Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
File: oIJZpB2ckMhxpKQIHurJjpIcnJY.mft (raw, json)
Hash identifier: U2ge93+H95tRi/6crssUZtvpPa5KhPiRxEtQUGOm8kk=
Subject key identifier: 54:77:73:89:4A:FE:8C:C0:92:5B:78:27:C3:3D:2D:C0:88:1E:72:EE
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 019F9549AE1CBDC8AC78364342B2F0633A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:01 +0000
Manifest this update: Fri 24 Jul 2026 18:01:01 +0000
Manifest next update: Sat 25 Jul 2026 18:01:01 +0000
Files and hashes: 1: UsfSb8kbVMR3V5PLMt6PJ3rLgiQ.roa (hash: UVQiOpULaEZcLrQvc6D5QZ9BzS1vMwC2aKzYqyaPovk=)
2: cbz2LvC72XNqrvx7XIcWfWQcJGs.roa (hash: 6ZyBifFEMpLFq8cT3rfhVYcBqGdapM5Y/Vio3GKuQSM=)
3: dEvu91UmCs0KOahRTi9ldOs_snU.roa (hash: 01+Ykcd+Kg1UdyAjLCxw5OYxXPvuKRq7ssrgwvHhlWc=)
4: fWQwN5A2pk_zpdVGoglnMqrxJhE.roa (hash: AF/+uKeoOpEWcWNlzj3E6bJVrdwq6cPfuT9ci9RsNlI=)
5: gQc_Jr2mC9IFhdByVUINcQAR45c.roa (hash: htYakuw8JTIu6V7ktOpNOESYVw0hvP719d9K+XTocK0=)
6: oIJZpB2ckMhxpKQIHurJjpIcnJY.crl (hash: Yl6ls5VrrqrbyaiWxm8mg85CtNrvWU1srpP3FxYEQUQ=)
7: sD-XmFZxnF3KQNSTeL1WXh57yJ0.roa (hash: /pI8J0CBcmzbJWtFqWwLQ4amYWb7bBCiIspDscGiplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:ae:1c:bd:c8:ac:78:36:43:42:b2:f0:63:3a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Jul 24 18:01:01 2026 GMT
Not After : Jul 25 18:01:01 2026 GMT
Subject: CN=547773894afe8cc0925b7827c33d2dc0881e72ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:2c:8c:6c:08:73:22:50:5b:bd:6f:36:40:
aa:c2:4a:07:2c:39:71:44:97:9a:bf:fd:9b:d0:19:
80:92:d8:ca:21:46:a9:a6:cc:74:10:7b:68:76:41:
de:be:1f:91:b7:d4:51:3b:72:12:b5:d4:cf:db:2f:
71:d5:2b:b5:8a:9a:94:f2:6b:6b:13:7c:c6:1a:9c:
fc:56:20:2b:b6:3a:5b:ae:b5:03:63:ee:db:af:47:
3f:f8:9d:83:19:fa:c8:7d:3a:31:b9:83:2c:3b:16:
3b:b2:c9:c6:ca:5a:0f:9f:e2:83:22:ae:b9:e3:83:
01:1b:f3:f1:93:e7:72:e1:18:22:a0:72:a0:2a:75:
dd:75:f9:c1:48:13:c2:31:3e:15:0e:ce:a8:2b:78:
42:69:86:6d:47:f3:46:ec:e1:13:e6:bb:27:f2:74:
08:d5:5f:56:f7:b6:b3:d4:6c:04:39:35:a5:b6:99:
9d:3a:59:8e:47:58:9c:22:73:0b:f3:10:c7:8e:24:
48:38:2a:b3:ec:44:9a:d4:69:f9:e1:c2:56:32:a5:
ae:87:17:50:11:56:9a:fa:ca:d5:7b:68:44:1f:8a:
ec:8d:06:b1:3c:ca:6a:6e:40:87:cb:1a:2b:95:0a:
66:3b:d8:00:c2:ec:39:51:88:a4:bc:37:8a:75:1f:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:73:89:4A:FE:8C:C0:92:5B:78:27:C3:3D:2D:C0:88:1E:72:EE
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a2:07:09:61:6f:34:90:a6:7d:02:88:ff:73:5c:bd:9d:fa:
b9:6b:ce:5e:5d:e9:f9:96:2c:9f:4d:f5:f2:52:2e:63:2f:a9:
c5:b4:9b:15:9c:b4:23:db:91:fe:c2:78:96:ea:a7:f9:2b:a7:
f1:e1:c8:3e:ad:47:61:cc:63:c3:30:f2:57:81:3e:d6:bf:ca:
92:6c:d3:f1:2a:86:10:3a:93:2e:4d:a6:50:af:ee:cf:a6:39:
54:64:52:54:75:75:27:44:5b:8f:90:00:97:8d:b4:16:a8:83:
67:15:0c:9e:b1:f8:3a:9f:d4:eb:75:ec:1a:97:04:62:1e:3b:
b1:ae:ba:bb:74:a6:3e:5a:bd:04:bf:77:0d:8b:49:a8:67:c1:
d9:71:f8:94:40:f2:53:01:ff:e8:26:34:0a:68:6b:f3:cb:2a:
b4:1d:49:48:0d:e0:9d:78:c3:40:89:31:1a:13:c1:98:eb:e4:
3c:4a:8b:ba:36:f5:4b:d8:77:fc:68:02:22:27:a6:28:89:e6:
fe:4f:3f:89:95:ff:31:98:cb:23:be:a4:ec:d3:91:17:03:16:
30:22:bc:ab:eb:4a:28:72:99:f5:9e:69:11:bc:d7:84:4c:92:
70:5f:0d:d6:8a:bd:08:b6:b4:5a:67:3c:45:17:26:27:5d:48:
46:5d:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:50 2026 by rpki-client