Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: UbsMAeWsgfW7t77NfO8EMrYgOXj3lRyDbLjkr9w+H6g=
Subject key identifier: 7E:1F:EB:0B:84:49:EA:04:D3:05:93:7E:5C:E5:C5:F1:57:4F:15:C4
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019F909118E5A5D643DE937176A8BFDB182D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 20:00:55 +0000
Manifest this update: Thu 23 Jul 2026 20:00:55 +0000
Manifest next update: Fri 24 Jul 2026 20:00:55 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: PEuU8GdE6qFHJ9040O5oyw/fKApgwVqXO3x/MSM6NOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:18:e5:a5:d6:43:de:93:71:76:a8:bf:db:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jul 23 20:00:55 2026 GMT
Not After : Jul 24 20:00:55 2026 GMT
Subject: CN=7e1feb0b8449ea04d305937e5ce5c5f1574f15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:53:3d:e8:aa:c1:c5:b3:81:f1:92:e6:4f:
37:f1:dc:a6:40:4a:85:05:b7:f7:b9:bf:89:26:e4:
a4:27:5e:dd:60:31:5e:e3:a6:7d:6e:a3:0d:1c:9c:
3a:64:83:e1:b4:d0:72:6c:ee:46:ee:ea:29:a5:69:
17:b9:0e:cf:24:e1:5a:03:05:8d:31:c4:2a:be:88:
b4:0b:34:ad:70:41:60:90:e3:e8:a4:d4:81:ad:61:
eb:10:f9:af:df:3b:4f:0b:06:f4:fc:6e:2b:5e:62:
ed:73:31:33:e6:9d:58:41:44:0f:3c:7e:6e:6b:47:
68:df:bb:68:52:ba:38:47:87:63:b3:2b:a2:bc:ab:
5b:20:40:b0:7c:8a:bc:db:c5:33:1f:f6:6b:77:4b:
d5:4b:18:f1:7d:c1:c0:7b:ac:0c:4a:2b:dc:eb:50:
8b:1e:3e:ff:93:4c:05:1e:80:23:e2:ac:aa:03:40:
ea:ed:93:01:b2:0e:7b:2f:dc:14:bd:cd:38:b7:6c:
ef:60:3d:68:95:46:8f:60:f7:50:da:b4:51:b9:cf:
aa:08:59:e9:37:56:59:38:07:cb:68:a3:41:f8:eb:
3b:98:00:12:31:fe:91:1e:20:b0:bd:e4:25:17:69:
9c:58:b7:19:a0:02:bb:56:e7:da:b9:85:e3:7b:6e:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:EB:0B:84:49:EA:04:D3:05:93:7E:5C:E5:C5:F1:57:4F:15:C4
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:ff:9d:43:1a:92:f4:21:24:6c:80:6a:46:6e:3a:8f:7f:
de:84:74:f7:a2:78:66:f8:89:56:f2:30:9a:18:6a:49:9f:7e:
c3:6f:f1:7c:cc:e0:80:ba:8a:dd:20:20:e7:ab:73:8c:c8:e6:
f0:de:4b:4a:76:07:0e:fe:03:52:6d:3a:48:f7:2f:5a:80:66:
33:83:25:27:d7:e3:4e:47:45:02:fe:a2:b9:21:25:fa:06:42:
80:fe:c2:21:be:b7:5a:fe:2f:50:7f:b8:09:01:a1:24:d1:3f:
4e:d6:12:b5:e6:38:66:7d:30:5e:00:ff:cd:02:1a:e6:78:f1:
24:13:ad:86:63:ca:3e:6e:72:06:9c:7a:cc:3c:11:71:86:70:
9c:77:f6:52:54:52:b7:48:c2:73:4c:b3:0c:78:96:11:c2:00:
7e:5a:4c:59:11:a0:7a:9d:d6:7e:0b:a6:6f:48:42:34:ce:b5:
20:78:50:0f:0a:c5:f0:53:d4:03:98:a5:80:94:86:b1:16:cc:
94:49:b5:10:67:84:73:e0:0a:ac:54:7b:bb:90:21:fa:73:96:
34:05:f6:12:fb:81:7f:62:94:e0:75:80:b4:7b:ff:f1:0f:8b:
88:59:2e:8d:17:83:81:48:b7:80:e7:bc:68:08:9f:85:f5:5c:
31:1a:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:17 2026 by rpki-client