Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: zPAWYZAK2wJXsf36JQDvQwjjMqFBU0EyL6vqqan8CAs=
Subject key identifier: 3E:2A:6F:67:24:3F:A1:CA:8F:02:4F:A5:C4:6C:16:91:08:E3:00:4A
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019F92ECB777E8F2FF5016E4CD272C8BA7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 07:00:14 +0000
Manifest this update: Fri 24 Jul 2026 07:00:14 +0000
Manifest next update: Sat 25 Jul 2026 07:00:14 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: BRf1u2tI0MdQq-fmpym4aodlAHc.roa (hash: EgaKCAtRV2lGFKlk2kU+aO26h/pUeqeqSUfRHYRzlNU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: zLQNh1zewBWWsTC7uNx8b3qyBlUDxCYyACTLlRnqYLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:b7:77:e8:f2:ff:50:16:e4:cd:27:2c:8b:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jul 24 07:00:14 2026 GMT
Not After : Jul 25 07:00:14 2026 GMT
Subject: CN=3e2a6f67243fa1ca8f024fa5c46c169108e3004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:df:5b:0d:3f:02:0b:82:36:c4:09:84:4d:
84:cb:56:40:14:2d:be:50:ba:24:ed:96:20:9a:85:
07:76:54:23:89:8c:58:ba:62:ac:9e:ab:32:89:3e:
91:e3:73:75:0b:71:81:34:fb:48:7c:09:c1:22:b2:
b1:d7:86:35:f9:e6:0d:5c:09:5a:bd:0f:b0:26:a8:
71:22:95:17:5e:55:30:9e:bd:24:70:56:f6:1d:25:
25:cd:cf:d3:f0:2e:f2:d2:ed:73:4c:10:d1:32:3f:
9e:2a:ec:2f:d6:3f:2b:bd:2b:3b:b1:16:44:7a:ef:
d1:20:26:47:b7:47:9a:a7:90:0d:57:f6:fe:6f:49:
45:a8:f8:24:c5:7d:1b:ce:cf:6b:5d:38:25:e6:fa:
0a:23:96:41:21:96:61:f6:d1:81:33:49:ad:ff:71:
ba:43:38:66:a3:5a:9f:88:e4:a1:b9:d4:7c:46:b1:
a2:de:92:3a:b0:b3:4b:18:91:f2:af:82:35:d6:a8:
1d:93:36:e5:eb:ee:f4:42:d9:3a:4f:e3:9a:9e:86:
81:33:5a:10:ae:d9:b9:d9:0e:5f:76:86:6f:fd:d7:
4d:3c:6b:58:81:4b:c9:94:ce:87:3f:5e:b8:f2:2b:
a9:03:55:92:8c:e1:ca:0d:b2:d3:e6:0e:4f:90:a0:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:6F:67:24:3F:A1:CA:8F:02:4F:A5:C4:6C:16:91:08:E3:00:4A
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:92:57:2e:0d:c4:59:b1:49:a6:2c:8b:ab:dd:21:8f:a0:6d:
5a:20:8a:31:16:95:a7:96:6a:e0:51:99:24:ee:ba:c6:9c:99:
bb:7a:8d:f8:76:4d:e5:d7:90:09:69:6f:41:33:73:1c:ed:b2:
5e:3b:76:ef:99:be:da:25:90:26:b6:74:ac:e5:81:b3:1e:3a:
64:0a:45:82:38:22:94:89:6f:41:20:ff:c6:6e:53:cf:2a:be:
fe:ef:8c:1c:29:09:d3:03:5d:5b:f7:a0:91:ae:b5:38:94:aa:
0d:b5:0b:03:2b:71:28:32:af:53:05:6f:78:80:c4:a7:d7:4d:
af:2c:52:cc:e6:7c:c5:f9:0f:79:0b:3b:7d:56:3f:b0:03:f0:
67:2c:34:15:8e:6e:a1:8e:ec:69:87:ce:f9:b9:57:b4:49:f2:
c1:e4:85:e3:f6:4e:54:e3:08:af:16:e0:15:10:55:d7:a2:5c:
cc:2c:89:51:d9:50:18:4f:9d:ae:52:56:91:b0:64:bf:26:17:
1b:ff:65:f8:6c:fc:51:ce:62:7f:9d:9b:fc:e0:df:86:55:9e:
01:5c:b6:f8:ab:e4:d5:19:d4:03:20:03:a2:57:24:54:c3:79:
32:ba:12:c4:99:8f:bb:2e:67:19:d1:56:ed:e8:ae:33:9c:a6:
70:a4:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:19 2026 by rpki-client