Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: HiK4BuC00TVN+vYZMwfi1wx8tkzRD8yydvQs99SOCUo=
Subject key identifier: A6:D8:76:2A:6E:EA:B9:B2:8F:96:37:92:7F:C7:B8:50:98:8F:99:F3
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019F916D9EB161B6C078F02B3B0F58DBD580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:01:47 +0000
Manifest this update: Fri 24 Jul 2026 00:01:47 +0000
Manifest next update: Sat 25 Jul 2026 00:01:47 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: pFTeIOCO2EFiePJ6zxkytiHN3M6biJTisnNpQKeCAW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9e:b1:61:b6:c0:78:f0:2b:3b:0f:58:db:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jul 24 00:01:47 2026 GMT
Not After : Jul 25 00:01:47 2026 GMT
Subject: CN=a6d8762a6eeab9b28f9637927fc7b850988f99f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:c7:d2:f2:46:99:61:0b:3a:ba:a7:42:d3:
29:1e:56:b5:93:2d:ba:fd:41:1b:f4:9f:3c:f6:44:
51:9e:38:73:c2:94:7f:68:8f:6b:3f:5c:6f:15:1b:
42:b4:96:82:b9:88:4d:6a:bb:b4:11:d6:d9:c1:3c:
f3:8c:ba:c0:2c:b8:c0:5c:d1:2c:a4:eb:51:fc:f0:
4b:a2:5a:18:76:5e:db:a0:d3:e2:04:11:4a:b7:02:
3c:7d:b8:27:dc:31:f6:e4:6e:88:46:3d:47:d3:ac:
65:3d:fc:d7:63:c5:ff:9e:0b:8c:6b:c6:9e:e1:28:
4b:29:1a:20:f6:da:64:6b:4d:ae:9e:f4:89:8e:1a:
3f:29:65:0e:f9:76:f7:2e:11:ec:e1:04:c5:cd:2e:
08:38:7b:37:09:34:06:dc:87:f8:4a:6a:ff:1b:87:
ab:58:6d:e7:c7:9c:dc:14:d2:06:e5:7b:e2:8c:77:
61:64:cc:44:44:19:7b:10:cd:ae:cd:2b:25:bf:ac:
ef:ee:5e:ae:a4:3f:03:40:98:2c:80:4e:61:ec:a2:
97:e3:19:8b:7e:12:78:a9:9c:d6:bc:3f:d1:a6:69:
6b:16:9b:f3:fc:d6:21:f4:40:a3:01:d0:aa:b1:d2:
89:d1:42:e6:04:30:4d:f9:0f:45:46:f2:69:27:e2:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:76:2A:6E:EA:B9:B2:8F:96:37:92:7F:C7:B8:50:98:8F:99:F3
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:22:7f:1f:f1:7e:9b:c3:60:87:ba:78:18:2c:80:b4:42:
89:79:84:13:32:00:3e:50:a0:ef:4f:36:aa:da:7b:da:1f:2a:
93:f6:f1:00:55:6c:a4:65:23:f9:f7:98:d3:85:ef:fb:5a:ea:
fe:43:19:d5:24:8b:ca:4e:e2:29:49:26:05:93:8e:dd:76:fa:
b2:c2:50:a8:9e:b3:69:8b:3e:58:41:be:31:81:f5:bf:fd:4c:
7f:03:eb:3c:36:c7:c3:7e:30:a2:bc:e1:eb:a2:29:f9:78:22:
3a:c0:4d:82:ad:a9:f3:69:5d:83:73:3f:76:3b:08:c5:8d:94:
51:47:ac:90:9f:26:0a:0d:ef:9c:44:7c:2d:e0:f8:ac:db:9f:
d0:7e:ea:99:9f:24:01:e1:9b:37:9e:36:3b:14:f8:ac:3d:2a:
31:8b:07:9a:06:fd:32:98:e7:75:f2:be:b4:53:85:6e:33:5e:
89:ff:59:7e:e9:0b:cc:88:e9:03:27:01:9f:2d:1a:f8:5e:26:
f7:c4:9e:6c:28:3b:b5:99:ad:d7:36:c0:a5:6b:8f:1c:e8:23:
ad:db:9a:4e:c7:e4:86:68:48:4c:d5:7c:75:70:6c:47:fc:50:
0e:b0:7b:d2:4b:ed:82:45:69:12:f1:b8:4a:d3:8e:5b:d0:ac:
ee:2b:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:42 2026 by rpki-client