Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: 75bpIV4ArxkGKuxixZWHwFlWn3jpZ1XpPqTG+CQO26w=
Subject key identifier: 54:91:DC:F4:65:62:EE:A4:6F:61:41:AF:99:EF:D7:E0:45:C5:F9:09
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019F91DAFDF379F86818D30E4E0EECACA90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 18EB
Signing time: Fri 24 Jul 2026 02:01:15 +0000
Manifest this update: Fri 24 Jul 2026 02:01:15 +0000
Manifest next update: Sat 25 Jul 2026 02:01:15 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: 4Wo6ddAvEC/zoMO8nBTWm8wCA2EvNoOCc4d2DfuiwiM=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:fd:f3:79:f8:68:18:d3:0e:4e:0e:ec:ac:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Jul 24 02:01:15 2026 GMT
Not After : Jul 25 02:01:15 2026 GMT
Subject: CN=5491dcf46562eea46f6141af99efd7e045c5f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:ea:ed:d4:60:d8:1c:f5:85:22:57:d1:3e:
1a:b2:35:cd:02:48:72:a8:33:c7:0e:fb:44:b6:92:
79:99:83:e4:72:83:7b:eb:15:39:e0:a7:a8:22:2a:
41:c7:81:3b:58:84:9e:d1:6a:6e:3a:e5:8b:50:b1:
ba:33:83:33:1e:2f:c3:aa:a2:42:c5:0b:6d:aa:6e:
0a:7e:89:76:97:dc:ae:4b:d3:34:f1:03:25:89:4c:
7a:e7:1e:3a:ee:3f:57:12:a9:78:38:31:2b:e0:8f:
6c:3f:ca:47:81:b4:f4:cd:4a:9d:8b:8f:47:e1:1d:
49:b0:4e:7d:46:62:71:1c:a1:63:94:aa:b7:48:8f:
d4:89:3e:26:66:3b:06:04:68:0b:13:4d:19:8d:fc:
cd:ee:3c:c4:a0:9f:5c:8e:68:ce:61:e5:8f:af:43:
b0:a2:76:63:98:c7:63:3c:84:14:9c:a5:7b:72:6c:
41:cb:84:37:60:1f:a7:8a:17:30:16:fa:a1:fb:6b:
56:f6:52:6b:ab:d7:f3:2d:45:07:21:50:04:32:26:
dc:91:77:5f:21:b8:71:cd:3a:88:40:73:3c:b3:29:
d2:74:05:00:07:a1:4f:35:82:13:74:71:88:b9:ac:
48:5c:40:27:18:bb:02:39:8f:d8:a6:04:1a:aa:b6:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:DC:F4:65:62:EE:A4:6F:61:41:AF:99:EF:D7:E0:45:C5:F9:09
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:69:9b:98:04:ef:98:42:6f:13:e6:45:37:70:22:6a:3b:65:
a7:26:84:32:df:0a:c3:96:d2:59:c0:0e:e5:e1:72:b9:6b:7d:
e3:c0:8d:cb:fa:72:92:73:90:66:5c:e9:04:d7:f7:7a:64:11:
62:f9:5b:5b:6e:80:12:bf:c2:1a:2f:f6:4f:c9:d6:85:d9:00:
bc:27:3a:91:64:d0:82:73:23:94:18:86:59:34:c8:b1:8d:0a:
3f:a8:2a:33:15:64:a3:78:26:6f:6d:f8:b9:b8:6b:ee:a5:d0:
f2:44:05:b0:92:67:73:af:e7:0c:10:a2:0b:94:8e:c1:f6:31:
53:fc:31:de:bd:03:a2:c3:43:ba:ee:23:a1:1e:a6:c8:ce:7b:
16:64:8c:1a:9c:e8:e3:ba:8e:dd:9b:2b:ac:1b:cb:f9:64:58:
10:18:df:4b:77:53:3e:f6:24:de:48:02:fe:fa:7d:61:e6:5f:
ae:7c:8f:d6:11:aa:50:0c:94:27:28:a7:3c:1c:78:75:99:d1:
50:89:f4:75:f7:c6:33:e9:73:20:ea:15:38:8e:53:83:2b:35:
03:5d:e9:d0:7f:69:3b:37:b5:48:24:38:01:bd:9b:24:68:f6:
29:e3:8b:74:0b:33:b8:ab:8d:8a:2b:22:13:f9:05:3c:19:c2:
3a:9a:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:28 2026 by rpki-client