Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: Klu84DOLqadwdYfVIZeH9bv4fO02k5yejiIawzXu/CM=
Subject key identifier: 08:BB:18:4C:D2:45:19:27:39:90:01:90:C7:D5:B7:F9:23:B7:C5:E7
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 019F94DBEC55A12A18B9077A4475F5D094C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0D36
Signing time: Fri 24 Jul 2026 16:01:08 +0000
Manifest this update: Fri 24 Jul 2026 16:01:08 +0000
Manifest next update: Sat 25 Jul 2026 16:01:08 +0000
Files and hashes: 1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: qPEQSkSC9JqAJvOhp84XsztceFNYU0fcwmt5AyAcFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ec:55:a1:2a:18:b9:07:7a:44:75:f5:d0:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Jul 24 16:01:08 2026 GMT
Not After : Jul 25 16:01:08 2026 GMT
Subject: CN=08bb184cd245192739900190c7d5b7f923b7c5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:a9:db:2e:cf:16:6a:11:05:7c:0d:ef:d5:
9b:89:26:af:f7:7b:1e:4e:20:59:b2:12:c3:27:ff:
92:05:9a:46:cf:51:ae:d4:ff:3e:25:25:cf:94:88:
7e:c9:05:ce:64:44:61:84:4b:31:d4:fa:36:45:1a:
68:1e:3e:ef:f1:ea:f1:de:24:d9:a5:d5:15:23:df:
de:6a:05:a5:fa:13:bd:f1:52:dd:02:d7:3a:e1:a3:
13:b6:4f:c1:df:81:b3:da:f1:e3:37:5d:25:9e:f0:
01:bc:2e:19:ae:79:e6:ff:db:e0:28:ce:43:1f:ae:
36:3e:d6:7b:37:65:90:07:e8:f3:16:db:cc:7a:44:
3d:9c:27:c1:84:63:26:c9:cb:24:85:c7:04:5d:a2:
9f:71:e0:27:0a:ab:98:4c:08:b8:70:a3:8e:0f:ee:
51:42:93:f5:2a:01:66:1b:e5:ee:e4:7e:64:d2:b4:
6f:57:d3:4b:ea:7d:69:d1:e9:dc:d4:cc:3a:b5:a7:
11:64:e2:8f:83:b5:e7:d4:80:af:84:0c:fa:4e:1c:
00:c3:20:47:2f:05:12:62:f7:43:0c:04:65:2c:e2:
a6:8d:b7:59:10:94:88:53:b8:de:d7:a5:93:75:d9:
9b:0f:ba:b4:4f:26:0c:bd:ba:41:79:92:66:54:cb:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BB:18:4C:D2:45:19:27:39:90:01:90:C7:D5:B7:F9:23:B7:C5:E7
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:11:5d:58:13:dd:4f:d2:2f:76:e2:e9:c3:e3:14:93:37:
94:e8:53:da:47:76:a3:2a:c6:a5:d7:35:fd:d1:db:c8:92:59:
1e:ac:6d:41:4d:1d:b5:96:4e:74:77:09:ac:a3:97:5f:16:92:
15:83:19:9d:bb:a3:fa:8b:d8:bd:d0:a3:8d:61:40:44:9f:42:
cc:aa:83:02:7a:4f:c8:51:59:3b:06:2d:2a:52:54:97:76:93:
f8:82:c9:3d:f6:e7:c0:ee:f5:89:15:ae:4b:66:f2:08:ab:c9:
6a:9a:05:aa:91:94:56:d4:b1:25:98:4c:b3:8a:ae:d7:b2:4e:
6a:0f:b8:20:9b:59:b7:9c:4b:85:46:90:55:6d:2d:e6:ae:f3:
c2:f9:86:81:89:b3:97:af:cd:ce:ba:1e:30:84:31:f7:1d:49:
26:02:50:2e:c1:16:0f:34:47:64:6d:e8:4a:bf:f8:c6:3d:d5:
d0:df:14:78:1e:52:22:9d:66:df:9c:fa:e1:6e:09:b4:52:87:
17:d7:9c:fe:3f:3b:1b:3a:f6:0c:c7:fa:e1:97:57:6e:d0:ea:
a1:f5:4d:ed:2e:ee:05:46:6d:72:41:85:8e:75:cb:4b:32:16:
3e:c0:a0:4f:8f:1c:c8:ad:82:6d:d7:bd:19:46:6f:7a:da:57:
5d:86:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:10:59 2026 by rpki-client