Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: yIaxv52zANt4K77jpGRqixEzkBKr/MuhAK/LG4JLec4=
Subject key identifier: 6F:BD:37:0C:F9:CF:11:05:D1:E4:33:BE:48:1F:31:F1:85:67:D7:ED
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 019F958056E5AE3A934C96200A591385DC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 19:00:43 +0000
Manifest this update: Fri 24 Jul 2026 19:00:43 +0000
Manifest next update: Sat 25 Jul 2026 19:00:43 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa (hash: JS+2KcEt2B3UHtm7B1l/JkKD38qf54IF2F3MmmklzBA=)
3: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: nP0J2+Svx96S8TugX4bsveR1W6MXGMLoSOt7h0sBn78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:56:e5:ae:3a:93:4c:96:20:0a:59:13:85:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Jul 24 19:00:43 2026 GMT
Not After : Jul 25 19:00:43 2026 GMT
Subject: CN=6fbd370cf9cf1105d1e433be481f31f18567d7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:76:cc:c6:bf:08:be:fd:cc:2a:94:a9:db:
f0:41:d4:e4:3f:b2:8b:97:a1:d4:36:5a:e6:49:27:
b9:02:40:46:99:61:2c:b6:9a:a8:79:aa:5d:99:53:
5a:ef:d5:7d:a1:ee:f4:56:8b:ae:53:4b:4a:32:32:
17:47:dc:92:93:8f:24:c1:ce:84:8e:c3:6d:74:db:
67:69:f9:4e:59:1d:d2:17:d8:50:56:13:66:9b:c3:
0f:f4:ff:aa:21:78:9c:d1:7a:4d:2e:7c:66:14:83:
cf:d3:59:a1:bf:c8:26:37:c6:05:a9:33:6c:45:52:
6f:b3:a5:96:50:e1:75:4a:51:e2:e8:48:70:5d:b0:
5e:c8:c2:5d:78:37:82:1e:88:1d:2f:2b:45:c2:54:
3b:83:8f:92:6d:44:35:01:8a:85:59:cf:70:bd:c9:
a2:91:fe:ad:fe:7a:ec:16:4f:88:c8:db:b4:ac:e9:
4b:dd:06:30:77:87:d6:bb:8f:52:4b:da:fe:c4:e9:
01:2e:b8:81:f8:a2:bd:2f:f2:8e:cf:8a:a5:87:d4:
3a:6d:84:98:b8:12:75:69:a7:51:ea:bf:c2:38:e4:
8f:8d:0b:4c:b8:8f:47:4d:65:54:b8:b4:64:e6:d3:
d8:da:77:83:68:91:4e:47:aa:c2:27:f1:1f:96:2c:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:37:0C:F9:CF:11:05:D1:E4:33:BE:48:1F:31:F1:85:67:D7:ED
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:56:00:df:d2:42:3d:f2:b6:ec:8c:91:38:fc:74:cc:99:a4:
ee:49:f0:0d:b5:3a:a8:05:bf:fa:09:28:82:29:2b:56:ee:65:
75:97:68:7b:58:d4:ca:f6:33:77:85:5b:6d:20:e7:d7:4b:ec:
bf:34:14:22:17:68:d3:bf:53:da:3f:2a:55:d0:3a:77:b5:1f:
16:57:67:f2:f8:ed:45:e0:1c:3f:02:43:09:47:45:94:87:94:
7b:9e:34:68:c3:e2:e5:d4:b5:8d:35:d6:a1:7d:30:03:e2:9a:
a0:4c:80:f6:bb:1a:b2:34:f0:21:d8:e2:b9:12:d8:9e:c4:88:
32:10:b5:74:f6:38:5c:7a:02:9c:13:59:5c:e5:86:1d:12:44:
74:3d:9d:8a:d2:ec:db:af:c9:75:13:a7:ce:38:2e:8d:34:16:
82:eb:64:23:9e:e2:01:0f:a8:f3:0a:ae:2e:28:00:4b:7b:ec:
63:49:a5:bf:10:d3:82:10:3b:2c:0f:4c:3a:73:ad:8c:40:62:
0a:63:f6:59:7b:69:6e:47:a2:aa:af:c6:b5:7e:17:23:2f:7d:
b3:98:e0:1f:66:eb:90:c0:99:b5:73:10:64:7c:d7:59:3d:d0:
a1:c4:22:eb:02:b9:f2:f1:14:4d:63:76:a9:1c:a4:21:10:03:
61:e9:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:46:59 2026 by rpki-client