Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: NoN0Kv1mkR9eg9TnVX75Y6rHGTuB1llfcAlSheb7Pqw=
Subject key identifier: 0C:F2:30:72:A2:3B:4C:C7:AD:58:1B:FE:8C:15:C7:1E:8E:79:B2:A7
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019F8F7E23183B07DF2BC713C0F76A7FC5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 022A
Signing time: Thu 23 Jul 2026 15:00:35 +0000
Manifest this update: Thu 23 Jul 2026 15:00:35 +0000
Manifest next update: Fri 24 Jul 2026 15:00:35 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: y5jcmU9kr7RBGBTiRtkGx+1+JCtAJTWwxrRh7wKaJ9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:23:18:3b:07:df:2b:c7:13:c0:f7:6a:7f:c5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Jul 23 15:00:35 2026 GMT
Not After : Jul 24 15:00:35 2026 GMT
Subject: CN=0cf23072a23b4cc7ad581bfe8c15c71e8e79b2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:92:24:35:27:3a:ad:ad:1d:89:ec:5f:8d:
d0:f2:5b:3a:f1:93:82:f1:a6:6b:f7:de:e3:81:0a:
5c:f0:21:aa:46:8d:d3:03:d5:9d:02:22:e6:c4:c2:
d8:85:1b:de:64:df:17:ef:55:7e:03:11:1c:6a:40:
d9:80:a0:d1:b9:02:fa:dd:5b:63:ff:32:86:09:e3:
0a:dd:55:0c:27:47:f4:48:91:2d:3d:16:91:33:5b:
f7:da:21:67:51:32:61:74:fe:1c:d7:ba:8e:67:15:
be:1b:c0:c7:5c:59:48:dd:6e:4c:60:25:f7:6b:aa:
8e:86:87:1f:82:85:b6:e3:55:c2:3f:07:9f:89:0a:
03:2c:92:10:25:fa:f1:fe:d6:a1:87:35:c0:d6:7d:
52:1b:7b:79:fd:ab:42:23:89:c0:c0:e0:be:e0:fa:
c4:31:8a:e1:bf:4b:0a:03:a1:dd:8b:77:dd:34:42:
29:97:f3:cd:e0:17:a6:f7:ab:4b:ed:ef:c5:da:fa:
5d:98:c2:4a:68:77:cc:46:47:05:ba:29:32:5c:e9:
4a:e5:71:e3:6f:8b:f8:c5:b5:41:fa:c9:99:3c:a2:
1b:ab:89:f2:09:7f:23:71:d5:5a:a6:f1:dd:f0:c7:
bc:6f:af:91:22:fa:c7:91:b8:8e:ab:67:a7:09:92:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:30:72:A2:3B:4C:C7:AD:58:1B:FE:8C:15:C7:1E:8E:79:B2:A7
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:25:17:35:88:26:b7:08:f9:0c:ef:58:d4:76:24:c4:cd:
f6:43:ab:65:00:74:15:fe:3d:70:7f:89:d1:80:98:c8:01:b4:
c7:94:fd:6f:2b:58:f4:e9:bf:93:c8:db:b4:6d:94:f3:44:50:
bc:37:b8:30:a6:23:d6:63:a1:06:1f:cf:4b:a4:f1:d2:ff:17:
36:9e:d6:e6:f6:d8:5c:18:c1:00:5c:93:b2:2e:75:38:57:94:
8c:37:ad:41:2f:1e:f1:5f:21:79:63:64:c5:89:1d:a4:4a:50:
ae:ea:b1:c6:34:e1:42:63:36:11:12:46:23:64:19:3a:3f:f1:
88:12:9c:30:12:56:cc:af:b9:6e:1d:73:60:93:bd:13:24:af:
b6:6f:13:07:ab:67:b8:89:5e:fc:e8:44:0b:63:b9:e1:bb:f6:
c3:f5:5b:02:3d:dc:55:50:c1:91:7b:54:25:b2:c1:45:a4:a9:
d2:d6:d5:fb:e8:97:f0:75:3b:8e:1f:7f:7e:69:2c:ef:91:0f:
30:ab:1e:53:82:22:c8:c0:af:af:ae:49:82:be:f4:74:68:66:
44:f9:70:f9:35:14:b6:da:83:c8:7b:11:34:b6:46:a7:6d:28:
e7:d6:4f:cb:e6:b2:b7:fc:29:7f:88:f6:f3:5f:42:38:0d:82:
6e:ea:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:26 2026 by rpki-client