Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: oB/DX4w4GWpggnDM/eospTH+Qeh0AOvl6WQXLxOucnw=
Subject key identifier: F0:2E:F3:DF:76:81:A8:F8:3E:88:D2:75:C2:38:F8:88:37:78:9C:9A
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 019F946DA05966F2DD993BBDA034EC3A9F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 171A
Signing time: Fri 24 Jul 2026 14:00:40 +0000
Manifest this update: Fri 24 Jul 2026 14:00:40 +0000
Manifest next update: Sat 25 Jul 2026 14:00:40 +0000
Files and hashes: 1: g0-HGh4bznaFgiFX5KCpF3Q8z70.roa (hash: kuqsXcay0qN76iKLs/AKqPrHvwfsG46t73MVLxZfYe0=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: Hl6+6Ku2YgtXqZiXbvMCA6rjMw6fzD1uXvUTTcF5rbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:a0:59:66:f2:dd:99:3b:bd:a0:34:ec:3a:9f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Jul 24 14:00:40 2026 GMT
Not After : Jul 25 14:00:40 2026 GMT
Subject: CN=f02ef3df7681a8f83e88d275c238f88837789c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:b9:d4:38:0c:20:dc:49:82:7f:b4:79:16:
9f:99:21:f7:1b:a0:53:e9:c5:0b:34:48:d4:e5:d6:
03:0b:77:1a:86:5b:92:56:45:7d:13:83:b2:8d:f7:
fd:ee:fa:fd:37:a4:66:9e:75:e9:8f:7d:8f:fb:f8:
d2:06:e6:3f:2f:86:e6:a0:3a:15:7b:be:c1:e9:1a:
e7:82:d0:c7:fb:d6:08:ef:84:9c:c5:81:2c:75:76:
6d:c8:92:27:0f:4c:31:8f:39:f0:58:4f:18:9e:96:
2a:ae:8e:d6:68:9c:35:61:c8:09:a2:ff:b3:ae:f8:
3f:48:e5:5d:d4:d7:68:f9:0f:14:91:61:82:18:99:
ab:77:95:76:d5:3c:ee:4a:af:21:ea:c5:f9:1e:5a:
e4:92:93:bf:08:5f:15:50:73:89:c6:a7:c8:a1:1a:
05:66:3e:c2:5f:ec:70:3e:33:39:35:dc:06:42:1e:
5d:8d:4f:0c:c2:be:b1:32:b6:8b:94:9e:18:2a:c7:
c1:16:56:8c:5c:4a:12:9b:25:6c:d9:ec:64:f7:40:
bf:ee:23:b6:d4:1c:cf:18:ec:c1:10:7f:11:e7:d7:
a8:25:30:fd:e5:1c:be:37:84:b2:30:f0:ec:c6:ea:
c9:e5:96:d2:82:9e:df:95:36:03:11:d9:1a:dc:c4:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2E:F3:DF:76:81:A8:F8:3E:88:D2:75:C2:38:F8:88:37:78:9C:9A
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:95:fb:54:81:68:b5:d2:d5:6e:c0:0c:5e:ab:74:c0:1e:62:
47:cd:dc:ef:ce:b7:55:5e:23:49:c1:24:46:43:a7:06:7a:1e:
20:79:38:17:52:93:eb:28:96:4d:53:8e:de:45:43:15:1e:b6:
61:96:df:ba:b3:c8:c5:bb:02:89:a4:13:c9:7f:e6:e2:e2:c2:
8b:98:7b:68:a2:68:43:9c:06:3d:f5:9c:fb:43:c3:bc:38:68:
fe:b9:f8:ec:ca:ca:2f:80:10:49:85:66:e2:d1:4e:80:96:a6:
f9:da:2e:a7:e1:56:89:30:1e:23:2a:b8:63:d9:53:74:91:a8:
33:b7:05:e9:11:de:81:80:5c:40:a0:4e:d7:cd:fc:41:30:cb:
fb:93:6b:d2:6c:88:63:c2:c8:72:01:e6:60:90:03:9b:6e:0a:
ba:11:72:c3:8d:b2:d1:5b:21:7e:89:9b:b5:b8:22:76:bd:68:
77:3e:fc:5f:a1:c1:a4:6d:86:63:1d:7f:e7:8a:4f:2e:07:11:
09:10:37:f1:25:06:da:94:c5:40:71:98:90:37:42:9c:ca:2e:
28:4d:5b:e8:3d:59:76:05:bf:b5:79:c9:f5:cf:cb:5f:ac:cb:
52:4d:06:ee:14:c4:21:08:7e:da:a4:e4:b3:c8:0b:7b:4e:b0:
65:67:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:50 2026 by rpki-client