Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: uFmeAEI0MkELOBMpgf3HkdyCf+BrsirVuOTNSc7p/Tg=
Subject key identifier: 95:91:C7:BA:D5:CC:D1:3F:A7:F1:2C:BB:AC:D5:71:1E:AF:9F:48:8E
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019F93C9A206B6E487AE6702439A3FA90F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 11:01:32 +0000
Manifest this update: Fri 24 Jul 2026 11:01:32 +0000
Manifest next update: Sat 25 Jul 2026 11:01:32 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: bAsn/HaZFS9xHZhhMNwNzVtthK9b+ES8CaAWN4NVIJM=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a2:06:b6:e4:87:ae:67:02:43:9a:3f:a9:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jul 24 11:01:32 2026 GMT
Not After : Jul 25 11:01:32 2026 GMT
Subject: CN=9591c7bad5ccd13fa7f12cbbacd5711eaf9f488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:9c:0b:9a:80:8c:16:19:0f:1d:fa:88:c1:
a3:07:de:fd:8b:9f:66:6e:58:93:1c:c3:87:8c:eb:
63:bf:1d:5e:5f:69:90:d7:5f:7e:85:99:35:27:4e:
c0:e1:38:19:31:15:a8:76:72:ca:c4:42:51:3a:1c:
a8:78:f6:60:64:b8:47:25:2f:db:83:f3:db:1e:b1:
9f:fc:93:15:0f:dd:a2:39:9c:b3:28:1b:aa:b4:21:
c7:42:4a:2b:c6:56:1d:cd:fb:58:a1:dd:1e:8b:e8:
5b:e9:8e:6e:89:79:57:c7:76:c6:56:86:5c:0b:ad:
65:0e:d2:31:99:2e:40:86:4e:83:08:f2:3f:b7:79:
f7:e0:20:00:c4:f3:29:18:e6:e2:0d:b6:7d:8d:06:
d3:7b:c7:65:8b:54:0c:66:37:9d:47:6e:dd:29:96:
71:25:b1:75:37:ca:05:2e:43:00:ed:77:17:3a:e7:
73:75:a1:0c:a5:60:0b:0e:7c:e9:b4:84:f9:37:dc:
f7:04:bc:8e:3b:bd:7a:dc:7f:79:4b:f0:1e:28:b6:
4b:3c:65:01:10:c4:39:ba:ef:3e:b6:ac:0b:04:8e:
0f:1e:a0:42:98:1d:25:82:c2:fd:6c:67:ca:53:c1:
92:bb:4a:b0:85:d2:c4:e9:4c:be:c8:bf:48:16:c7:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:C7:BA:D5:CC:D1:3F:A7:F1:2C:BB:AC:D5:71:1E:AF:9F:48:8E
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:d9:8a:f5:2a:c6:f9:4b:67:fd:81:24:9c:ee:8e:d9:72:
9c:7b:6f:ec:dc:c3:ec:c1:b9:c0:2c:a2:67:47:48:7c:f4:d5:
10:c2:77:1e:fb:a9:78:ec:4b:73:bc:40:2c:5a:1a:8f:10:0e:
3a:f9:a3:31:e4:30:50:8c:69:1d:68:f5:9d:b8:1e:3b:c0:97:
fa:dc:89:e3:b1:61:1b:e7:f4:8b:10:ed:0e:bf:83:be:91:92:
f2:c1:51:a4:b9:36:59:33:b7:f5:0a:24:d5:73:ba:2a:0b:0f:
a7:77:8d:08:f2:4c:f5:02:d2:b6:c6:ef:03:14:e6:6a:40:b3:
40:e1:a4:86:26:dd:72:42:b7:67:76:51:9a:e7:94:06:3c:c0:
10:e7:5a:89:17:76:4e:f8:dc:88:be:15:a7:8f:07:e6:31:3c:
fd:6a:12:56:21:a8:98:b3:e2:d3:1d:fe:66:bd:ec:34:2a:e9:
67:4a:61:c4:3e:e6:2d:c1:f1:37:73:37:b3:15:df:01:77:21:
37:35:33:2c:df:2e:b5:1c:3c:88:b8:89:95:12:07:7a:d1:6f:
95:b2:da:1b:95:62:87:4a:16:97:ae:3c:76:6f:53:2e:45:d7:
bd:a0:aa:98:34:2d:34:1e:d2:26:c3:95:6e:09:51:c8:8b:b6:
91:b9:16:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyaIGtuSHrmcCQ5o/qQ9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjYwNzI0MTEwMTMyWhcNMjYwNzI1MTEwMTMyWjAzMTEwLwYDVQQD
Eyg5NTkxYzdiYWQ1Y2NkMTNmYTdmMTJjYmJhY2Q1NzExZWFmOWY0ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IacC5qAjBYZDx36iMGjB979i59m
bliTHMOHjOtjvx1eX2mQ119+hZk1J07A4TgZMRWodnLKxEJROhyoePZgZLhHJS/b
g/PbHrGf/JMVD92iOZyzKBuqtCHHQkorxlYdzftYod0ei+hb6Y5uiXlXx3bGVoZc
C61lDtIxmS5Ahk6DCPI/t3n34CAAxPMpGObiDbZ9jQbTe8dli1QMZjedR27dKZZx
JbF1N8oFLkMA7XcXOudzdaEMpWALDnzptIT5N9z3BLyOO7163H95S/AeKLZLPGUB
EMQ5uu8+tqwLBI4PHqBCmB0lgsL9bGfKU8GSu0qwhdLE6Uy+yL9IFscEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWRx7rVzNE/p/Esu6zVcR6vn0iOMB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcnZivUq
xvlLZ/2BJJzujtlynHtv7NzD7MG5wCyiZ0dIfPTVEMJ3HvupeOxLc7xALFoajxAO
OvmjMeQwUIxpHWj1nbgeO8CX+tyJ47FhG+f0ixDtDr+DvpGS8sFRpLk2WTO39Qok
1XO6KgsPp3eNCPJM9QLStsbvAxTmakCzQOGkhibdckK3Z3ZRmueUBjzAEOdaiRd2
TvjciL4Vp48H5jE8/WoSViGomLPi0x3+Zr3sNCrpZ0phxD7mLcHxN3M3sxXfAXch
NzUzLN8utRw8iLiJlRIHetFvlbLaG5Vih0oWl648dm9TLkXXvaCqmDQtNB7SJsOV
bglRyIu2kbkWLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:57 2026 by rpki-client