Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: asDhYv4J0Uop8QX2TL9SBS9kGqsQBjgV9B9ZAxESIhA=
Subject key identifier: AF:DF:76:AE:98:01:07:34:9D:59:24:53:5B:EB:09:45:FE:09:9E:BF
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019F91DADAC6677271EFE62C4FEC033A9348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 0536
Signing time: Fri 24 Jul 2026 02:01:06 +0000
Manifest this update: Fri 24 Jul 2026 02:01:06 +0000
Manifest next update: Sat 25 Jul 2026 02:01:06 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: Vj5qPA9i0c8XGINpgrV/8mmYH823WxCmQ/oQqx7S7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:da:c6:67:72:71:ef:e6:2c:4f:ec:03:3a:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Jul 24 02:01:06 2026 GMT
Not After : Jul 25 02:01:06 2026 GMT
Subject: CN=afdf76ae980107349d5924535beb0945fe099ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:9f:e2:3b:10:0f:79:bb:f2:6b:31:6c:13:
45:32:8c:33:6d:f2:9c:90:fb:6e:3d:24:4a:5e:5c:
27:a4:e9:94:d4:b6:26:4e:5f:b1:f8:5e:bd:e0:35:
83:8a:0d:cb:23:14:dd:0b:2a:53:c9:f7:f0:98:8e:
9e:ac:96:7a:38:67:02:85:31:6d:c6:b2:eb:54:8a:
ed:59:73:cb:2b:1a:84:38:0e:69:98:96:d9:a6:ef:
ad:68:fa:d2:6e:d5:26:3d:71:03:a1:34:4f:dc:03:
bd:09:e6:48:8e:c6:ce:2b:3b:c4:71:54:0b:a2:b4:
16:c9:c2:d3:da:07:8a:65:90:87:a9:3d:55:00:2f:
88:2e:9a:a1:06:22:2f:c7:c9:b4:9b:99:8a:ab:33:
ec:55:40:0c:e7:5b:d0:be:f0:c7:de:c1:f6:53:2b:
f5:65:ea:37:75:fb:da:b2:e4:0a:db:e9:71:f9:a2:
99:9e:cb:54:b5:c9:79:1b:a6:1b:37:7d:ec:58:5e:
50:72:5e:1c:d6:04:54:0b:24:1b:65:04:2f:de:b6:
a8:3a:9b:b1:91:3d:0a:64:89:4c:7e:ba:57:95:44:
e4:e9:dc:c2:f0:db:dc:fd:07:53:87:35:f2:a4:41:
c2:b8:bb:a0:7d:c4:37:4b:e7:ab:f1:42:cd:de:24:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:76:AE:98:01:07:34:9D:59:24:53:5B:EB:09:45:FE:09:9E:BF
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e5:e7:ce:1f:8c:57:e9:5b:67:b7:43:49:25:18:04:1d:0e:
82:1c:60:63:9e:e3:b7:e0:23:cc:ee:9e:9c:23:01:6f:ef:71:
bc:ef:ea:4e:03:46:19:e3:6a:4e:e0:d6:29:c3:e0:36:80:aa:
a7:94:21:20:24:0a:9d:a5:6d:51:7d:fe:30:de:5a:27:8f:7e:
f5:7c:ea:29:df:fd:03:02:47:da:67:cc:32:f6:2f:b6:fe:7a:
d2:93:78:ea:a5:a5:22:3a:9d:80:fa:d2:08:3b:aa:da:b6:03:
99:9e:20:da:a5:b2:82:52:35:95:79:c3:14:20:a8:e3:86:cb:
10:0f:3a:1f:66:84:9c:c0:2b:4f:57:ac:99:fd:c9:2e:b7:6a:
81:90:f1:40:3c:80:57:90:5f:07:32:77:1f:f6:c8:0d:16:1d:
9d:84:e5:5c:96:f5:6c:43:89:f8:bc:b2:c1:cb:bd:45:3f:9e:
c1:d1:cf:86:4c:55:9e:97:d4:06:85:53:ef:83:70:1c:c0:72:
cb:ec:c4:51:ec:19:ce:23:5c:9e:91:d1:f2:e5:ac:f0:03:a2:
f5:34:db:db:46:3d:21:7f:00:ed:f6:aa:65:62:51:22:12:f9:
c2:f9:b6:f2:45:d2:28:d0:47:ae:3c:4a:4b:39:58:8b:e2:bb:
52:bc:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:23 2026 by rpki-client