Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: vzqdaZbaggfHvumx9wcHnl9qZNiaGmse3HFRG5aHAtY=
Subject key identifier: 04:1B:77:4B:0F:04:87:74:5C:52:63:D2:17:BB:8F:CD:FE:63:47:BF
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019F9436E40D67F4D3B794FB70FED751D58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 105E
Signing time: Fri 24 Jul 2026 13:00:53 +0000
Manifest this update: Fri 24 Jul 2026 13:00:53 +0000
Manifest next update: Sat 25 Jul 2026 13:00:53 +0000
Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: zkCK2lnnoFMChF12EUmJi6wFBzBzzZR0Q/8OsFIXs4c=)
2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e4:0d:67:f4:d3:b7:94:fb:70:fe:d7:51:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Jul 24 13:00:53 2026 GMT
Not After : Jul 25 13:00:53 2026 GMT
Subject: CN=041b774b0f0487745c5263d217bb8fcdfe6347bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:0f:56:fc:f5:23:35:36:4b:1a:47:51:af:
27:fe:10:00:f0:67:1e:4c:db:5a:6d:87:1d:bb:17:
db:93:b5:ea:fe:f6:28:a9:3c:af:a6:1d:53:dd:0a:
6a:13:b2:93:b2:87:12:5d:37:0c:81:09:01:f5:86:
fe:de:2e:8d:81:16:72:2c:42:69:c9:f2:65:55:40:
39:ff:aa:23:5b:ad:3f:74:93:e4:00:56:5f:ab:69:
99:89:0f:4e:e4:cd:77:e0:92:d5:57:b7:54:4b:56:
ed:d2:bd:fd:ab:de:b5:6b:7f:90:93:24:75:ac:bb:
50:a4:57:79:7c:ff:e8:66:95:58:b6:16:89:0f:f6:
82:04:4d:52:79:48:bd:e9:f7:6d:cb:35:7f:32:46:
4a:58:b1:a5:3d:65:ac:9e:7f:ce:2d:5e:f1:6a:f2:
9a:b8:e2:98:65:14:46:7b:5d:a6:27:a8:5e:1a:68:
ff:56:b4:ce:0e:3e:82:35:0b:8c:ee:73:cd:fc:84:
78:85:64:7f:2e:9b:58:2f:e3:0f:46:9b:5a:cc:86:
d2:a2:9c:ea:56:ad:4a:63:22:85:2f:47:e1:f0:45:
51:9c:2a:91:df:1e:37:78:98:65:f9:04:68:90:cf:
61:74:3e:1b:c5:59:e8:b5:92:fd:bb:af:5a:8b:3e:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1B:77:4B:0F:04:87:74:5C:52:63:D2:17:BB:8F:CD:FE:63:47:BF
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:25:9f:b7:eb:25:85:6b:41:80:7f:69:aa:ff:7d:e5:46:
70:55:e7:46:d9:4c:0f:92:6e:f9:a4:e5:cb:5b:3f:3c:73:50:
30:b2:ed:7b:2c:4d:0c:76:b2:25:81:f5:22:a7:c3:b2:52:b8:
ea:91:1b:e9:3e:be:9a:93:15:6c:be:8f:79:72:b5:41:97:af:
b6:e4:f4:51:a4:35:79:22:e8:22:0e:3e:bd:9d:fc:70:d2:fe:
cf:ee:63:2a:03:97:a0:30:23:a3:9f:85:c4:17:e5:d7:4b:40:
51:bf:0b:17:5d:2b:b1:3e:31:30:9a:0b:79:38:c0:42:40:bd:
e5:20:a0:ea:3c:45:26:f9:81:ca:f5:14:41:90:d3:26:09:d0:
f6:ac:8b:b5:30:ec:ba:bf:a0:e1:17:42:4c:60:6c:37:b7:ee:
4e:e0:27:94:24:cb:41:6d:93:a0:71:a6:83:02:bd:a7:b2:f9:
43:32:d0:b5:09:1a:7e:0d:e9:41:c6:5f:e8:06:00:66:01:f5:
30:99:18:bf:99:23:65:2e:45:8b:71:41:26:f9:7c:48:67:fa:
27:7e:69:45:63:2f:94:3e:10:48:70:56:7e:36:84:f2:d6:32:
7f:d3:e7:f0:2d:25:5a:68:24:4c:12:74:79:94:b3:13:da:83:
b2:0c:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:39:30 2026 by rpki-client