Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: fFxd6jpv9HP9xP7mPvCYC9nMZgyQSwhqrOs8t0PCTg4=
Subject key identifier: DC:C4:81:1E:5E:55:97:05:3F:BD:7B:0A:AD:07:96:21:3B:3A:AC:FC
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019F8EA224558F1C561F60B348DEB78C35FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 11:00:18 +0000
Manifest this update: Thu 23 Jul 2026 11:00:18 +0000
Manifest next update: Fri 24 Jul 2026 11:00:18 +0000
Files and hashes: 1: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
2: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: fV2GtU7r7Nby0XFrQEmQrIdXcqgAAJ7Gw/O4R4DoJEk=)
3: rk_qIg4M0T6VeSZIH6qI5IJsveA.asa (hash: LxPs6qFGOS3d/DfhY0ScdJWhdWn8Ibcrre8xQ10KueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:24:55:8f:1c:56:1f:60:b3:48:de:b7:8c:35:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jul 23 11:00:18 2026 GMT
Not After : Jul 24 11:00:18 2026 GMT
Subject: CN=dcc4811e5e5597053fbd7b0aad0796213b3aacfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:de:89:19:0b:05:01:42:58:98:39:e6:26:
43:af:14:f4:09:e4:7c:87:77:fb:63:e9:0d:d7:b7:
6a:9a:e7:75:b5:2c:c3:4c:f7:a6:89:23:38:eb:2a:
92:f8:bc:1e:ba:54:86:69:be:59:95:58:6f:4f:0d:
a5:34:16:c1:0d:e2:18:4d:d5:eb:ad:ee:7c:fb:9d:
3d:8a:26:01:f9:67:17:14:06:14:26:02:8e:9a:c7:
81:03:50:b1:0a:9c:2e:75:0b:68:99:03:24:55:5a:
b5:12:8d:e4:e9:5e:af:33:60:11:e0:55:cf:5a:5f:
8b:3f:79:8d:96:eb:75:cd:6c:ff:2e:53:6f:f7:f8:
e7:9a:b7:28:5c:bc:0b:2e:c4:ea:c0:85:15:60:6d:
e1:71:5a:1a:c9:8f:35:dc:dc:56:0d:2f:33:16:c0:
6c:b5:60:70:da:cc:43:ab:2a:a9:db:bf:f1:8f:ca:
5d:70:6c:52:a4:3b:4f:ef:16:46:0f:54:d8:2d:17:
d6:30:c2:c5:d8:be:84:9f:d9:d5:fa:52:c1:bf:c8:
36:96:3c:6e:63:d6:42:b0:ff:9d:e9:ac:0a:8b:d7:
16:0d:fb:a3:0c:b4:61:71:a2:a6:08:22:83:df:79:
6c:58:bf:75:ae:88:c7:c6:06:28:85:33:a0:e7:57:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:81:1E:5E:55:97:05:3F:BD:7B:0A:AD:07:96:21:3B:3A:AC:FC
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:83:b4:66:5e:07:80:b2:69:26:16:3f:72:a4:8e:e7:90:51:
6f:47:11:ea:fd:4c:21:a2:26:c7:97:bf:8e:06:ad:95:e7:d2:
c4:ad:d9:c8:65:12:e3:15:83:e9:13:c2:27:c2:47:58:d9:c9:
2f:7d:14:8c:d0:45:5b:7d:25:02:20:4a:ef:6a:b5:0e:8c:5d:
a7:96:d1:3b:89:a4:d6:b7:ee:ed:6a:4f:3a:a4:75:04:6c:59:
49:9a:1e:bb:95:d0:f4:eb:bf:3d:c8:7b:d4:16:ac:20:52:44:
4c:c5:c3:e9:5d:95:9f:0e:28:22:dd:86:19:c7:08:c6:8a:b6:
84:de:8a:72:e8:10:f2:fa:79:a8:8f:2a:8b:08:0a:05:2d:45:
63:60:ca:00:05:96:7f:f0:6c:40:92:6d:f8:b5:23:de:f5:e2:
af:e5:e4:01:da:33:26:7d:e1:8c:6f:a1:2a:cc:83:f0:f7:bb:
99:db:32:d7:d8:61:11:2d:3b:24:95:e9:2b:13:29:d5:70:4e:
59:46:f4:b3:e2:0b:1c:b7:15:97:e7:88:f2:8e:06:a4:05:5e:
4d:fa:49:4d:c9:68:31:9a:0f:59:6d:70:76:f3:d5:d0:4b:ad:
f1:a5:e4:2b:bd:eb:29:47:1a:7b:db:52:5d:b3:0a:de:9b:bc:
23:39:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:31 2026 by rpki-client