Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: k3xjUbiUvjmdNNnc9OXiQ6UIDF17RSawt9J4mzTsYbY=
Subject key identifier: 2C:19:47:B5:72:35:F5:05:70:8C:58:34:CE:79:AE:89:8F:04:CB:E6
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019F939253E977B542E4EA36B48BE16A21D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0679
Signing time: Fri 24 Jul 2026 10:01:08 +0000
Manifest this update: Fri 24 Jul 2026 10:01:08 +0000
Manifest next update: Sat 25 Jul 2026 10:01:08 +0000
Files and hashes: 1: 38pGZs7H26DrGSXKpy7NGMGvyNg.asa (hash: ZxC1UU+w8hDxkvYvkuN6y+g+zQIOTKFm51EQ8DphQn4=)
2: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=)
3: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: gwEC1LOjmJjxupU8ssA3GRJ9zVyVOyr0/MK1S6LhZuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:53:e9:77:b5:42:e4:ea:36:b4:8b:e1:6a:21:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Jul 24 10:01:08 2026 GMT
Not After : Jul 25 10:01:08 2026 GMT
Subject: CN=2c1947b57235f505708c5834ce79ae898f04cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:74:48:00:d6:98:0e:a6:fd:e1:d1:26:6d:
cf:c9:24:f0:ed:ef:1b:48:dd:17:eb:66:ed:45:28:
66:40:ca:85:18:3f:4e:de:b8:93:b9:09:2a:6d:89:
2e:b3:e1:4a:53:cc:b1:c4:13:bd:22:c2:3a:3f:21:
50:5d:14:41:45:0f:0b:db:7e:51:19:45:ac:c6:e6:
8a:86:1a:eb:34:4d:ed:a7:a6:d4:f9:d3:31:30:2c:
4c:a8:5b:17:05:16:6d:a0:c4:f9:17:f0:bb:c6:ee:
90:cd:00:55:96:99:9b:50:0d:dd:54:5d:37:24:e4:
9b:81:ca:4a:5e:3f:db:66:5d:27:d4:01:53:dd:18:
54:7e:bb:f5:1e:e1:de:40:75:2a:fe:e4:49:d6:2d:
ed:c3:07:bf:58:1e:65:d6:80:ff:10:e5:ec:ab:5b:
62:e5:44:20:1d:a7:1c:73:7a:1b:a5:8e:c3:5b:00:
b3:a3:8d:59:46:26:e9:3f:44:7b:73:e8:49:e7:9b:
12:a8:2b:48:45:23:57:62:33:74:dd:15:ee:28:f6:
61:d2:5e:d2:50:77:04:3a:f1:4c:64:5c:38:42:03:
87:df:95:1a:01:ea:90:4d:c4:8f:4c:c2:9b:db:31:
df:c6:ab:c5:e3:59:d9:6e:19:89:fd:0a:b4:3f:43:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:47:B5:72:35:F5:05:70:8C:58:34:CE:79:AE:89:8F:04:CB:E6
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:cd:a4:a7:cf:1e:4a:21:20:ed:f8:2c:c4:0a:8a:b1:30:e9:
9c:e6:51:e9:c7:bc:71:40:79:d8:59:8e:79:b4:69:be:e5:23:
43:2f:c7:bb:53:8c:c2:cb:e0:94:98:82:ca:ac:ea:81:bc:9f:
73:50:89:13:a2:f3:c9:6a:e3:c3:bb:45:a6:44:c6:81:7b:21:
ad:9c:f8:6b:cc:e4:ac:bb:15:30:99:62:7a:0c:18:26:cc:da:
1b:0c:50:79:2d:d9:f7:a1:d6:27:f6:8d:4e:da:2c:f6:57:7c:
f0:6c:7a:3d:40:71:df:d7:91:69:b9:2d:2d:7a:ee:cb:88:d2:
31:04:f9:95:01:10:0d:10:55:d4:31:1d:3f:68:0b:92:fb:48:
b1:f7:0a:34:51:fa:34:ba:2b:d5:82:43:73:58:f4:fe:f1:78:
18:70:eb:3a:fc:03:f9:8d:98:f5:3d:41:e4:a7:e2:4b:3b:0a:
de:d7:34:6d:c2:f9:6e:1a:17:71:ad:53:d8:ae:99:33:29:ac:
cb:a9:ee:2b:b7:06:af:af:2f:24:52:ee:b6:a9:a4:5b:45:ea:
79:2f:f5:60:d3:72:75:d2:bb:a8:4d:d5:1c:7e:c3:31:b7:5e:
82:46:46:d0:1a:7d:ef:71:7e:83:de:40:8e:91:b4:aa:0b:2f:
45:3b:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:41 2026 by rpki-client