Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: yJidB4BjDwcge0HFoRYfJQpYSh4Lg5i0zwjj5whkl+Y=
Subject key identifier: 4F:2D:FA:8F:1B:D4:31:68:BB:E7:1E:D7:FA:2C:5F:42:34:98:ED:52
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019F9436E56C0E1B5E9BBED994AFB3550EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 13:00:53 +0000
Manifest this update: Fri 24 Jul 2026 13:00:53 +0000
Manifest next update: Sat 25 Jul 2026 13:00:53 +0000
Files and hashes: 1: 6vVSpTChTKj56P_S9G3QSGEzPpI.roa (hash: oBJVrXqcl3ZmvttgmWCt09AlKEv4UiFRHlZlA6agM0s=)
2: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: XXjtPRu5ErFG7aceNkdQILhmD7evOEuIbM1kh1O8NrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e5:6c:0e:1b:5e:9b:be:d9:94:af:b3:55:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Jul 24 13:00:53 2026 GMT
Not After : Jul 25 13:00:53 2026 GMT
Subject: CN=4f2dfa8f1bd43168bbe71ed7fa2c5f423498ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:06:b8:e1:e6:1e:06:49:fd:ab:86:cb:4f:
fa:c1:12:ce:44:e9:d1:f4:91:9e:48:ce:d6:ca:9e:
62:7a:c6:7a:44:4c:7b:99:d8:ef:a5:a4:78:65:6b:
ef:af:ae:f8:7f:11:75:4f:2d:f9:6f:08:f9:55:79:
68:ee:96:aa:e5:a0:98:47:97:dc:4a:f3:9c:56:89:
d7:40:bf:4a:3b:57:d5:06:9f:4c:13:7b:50:57:d8:
fd:b3:89:81:07:aa:0d:90:14:cc:57:bf:e5:76:48:
ac:0d:be:52:aa:5c:55:da:8a:e1:05:fc:0e:b9:48:
90:23:12:df:d6:43:83:33:ba:e9:ac:68:9e:3a:1c:
f6:56:99:1a:81:87:6b:c3:c2:ee:4e:5c:20:cd:99:
fb:50:a8:70:70:96:78:e1:7c:ac:94:26:f6:5c:cc:
9a:f2:5e:9d:ac:0b:12:77:23:f7:7a:8c:b6:76:86:
52:b5:10:ce:3b:0b:04:76:c1:5c:91:18:89:87:c4:
a7:78:24:9c:b1:38:68:d8:e9:27:2f:c6:4f:50:d7:
ce:ae:3d:73:34:5a:21:5d:f2:05:41:ce:a8:b9:67:
aa:41:3f:2e:5a:c6:7e:c8:83:77:d4:34:07:59:16:
8d:9d:89:5e:09:d0:f6:82:db:47:57:47:3c:55:a5:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:FA:8F:1B:D4:31:68:BB:E7:1E:D7:FA:2C:5F:42:34:98:ED:52
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:c2:9f:e3:75:a5:8e:28:eb:98:3c:ba:29:4e:d6:da:fb:
d8:02:57:35:8f:26:77:0c:3d:7f:81:f2:75:1d:50:f5:90:4f:
13:3c:0e:f3:89:f1:78:c3:e6:b7:27:d0:b6:45:14:e7:98:46:
18:b7:3b:2d:cb:ae:1c:20:e7:31:c7:07:9c:eb:fb:43:5b:46:
de:cf:e0:0e:d3:9e:e8:48:c7:1f:94:dd:a4:1e:94:32:50:b2:
60:d6:2c:00:fc:73:c2:d4:1a:92:ad:cc:38:5c:d4:be:db:9f:
27:ef:9f:11:a0:ed:62:14:47:f1:4d:72:33:22:ab:9c:da:d5:
88:b6:6d:73:2c:35:dc:e8:84:bb:ed:f7:b4:79:33:37:68:26:
89:dc:26:18:95:37:0e:0d:ca:bc:22:33:71:2a:92:05:d4:73:
19:1e:2e:0e:76:8d:a6:a3:11:2d:49:99:78:ff:cc:e3:d8:fe:
c3:72:5d:c6:72:ef:60:b9:8a:5c:b6:b4:7b:fc:12:89:46:d3:
e6:3a:48:0d:e7:9b:81:89:6c:a8:03:32:a9:55:cb:31:c9:bd:
21:6a:7f:83:fa:be:d5:68:5a:4c:b3:3a:68:0b:ef:4d:e0:58:
3c:36:c5:64:a2:8e:3e:43:91:f3:f5:e9:62:68:a0:66:0b:66:
17:41:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:53 2026 by rpki-client