Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: 7p+yp0ikFhlk+0iH3OOKAeqvU3daf9XAVBUl/Ig25Vw=
Subject key identifier: C7:A6:B9:3C:A1:6C:AA:B1:BE:56:A3:4C:C2:7A:93:8C:E2:91:BE:BB
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019FAABEE1FBBCD7C9D09B1F6D9CAA569626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 22:01:04 +0000
Manifest this update: Tue 28 Jul 2026 22:01:04 +0000
Manifest next update: Wed 29 Jul 2026 22:01:04 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: g5QIkLbcBJkd62z76kPqmAFAZdY3vSNK0g35yPJDr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:e1:fb:bc:d7:c9:d0:9b:1f:6d:9c:aa:56:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Jul 28 22:01:04 2026 GMT
Not After : Jul 29 22:01:04 2026 GMT
Subject: CN=c7a6b93ca16caab1be56a34cc27a938ce291bebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:b0:77:39:e1:43:9f:79:3c:9d:8f:c1:99:
d5:94:7f:ba:7e:20:82:e1:e3:fe:1c:bf:e6:d8:40:
04:c9:b8:53:0f:f8:b9:e8:cd:26:00:c9:76:91:63:
45:43:76:f8:9d:ce:ec:aa:ab:76:68:2c:8c:16:17:
d5:81:f2:fa:e9:39:90:d3:57:35:29:c2:aa:b1:b0:
7e:ee:49:69:5a:f5:a8:36:b7:2a:51:22:88:da:55:
84:2f:25:5d:eb:de:e0:34:8b:b3:f5:7b:95:11:60:
fd:f0:ba:a0:4f:37:fb:ad:5d:0f:79:b1:5f:f9:bb:
ad:fc:57:b9:7b:03:ea:29:25:49:9e:db:16:b1:0d:
dd:92:45:ef:31:85:3d:c5:39:64:80:6a:87:33:e6:
2e:36:c4:6c:26:aa:a0:4b:b0:a8:37:18:04:0c:98:
22:8e:43:18:1f:f7:e8:03:b7:ce:05:28:1f:da:37:
91:5b:7d:50:9f:2b:36:84:cb:5b:fd:5a:e0:5f:64:
62:7d:eb:c2:08:ae:ee:af:f1:20:de:80:4c:8d:80:
55:ec:68:bf:92:fb:92:b8:fe:4b:42:ff:4d:c1:a2:
70:94:f0:29:c1:be:38:9d:e4:a0:35:8e:5d:35:36:
a2:2b:d7:b8:a2:f1:4c:8f:28:36:20:b3:66:44:e6:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:B9:3C:A1:6C:AA:B1:BE:56:A3:4C:C2:7A:93:8C:E2:91:BE:BB
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:d3:f2:02:23:25:c6:04:ae:23:03:06:d5:8e:0c:73:db:
16:aa:fa:47:e1:7d:02:3d:5b:da:37:10:a5:72:d4:33:5f:af:
57:e4:1e:9d:2f:1f:3b:af:0b:f0:a6:f6:13:5c:17:53:31:8a:
61:c7:bb:f8:fe:62:88:c2:7b:81:9c:fa:6d:c1:a4:df:ab:45:
8e:b3:cf:9a:9d:bc:e5:c2:1b:80:7e:5a:39:36:47:2e:2c:b1:
3c:cd:37:ac:80:7e:a1:15:34:44:a1:75:a4:bf:57:33:73:dc:
7e:d2:af:ab:90:87:9b:33:58:c2:fb:0b:96:60:ba:13:cf:da:
14:9e:ea:08:7c:56:3c:e8:8c:84:f3:8e:43:42:c4:f1:5e:0c:
71:c3:d7:ee:64:dc:60:1f:04:4a:8d:d4:a9:c7:14:ae:17:1f:
85:57:dc:2b:b0:f5:d7:99:45:50:c9:f6:1c:b8:48:e2:a5:a0:
ce:8a:bf:b6:31:98:ac:90:39:df:5f:d8:e3:db:1d:9a:40:2e:
7a:61:61:cd:de:35:e9:91:46:6c:5f:00:cb:dc:0e:39:a6:f3:
6f:30:9a:a9:1a:b8:d7:ef:fa:0c:2e:e3:59:07:85:35:a1:87:
a7:5c:98:e9:f3:71:56:f1:3c:9e:f2:b4:82:94:7b:64:59:e5:
b4:92:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:12 2026 by rpki-client