Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: HkiSCoPSQzc0yxN/XIu+CoYXPOqM6K1ZCYCgizfKgR8=
Subject key identifier: 99:25:AA:97:2D:57:59:82:3A:83:DC:42:E3:75:CD:52:77:41:B0:95
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019F91DAE83D0FBC53BCFB9EF7A1BF733A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 1957
Signing time: Fri 24 Jul 2026 02:01:10 +0000
Manifest this update: Fri 24 Jul 2026 02:01:10 +0000
Manifest next update: Sat 25 Jul 2026 02:01:10 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: yiuDbUw1nuMcymkGnJ6Yf/FX5mt7mk0wa9EVj//8dFo=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e8:3d:0f:bc:53:bc:fb:9e:f7:a1:bf:73:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Jul 24 02:01:10 2026 GMT
Not After : Jul 25 02:01:10 2026 GMT
Subject: CN=9925aa972d5759823a83dc42e375cd527741b095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:ba:a1:fb:10:5d:ca:b6:b9:54:66:ad:ca:
79:0c:56:b0:e2:c3:f5:f4:c5:d8:09:6e:f0:f8:2a:
60:45:35:b0:25:e2:f7:1d:8a:51:d5:07:61:d2:3a:
09:71:80:35:7a:82:1c:ce:3d:7e:d4:9c:87:1b:98:
0b:96:8c:04:40:99:4a:34:1e:7d:86:66:b9:c7:c2:
f5:fa:84:5f:c5:b1:aa:e1:ec:bd:5f:65:b7:73:fd:
bb:a0:86:a7:c9:54:80:e0:b3:72:bf:6d:8e:bf:f0:
ae:3a:15:79:f2:25:f5:0e:5d:1b:c9:45:24:a8:cc:
56:da:18:32:62:51:bb:32:17:6e:ea:28:32:7c:94:
70:b8:e9:42:ca:9e:9b:d3:44:dd:a4:92:2c:4c:05:
2d:ad:f9:e9:a6:1f:82:bf:c0:d1:e7:13:6d:71:76:
db:13:f6:e9:89:2e:e5:b8:59:c5:fa:49:9e:41:97:
45:02:47:c2:f3:fd:e8:f9:86:fb:5e:43:5b:f3:d4:
5d:81:05:8d:46:a9:58:40:67:a5:b9:b2:3d:69:aa:
bd:55:fc:4a:4c:ac:1e:da:75:39:88:0e:c5:93:06:
8b:3a:90:3d:82:72:75:eb:e5:e0:a1:eb:94:19:df:
46:5a:67:1d:f8:da:36:ac:06:15:98:b6:ca:6a:c2:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:25:AA:97:2D:57:59:82:3A:83:DC:42:E3:75:CD:52:77:41:B0:95
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:64:7b:a3:d4:d6:9d:1a:43:b8:71:19:8b:6e:3b:32:ca:72:
6e:5a:04:13:ed:19:e3:33:46:43:c6:4f:fd:39:3f:c9:11:75:
32:4a:85:72:84:6f:52:1e:95:6d:18:0f:60:95:4e:30:d1:02:
38:06:0f:16:49:84:b5:76:1e:7c:b9:e6:58:21:2f:d6:cf:7c:
f0:85:63:47:d4:cb:e1:ff:ba:79:89:bc:e9:05:7c:d2:a2:32:
7f:0e:2b:2c:66:51:4a:9e:82:40:41:8e:fa:c3:01:eb:1d:55:
6f:bd:55:ee:7a:83:2f:5e:c5:4a:12:af:31:62:a4:5e:17:ca:
c5:ee:71:e0:c3:61:2f:8b:c1:61:bb:54:d1:b7:dd:57:f2:bf:
c5:41:98:d7:10:f6:2a:2f:5a:fb:d5:a6:a0:dd:62:80:cc:bb:
75:7b:07:82:72:91:eb:c2:9a:ed:78:75:49:d1:1d:fe:d9:f9:
41:06:18:27:23:87:2b:bb:60:81:64:e2:5e:2e:8e:0e:e2:89:
4e:5c:29:b0:b9:6b:9e:e0:78:d8:cf:77:8e:ca:a6:e6:5d:e0:
03:2d:97:a4:5f:d5:44:47:22:fa:91:ac:45:51:17:23:41:68:
dc:39:e7:d4:8a:f7:e8:19:a0:7c:59:0a:69:e0:42:65:73:3d:
14:f8:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:19 2026 by rpki-client