Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: 2KIGPEMDSGEdsgiTOYq0Qk8GPSgP+a9TGU8iHFg5BD0=
Subject key identifier: F2:B2:6E:4E:62:44:F3:E7:7F:8D:24:98:22:23:5F:EB:6A:B1:66:1D
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 019F92ECECC1A1086806EC0D487F7CC033AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 01F1
Signing time: Fri 24 Jul 2026 07:00:28 +0000
Manifest this update: Fri 24 Jul 2026 07:00:28 +0000
Manifest next update: Sat 25 Jul 2026 07:00:28 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: yHgFcrPSX+3T5IaQIX2SwkeDEP+djc1UZXnzLJcMwt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:ec:c1:a1:08:68:06:ec:0d:48:7f:7c:c0:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Jul 24 07:00:28 2026 GMT
Not After : Jul 25 07:00:28 2026 GMT
Subject: CN=f2b26e4e6244f3e77f8d249822235feb6ab1661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:cf:05:a0:78:6b:91:48:a5:f4:73:78:d2:
df:f1:e8:57:1f:5b:05:06:96:ad:83:b0:35:74:f7:
e7:fd:e7:71:13:aa:ff:e3:35:45:f2:a6:c2:b5:54:
8c:01:57:de:77:2f:34:0c:f4:f9:71:0e:ec:66:76:
8f:c5:89:92:13:45:8b:59:ab:cf:84:86:d7:47:81:
ab:45:6a:b5:8d:35:fb:92:57:79:d1:49:8a:d9:b0:
fb:5c:a1:ea:15:95:20:0e:74:ed:f1:d1:9e:b8:10:
72:b2:40:de:c5:64:76:22:4b:4f:fb:30:b0:cd:c8:
ae:50:53:7a:6b:a9:70:14:16:9d:aa:dd:f6:bb:9b:
09:9e:0b:91:55:77:14:2e:bc:2d:3a:1c:33:c9:93:
be:98:6d:f8:f1:4f:9a:c5:db:8b:5d:a7:fb:c7:88:
ff:01:d8:5e:a3:5e:12:7e:0a:5a:34:af:d3:b2:7c:
c2:70:f2:2d:25:87:38:18:31:68:cf:5a:a5:ee:53:
dd:b0:fb:60:60:f1:8b:b9:bf:b7:fb:6f:70:74:25:
8a:55:da:4c:37:fb:2b:ff:56:9b:82:ea:59:59:cf:
bc:93:ca:4a:1c:27:e1:a1:1e:ad:6d:82:de:59:db:
ee:b0:36:08:53:32:14:e6:00:cc:60:fa:e6:ef:b1:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B2:6E:4E:62:44:F3:E7:7F:8D:24:98:22:23:5F:EB:6A:B1:66:1D
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:11:52:51:92:09:ad:86:90:25:be:56:e2:30:f1:e9:4c:a3:
2d:cb:8e:b5:04:d9:3c:bf:c0:15:b1:9e:fa:80:e7:dd:41:2f:
97:89:d2:c1:22:6a:3d:ae:ae:36:69:40:28:24:7c:2b:5d:a0:
cf:d8:fa:6a:f9:23:5a:0f:38:2b:98:69:d4:70:c2:e9:29:f2:
38:2f:71:92:14:a5:0d:b1:5a:3e:f8:05:99:c2:97:43:78:8e:
0d:d9:74:95:3b:0b:d3:ba:1f:e2:36:61:5b:9c:6a:02:6c:95:
94:7e:30:6b:c8:5b:fe:10:ba:4d:94:a0:2d:6a:ed:16:57:2b:
43:2d:9f:0d:ba:31:81:51:97:56:11:ae:66:b9:ca:15:56:79:
63:7b:6b:4e:9d:98:3a:2b:b8:f6:8f:26:87:7f:4a:87:f7:20:
f2:75:e7:28:b3:78:fc:33:7e:cc:60:bd:83:36:72:9b:34:ba:
65:a2:c5:6d:88:cf:cd:82:eb:30:bc:88:32:49:ee:e8:74:d8:
6f:da:0a:9a:a5:57:f5:62:bf:d9:7c:40:a4:54:f7:bb:e4:61:
96:16:0c:ff:71:66:12:e3:ba:51:a1:c9:b0:03:c9:c4:36:bf:
8b:b4:fa:cf:ce:f0:8b:df:8f:d1:6f:52:f2:7b:ac:0f:ac:1a:
0f:0d:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:50 2026 by rpki-client