Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 0TCQi5CAvHXBqe4HI2r0oE5d2dtmgOsSjU4xS4o0mrU=
Subject key identifier: 03:89:0D:A4:61:56:29:CB:12:8F:08:00:60:02:93:D9:08:70:65:AE
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019F935AE2F0CBBDBE5BB6CEC2F8FF58AFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 11A5
Signing time: Fri 24 Jul 2026 09:00:34 +0000
Manifest this update: Fri 24 Jul 2026 09:00:34 +0000
Manifest next update: Sat 25 Jul 2026 09:00:34 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: RunV6HmITL2xeMgboeWa8b/RTM5ZtTQNOLq+uZU8Mn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e2:f0:cb:bd:be:5b:b6:ce:c2:f8:ff:58:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jul 24 09:00:34 2026 GMT
Not After : Jul 25 09:00:34 2026 GMT
Subject: CN=03890da4615629cb128f0800600293d9087065ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:32:d4:80:d1:43:e1:b5:2f:a5:97:04:af:
ba:95:d6:2f:4f:bd:92:dc:55:e6:48:21:7f:54:5b:
4d:64:eb:37:8d:01:7a:33:82:f6:f3:cf:04:9b:b4:
a4:e6:3f:cf:b0:6b:1c:39:a2:34:ee:f1:2c:49:26:
99:ef:ac:e0:10:5b:6f:97:2a:08:4e:e6:0e:01:70:
6a:c7:79:f7:4a:a1:c0:9f:f9:66:10:10:24:e8:ec:
b1:9c:73:af:46:55:77:0a:d1:99:a9:b5:47:9d:e7:
3f:7b:cf:14:04:a2:c0:4d:d8:f8:3a:5e:c6:cc:66:
49:11:0d:04:9c:05:6e:57:47:c0:73:12:5b:92:71:
68:b6:e1:94:af:21:09:08:2f:2f:b9:15:88:77:5f:
28:61:61:f2:58:68:2a:a1:6f:7a:82:e1:61:69:6d:
91:40:d7:fb:6e:e4:9e:b0:6b:84:60:96:9a:54:74:
c8:e9:56:cd:8b:59:2d:55:b1:6d:4c:61:3b:df:b9:
e7:a7:ed:c8:8b:bc:f5:0e:2a:94:a4:42:42:66:9e:
13:17:7f:ed:c1:de:73:4e:e5:78:0c:79:e5:65:5d:
65:96:44:b6:f8:d7:1e:c3:63:01:bb:da:fb:ad:60:
5a:d6:3f:ff:c0:27:7d:44:4a:1f:67:5f:1d:25:5c:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:0D:A4:61:56:29:CB:12:8F:08:00:60:02:93:D9:08:70:65:AE
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2e:a7:01:d1:b4:c7:1c:72:15:32:69:0f:7f:13:60:c3:67:
ad:3f:9f:fe:04:28:84:e0:6c:70:f3:8c:5b:b4:7b:7a:5f:94:
88:b9:26:73:9f:d2:6c:67:d6:c6:77:67:6d:43:bb:b3:f9:0c:
19:4a:a0:95:d5:23:65:20:c2:3a:0f:f2:2f:9e:c4:cf:a1:6d:
18:07:01:4e:8a:0f:31:cf:5f:0b:53:5b:06:99:17:b3:e3:20:
9d:9c:4e:d9:f0:1c:fe:e7:f8:4f:3b:d4:d2:28:18:3a:14:f5:
62:7d:37:2a:c3:0a:2d:3d:f6:a8:df:0b:9e:f4:26:4b:25:be:
53:d4:0b:1c:95:b3:0c:8b:45:c1:ad:d6:fa:94:d4:d3:c9:c1:
72:cd:c9:b8:4f:88:26:bf:2d:4f:e0:0d:9a:3e:f6:e4:9f:4d:
09:66:3f:f8:d4:c1:fb:0b:a6:08:97:a6:64:bf:ac:20:b6:20:
34:2c:50:36:4e:5b:83:f9:77:97:e0:4c:17:fa:be:35:d3:16:
da:9b:ed:28:ed:87:56:ff:b6:2a:1a:65:0a:7a:7a:e5:09:06:
45:b5:59:10:58:d2:81:2c:b2:f5:32:2a:9c:cb:eb:9f:ab:6b:
af:1a:58:36:ce:ec:fb:97:4a:70:12:08:2b:b3:33:72:56:a5:
30:49:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:54 2026 by rpki-client