Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
File: oUaknFXDAyf4rSIKTpm53G5j4Tw.mft (raw, json)
Hash identifier: XM6vd4UoAsWXDdgXAse306s1oIRMldpZ9+P7M5GLnqk=
Subject key identifier: 44:2B:4B:03:52:00:D4:01:99:15:BB:57:5D:85:A2:82:C5:9B:34:4F
Authority key identifier: A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
Certificate issuer: /CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Certificate serial: 019F916D678745E3F37DA3EC0A3EABCF77D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
Manifest number: 16
Signing time: Fri 24 Jul 2026 00:01:34 +0000
Manifest this update: Fri 24 Jul 2026 00:01:34 +0000
Manifest next update: Sat 25 Jul 2026 00:01:34 +0000
Files and hashes: 1: aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa (hash: WP2Dcdi3GBMOmI0NK/vj8JV6PzwkSo14hHtbf3df0KQ=)
2: oUaknFXDAyf4rSIKTpm53G5j4Tw.crl (hash: mHPAsC1fL1PiZb+ol8k+qgT4YrRdlmr2tTs393W8TwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:67:87:45:e3:f3:7d:a3:ec:0a:3e:ab:cf:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Validity
Not Before: Jul 24 00:01:34 2026 GMT
Not After : Jul 25 00:01:34 2026 GMT
Subject: CN=442b4b035200d4019915bb575d85a282c59b344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:3c:ad:9e:de:64:a1:a8:e6:b2:d8:77:a2:
13:61:2e:c0:a8:76:a6:d7:77:0d:08:0d:f6:d9:bf:
bd:55:04:1e:bc:52:0b:8b:aa:bf:80:dd:65:e1:c5:
d2:55:ff:37:a3:b9:fc:f2:44:3b:34:c5:58:cc:f4:
a8:45:6f:bf:51:e7:15:af:8a:1d:31:fd:c5:9f:68:
89:7b:5c:85:c7:58:58:f8:62:88:c8:fb:72:ae:9b:
15:cc:e6:a9:6e:d7:88:47:ad:e0:68:dc:42:52:54:
dd:e8:72:79:94:c5:dc:66:26:3a:67:b1:ff:f3:34:
be:84:b9:d0:95:dd:57:2f:d6:a2:30:39:90:5d:c8:
9c:b1:98:e0:2b:45:43:f1:6d:79:78:ea:2b:e0:27:
71:4b:de:05:59:f9:0c:fc:a2:01:b0:e6:3d:01:7c:
e5:54:83:bb:c7:1a:3f:c5:ea:91:18:e4:19:32:58:
b0:52:3e:8b:dd:28:c6:f1:3d:e1:75:c1:99:ef:9a:
5f:c4:c7:0b:35:89:21:f0:0d:3f:f2:45:48:35:f0:
52:f8:0f:5e:5d:5e:1d:21:30:d3:5d:59:bb:b1:12:
da:66:c6:ec:6e:83:30:99:76:c7:d8:db:39:a0:85:
e1:b5:1e:e9:7f:37:44:35:5f:f3:e8:18:7d:fd:bd:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:4B:03:52:00:D4:01:99:15:BB:57:5D:85:A2:82:C5:9B:34:4F
X509v3 Authority Key Identifier:
keyid:A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1e:55:53:60:ff:7a:44:c8:39:a6:35:ff:6e:96:73:fc:d0:
9f:6b:17:da:7c:ec:c7:c0:c1:0e:3d:75:93:ab:8f:98:11:0c:
79:53:12:e1:1b:e0:0e:4f:11:e8:bd:7e:c3:36:e3:be:ef:9b:
e4:93:13:09:c9:63:11:33:b3:66:80:fd:81:4f:e3:c2:fd:ab:
a2:2c:45:73:76:d1:53:35:dc:1b:a9:b7:e3:97:cb:48:6b:a2:
ad:c8:ce:ac:30:5a:07:45:3f:01:c6:56:13:42:93:c7:f0:d6:
47:68:e2:83:a3:bd:e4:7a:f1:c5:e8:2a:4b:8a:66:35:ba:09:
16:cf:4b:5d:e4:42:de:6d:30:f7:14:1a:da:12:59:c8:5a:52:
ca:c9:2a:5e:c8:fe:c4:2f:87:86:a5:7f:1c:6a:bb:cf:12:11:
0d:01:f8:62:9b:76:ea:8b:f4:6e:32:ab:d9:71:a4:e0:94:cd:
39:89:5b:8e:a8:b5:e2:41:99:74:9a:ca:d6:11:bd:4d:eb:8b:
97:06:70:1d:5e:12:50:57:82:dc:78:e1:a9:46:df:61:6a:6a:
85:27:44:63:a5:61:f7:38:5c:5d:62:d0:76:ad:6e:00:5f:97:
1e:2d:71:a8:97:a6:76:0d:66:cd:05:f8:cb:8f:ae:92:ce:a7:
96:64:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:07 2026 by rpki-client