Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: nLxazkkuHRxfVO+gfiGBGh4f88WQv5rCwed3fAb5gRM=
Subject key identifier: 29:49:B1:60:CD:13:E4:C2:D8:8D:42:C8:9A:EC:A2:6B:8C:87:72:3E
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 019F92B60AE8E146823D6BFF9F1AE8A420F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 0107
Signing time: Fri 24 Jul 2026 06:00:31 +0000
Manifest this update: Fri 24 Jul 2026 06:00:31 +0000
Manifest next update: Sat 25 Jul 2026 06:00:31 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: AvkN3EkExEE0/2v27SXD8d/JqyMXKjz+Xux/jJnOOMc=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:0a:e8:e1:46:82:3d:6b:ff:9f:1a:e8:a4:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Jul 24 06:00:31 2026 GMT
Not After : Jul 25 06:00:31 2026 GMT
Subject: CN=2949b160cd13e4c2d88d42c89aeca26b8c87723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:ec:b3:ed:f4:b1:9e:19:3b:aa:98:88:67:
b6:5d:c6:13:cf:5c:1a:10:04:56:d5:8f:1d:af:92:
f1:61:c4:d2:e3:86:87:89:d3:b2:8b:49:82:22:c4:
e5:30:c9:44:43:a3:65:e6:b2:44:59:5e:48:3d:17:
94:0e:db:5e:12:8c:d6:4b:0d:83:38:48:5e:15:36:
1a:b5:61:bf:54:98:79:50:b8:ed:9c:89:4b:39:80:
e6:e9:bb:e3:76:11:2a:82:5f:d2:86:f4:16:1f:10:
64:44:00:e1:49:79:be:0c:f5:11:78:f3:c7:fe:8d:
be:73:eb:f7:61:1e:fe:de:04:86:9f:34:41:8c:3e:
2b:cb:dc:cf:71:3b:b5:7e:40:ba:b2:e1:70:84:f1:
33:61:31:ce:4c:b5:80:4c:94:1f:07:b3:0e:6a:27:
9e:a9:1a:54:1f:44:1c:e1:5e:2a:0c:b3:51:bb:c7:
c8:f6:5b:18:38:d5:5f:69:9e:62:43:6e:ca:d9:d6:
95:51:21:cc:04:4c:87:3a:cd:7a:ac:74:81:a0:63:
89:cc:b2:0c:1c:fa:d9:e6:30:1b:d8:a5:b2:e5:b0:
fa:46:14:fb:bc:b4:57:97:6d:e9:68:76:6a:71:ba:
1a:00:53:45:68:cc:7b:7d:da:10:8c:81:95:96:44:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:49:B1:60:CD:13:E4:C2:D8:8D:42:C8:9A:EC:A2:6B:8C:87:72:3E
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6d:5a:d4:a6:4d:32:5c:b5:b9:b1:3a:56:94:de:ff:14:81:
a0:9f:3a:81:4c:2f:52:32:11:f9:8b:ee:bb:e8:9a:e7:4a:0c:
d4:ba:ad:72:ec:a4:8d:d2:ad:46:72:6d:bd:45:48:fc:f9:89:
62:a5:42:f7:1c:2c:15:70:bc:f6:f2:89:91:53:46:7f:ab:6f:
e0:1f:1c:dd:c2:c0:c5:4b:22:41:0f:80:6d:62:00:04:e3:08:
35:4d:3b:57:e3:96:9d:3d:a2:22:2c:db:80:11:be:04:01:c2:
6d:4a:0b:b1:26:ba:71:83:2c:b1:8d:e4:83:af:ac:72:c2:7c:
b7:6b:05:35:d9:23:f1:5c:29:22:90:70:6a:3c:5f:e8:4c:67:
3f:e9:ff:be:92:1f:73:a7:bf:de:78:0b:69:59:e9:56:d7:bd:
c1:9c:e2:c1:fe:3d:94:85:2d:69:57:80:56:57:3f:d6:f4:1f:
12:92:3d:0d:c1:8a:87:97:4b:6e:7a:d9:c6:0c:ae:de:28:c8:
a3:f8:d9:f4:12:13:34:c6:8c:93:5c:8c:21:14:68:21:4c:20:
26:d9:a8:35:b9:8d:cb:e4:f7:09:0b:f4:4c:99:6d:94:cb:71:
81:a5:54:5d:cc:b2:ba:aa:b5:01:55:10:f7:1d:fd:a1:22:0f:
2c:2a:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:19 2026 by rpki-client