Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: covmdQMYyWhReI6v+AUea87p7ey3QDV2cE1H39MeIlI=
Subject key identifier: 44:96:DD:A8:20:57:C2:D8:52:9A:8F:72:CD:4C:65:B6:5E:2E:8C:83
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019FAA19BACB2763CFA191BEE606A2181A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0F3A
Signing time: Tue 28 Jul 2026 19:00:40 +0000
Manifest this update: Tue 28 Jul 2026 19:00:40 +0000
Manifest next update: Wed 29 Jul 2026 19:00:40 +0000
Files and hashes: 1: BTzuCE44rDIH7Pz-rptrI7qeNcc.roa (hash: V5yrPjJe+cVyMOCOK0ABvwS7gMjw/S3V3X3G/kpSiFA=)
2: YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa (hash: HUVAVch0tpB2Eafp8Rpcw9ARFWadeMwT0krWeIBPrQo=)
3: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: /+0uXfdLf/SR+MkcXUk/5jsqRSaocdqC01pxX2+o0W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ba:cb:27:63:cf:a1:91:be:e6:06:a2:18:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jul 28 19:00:40 2026 GMT
Not After : Jul 29 19:00:40 2026 GMT
Subject: CN=4496dda82057c2d8529a8f72cd4c65b65e2e8c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:9e:5d:f5:77:98:ca:21:72:8c:a7:42:d6:
6d:6d:f0:ad:7d:40:d9:0d:9c:5d:8f:aa:b4:9e:af:
3a:04:31:6a:45:19:97:0d:06:73:c8:d3:46:dd:c1:
a4:61:df:92:c0:be:8c:d1:82:be:77:e0:6b:ce:d2:
a3:59:4a:51:82:5e:98:a1:a7:e5:57:8d:f0:28:1f:
bd:06:05:d2:ca:07:8c:9c:31:44:2b:62:43:df:09:
ed:7e:eb:1f:da:0a:41:29:cb:eb:df:e5:5a:c9:5d:
f2:07:20:f8:1a:8d:af:3c:29:af:41:26:f9:68:6b:
58:ef:e1:8f:4b:ea:cd:67:31:ae:66:dc:c0:74:c0:
35:ca:8c:b3:47:d1:1b:d7:3f:14:a8:28:d3:65:89:
0b:84:69:49:47:8e:a4:d7:42:52:9f:64:68:4d:ca:
ed:ae:16:80:63:1c:07:db:50:5f:3e:2a:24:29:ee:
d5:18:66:f0:42:80:c7:00:b5:d7:1e:34:c8:e5:cb:
27:49:eb:6f:49:5d:ff:c9:9d:00:6e:24:e5:4a:df:
ef:8f:7b:80:53:2f:ea:8d:bf:19:e8:63:6d:5d:6f:
da:8c:93:7a:34:b5:8f:5a:f7:24:89:8a:b6:7f:a0:
34:30:6a:a9:33:f1:52:8f:9a:ff:ca:e5:67:31:71:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:DD:A8:20:57:C2:D8:52:9A:8F:72:CD:4C:65:B6:5E:2E:8C:83
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:3a:c3:f4:bd:47:3b:c6:5d:31:a3:04:d9:43:7b:69:35:
8d:20:78:f0:19:16:1b:f8:49:7e:07:99:68:26:e8:49:af:b2:
b5:4a:48:d7:a1:a3:7a:89:d2:b2:62:72:4c:c2:3f:cc:3c:b3:
dc:e1:7b:18:06:20:39:9a:77:3a:c6:dc:0f:8f:f5:ce:c3:09:
0e:84:78:27:cd:7f:7f:13:cf:1d:c4:e9:34:46:89:c2:78:9a:
ae:d8:b9:67:5b:d0:f9:83:96:ca:fc:0e:0f:e9:68:58:82:72:
d2:a5:ca:e0:04:33:64:46:40:fb:e9:ea:56:c0:b7:63:41:33:
89:a0:72:27:64:b5:f4:aa:19:6c:95:b1:dd:9a:97:19:b3:c0:
91:dc:43:6e:f4:56:5c:d9:95:aa:1b:b8:27:4c:fd:c9:49:05:
7d:7f:28:39:1d:6e:86:21:b9:6b:68:d8:cd:7f:f1:24:1f:c5:
a6:48:9d:33:32:b9:86:10:5c:ab:f9:8f:95:b6:41:a6:69:05:
37:01:33:03:41:61:cb:ca:5c:c7:4c:7f:a6:f3:fe:ee:21:24:
36:1d:78:7c:46:78:67:fa:09:46:ce:c9:73:cd:23:19:19:d2:
80:74:9a:00:bd:f7:10:b8:16:b4:ed:d2:19:38:c5:cc:91:76:
eb:91:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:23 2026 by rpki-client