Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: kl+kleRi/NnAPbQLZkVSG0l6jxFtxWmeY7Qe5d5IDZY=
Subject key identifier: 98:F9:14:27:D3:27:0E:68:20:EE:BD:9D:D3:68:7B:36:0B:7F:FB:E0
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019F9391AE83E9767328BFED55A3C2C193F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 1702
Signing time: Fri 24 Jul 2026 10:00:25 +0000
Manifest this update: Fri 24 Jul 2026 10:00:25 +0000
Manifest next update: Sat 25 Jul 2026 10:00:25 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: K0mUFbBK2v5mib1GhToquP20Prkqw0CPNA1hcvTqaxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ae:83:e9:76:73:28:bf:ed:55:a3:c2:c1:93:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jul 24 10:00:25 2026 GMT
Not After : Jul 25 10:00:25 2026 GMT
Subject: CN=98f91427d3270e6820eebd9dd3687b360b7ffbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:6c:f1:12:da:5b:49:66:f8:b1:23:c3:db:
2e:d1:04:34:aa:11:23:fa:e4:3b:d7:a0:c9:c3:b8:
84:68:7d:24:ad:16:5e:77:88:80:53:41:17:6c:28:
d0:75:c0:b3:35:92:e4:e2:ed:9c:da:8c:13:7a:a0:
52:08:fc:78:02:fb:3f:01:f1:4c:6d:b7:a2:c2:1c:
12:03:4a:96:de:96:82:db:b1:a2:7b:ec:eb:8f:df:
78:fc:ed:d3:8d:e6:fc:95:fd:bb:4b:0f:01:72:48:
48:fa:a6:c9:de:bc:c4:4d:a5:bf:c8:fd:ab:dd:ac:
f9:bd:25:4c:f7:ec:44:cd:32:1f:f9:a3:4d:18:fe:
cf:e6:07:f8:1b:5e:34:d8:db:37:3f:73:60:b0:e7:
d5:fb:21:36:e6:e3:48:3a:fa:23:31:be:08:5d:93:
4e:69:4c:c0:61:5a:c1:da:81:ec:97:c9:7b:e7:e5:
0e:7c:01:19:75:64:03:0b:6d:d0:63:b5:fd:76:85:
48:ca:53:30:fd:29:33:50:32:76:77:69:94:a2:1f:
49:91:e2:12:5f:fc:b8:98:c9:88:f8:57:36:bd:86:
1e:52:7f:27:3c:0b:66:17:f9:52:46:5f:73:26:28:
a2:0a:f3:7c:13:83:8e:8c:af:7a:0f:8b:78:41:1a:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:14:27:D3:27:0E:68:20:EE:BD:9D:D3:68:7B:36:0B:7F:FB:E0
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:55:a6:a7:94:31:05:e8:64:62:30:ac:59:f8:54:6c:bc:
0c:0f:01:38:4f:83:7d:5e:7e:fd:3e:38:14:1d:cf:1d:0b:ed:
79:1d:fa:df:4b:a4:a8:c8:f7:0b:d1:99:80:5c:23:05:4b:3f:
2a:51:47:29:9b:67:b6:7f:a5:1d:8f:41:e4:3b:54:24:ad:88:
b9:31:13:78:35:91:06:50:7a:20:8c:ea:fe:bb:70:b6:1a:01:
71:70:0a:c6:40:38:f5:15:27:ba:f1:66:f2:c2:0d:7e:76:2f:
bd:68:29:61:f2:cb:c5:4d:a4:a5:73:c8:3f:03:90:1a:e4:0b:
a2:d3:1d:37:cb:7e:8b:7e:93:c6:a8:f8:98:f8:be:dd:22:cc:
89:a6:a9:42:b5:f4:c5:15:c1:7d:84:2f:96:64:ad:30:bc:6b:
00:9f:51:54:8f:46:d4:d4:95:6f:29:c9:b7:03:13:3a:86:32:
1d:dc:5e:30:ac:59:8d:e1:69:db:08:df:4c:15:14:81:c2:e9:
9c:73:4a:21:61:58:88:ae:14:a9:02:02:61:96:df:3a:ba:1c:
b8:6f:4b:1d:04:1d:83:ca:61:78:42:1d:bd:07:ca:bb:af:5a:
a9:7c:64:80:59:24:6f:dd:4f:b8:5a:ba:77:13:5c:4c:28:85:
89:46:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:33 2026 by rpki-client