d0:9c:87:c6:3e:54:4d:56:8c:d8:ae:4b:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jul 23 23:00:50 2026 GMT
Not After : Jul 24 23:00:50 2026 GMT
Subject: CN=f0b50ad5028599766f0c59028f1d1037ced89d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:b0:8b:9e:30:68:47:1a:ca:41:68:1f:46:
e0:f5:a0:1f:35:d7:d9:36:76:c6:b7:f7:68:cd:b9:
f7:4d:4e:d8:0c:f3:00:54:f5:67:3f:7d:d0:a8:a9:
49:62:73:3e:d2:93:43:f4:5a:ee:54:de:05:96:58:
8c:89:2d:1b:3b:11:43:2b:35:43:e9:17:fd:ef:c3:
3b:12:b0:3b:ec:16:00:d0:bf:ca:29:60:ef:38:d9:
4c:69:64:8f:21:18:72:99:f2:cd:ed:87:b4:20:4e:
34:42:98:a6:39:84:04:e6:70:f9:5b:ea:5c:98:46:
63:c9:6a:7d:5c:1f:0b:7f:2e:35:9d:58:a1:7c:38:
bb:b1:1e:09:4f:4b:c7:1c:b9:17:c2:e2:18:88:65:
03:3c:e0:ee:d6:5c:cd:4c:64:5b:00:fb:4f:10:d0:
67:b9:15:4c:49:e2:45:05:70:33:0b:86:06:5e:4b:
17:2a:72:83:44:ec:75:a8:b6:6c:b8:52:ea:ed:46:
ea:4b:94:c2:ce:22:7c:db:bd:a0:44:b9:cc:96:df:
a7:2b:05:6c:5c:45:35:eb:a4:50:61:f3:5c:36:6e:
28:80:51:80:19:56:6e:d2:21:17:d2:4c:58:ee:45:
63:fb:64:89:ea:86:52:d1:5e:d2:cb:ad:21:23:b8:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:0A:D5:02:85:99:76:6F:0C:59:02:8F:1D:10:37:CE:D8:9D:8E
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:5d:95:2c:12:ec:72:78:86:fe:f6:2e:8a:48:75:f4:5f:
7c:f3:10:56:ec:d8:2b:ac:20:08:85:ce:cf:95:f7:9d:4d:62:
18:91:6d:ce:86:db:a8:30:aa:39:e1:b5:49:06:95:e7:0a:b0:
41:70:4d:1c:59:da:14:b5:ae:5b:70:5b:ef:b0:ba:2d:cc:c1:
58:37:1d:a1:0f:1d:f4:a9:f1:0f:50:80:0d:ad:21:95:c1:de:
26:e8:64:82:20:82:29:b3:29:a0:a8:6e:9c:9e:b1:3a:af:e7:
9b:60:59:1f:85:6b:46:28:ff:1d:38:aa:1d:6b:1b:2f:97:77:
8f:9b:78:94:57:22:c8:65:0c:a3:56:3a:fb:2d:ac:e5:45:e0:
ca:5e:b7:c3:dc:3a:51:45:13:a2:0a:ce:b1:b6:61:56:43:97:
e0:6a:89:42:f6:cf:f6:52:96:b7:f4:36:b5:d7:03:85:fc:8e:
c1:2f:7a:a0:ae:f9:69:4b:24:d7:56:50:d8:97:db:6c:37:a2:
65:12:8c:6d:38:aa:ee:2b:35:90:27:58:43:d5:e0:87:68:95:
47:80:73:59:c0:ff:ab:46:c9:34:fe:c2:57:0e:5b:98:68:48:
45:1d:d6:f7:b6:83:30:55:40:18:d0:99:19:8b:25:8b:82:64:
91:bf:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:20 2026 by rpki-client