Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: FfL8HJdWZkH/cChgYg5VeYmjaOEW/cw9H2ix4m8tSX8=
Subject key identifier: 3C:89:9A:B1:D8:67:4F:03:D0:0A:3F:61:03:D0:B9:42:44:04:36:ED
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 019FAC3ECD6D5E42EA43CB08462BFF4451F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 126E
Signing time: Wed 29 Jul 2026 05:00:24 +0000
Manifest this update: Wed 29 Jul 2026 05:00:24 +0000
Manifest next update: Thu 30 Jul 2026 05:00:24 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: 5bUA0mId0nJHLC+jCNVEcIHxKxJ28AVtU7DAWhI7hkU=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:cd:6d:5e:42:ea:43:cb:08:46:2b:ff:44:51:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jul 29 05:00:24 2026 GMT
Not After : Jul 30 05:00:24 2026 GMT
Subject: CN=3c899ab1d8674f03d00a3f6103d0b942440436ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:b4:a7:18:78:d5:e4:d6:fb:28:b9:14:c6:
ab:5f:5d:71:9b:60:c1:ce:20:20:e4:08:9e:3a:e3:
8d:61:d9:67:a4:10:e7:75:cb:f8:20:7c:a9:5a:cc:
d4:d5:dd:13:85:9a:ee:86:01:36:22:c1:48:f4:36:
bc:f4:0f:ce:f0:8c:b7:5c:68:71:c7:7c:00:57:44:
aa:a0:c2:5f:3c:09:01:0d:2e:33:b0:f4:79:98:85:
c9:a9:81:3e:7a:0a:95:92:ea:19:8b:40:07:ba:1b:
2e:be:b9:87:4a:cf:e0:0a:bd:ff:56:40:ab:84:23:
3c:b1:26:44:e2:58:34:89:2e:22:7a:48:a1:a4:cd:
a6:a6:07:83:b0:61:38:4d:2a:b3:53:a2:94:cc:e9:
aa:89:ec:9a:fd:a2:d5:d8:87:b0:ed:d7:e3:7d:16:
33:5e:0c:96:8d:12:54:a8:24:ee:e9:cf:d4:86:28:
74:c4:e6:ae:c2:eb:5c:cf:c7:da:d5:7d:44:a1:79:
44:62:ae:a0:b6:20:bf:57:fa:f8:4f:83:80:ca:99:
80:4d:00:aa:c3:07:ce:ca:57:9e:e0:8c:a2:4f:d8:
04:89:69:fd:d9:7e:53:36:f2:e4:26:8c:83:29:f1:
08:44:d3:bb:e4:f6:6e:be:c6:bd:1b:2b:9e:77:cc:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:9A:B1:D8:67:4F:03:D0:0A:3F:61:03:D0:B9:42:44:04:36:ED
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c3:ad:bf:7e:21:4d:77:de:33:b4:48:72:22:26:3d:a7:36:
72:2f:00:7c:63:5f:24:7a:c6:41:1b:f4:31:37:95:08:98:59:
1e:ba:38:b6:17:51:ec:e2:49:c0:2e:53:3e:54:6a:3d:f7:73:
fc:a9:d4:aa:68:42:3f:30:34:ec:54:31:3a:29:44:88:b3:9b:
31:fa:db:89:78:7f:e0:ec:9b:04:e9:b2:ca:49:7c:3c:52:6e:
49:c8:92:0d:5f:15:d0:15:46:25:99:ad:b7:56:ef:1b:4d:d6:
e8:c8:6e:69:d3:87:d9:13:62:fa:e4:97:09:3f:b6:17:8f:23:
f8:fa:1e:40:d1:27:e2:c9:1a:f9:b5:50:44:74:56:39:27:77:
d9:e2:e1:95:f1:9e:cd:f3:c4:e1:b7:fd:d3:76:7f:55:f0:8f:
37:49:74:17:26:33:d2:8f:9b:cc:f8:cc:d9:2c:e6:10:15:5f:
80:7f:1e:87:55:1b:59:af:39:45:29:9c:9f:4f:fe:f2:e5:7c:
b8:62:89:74:82:f8:8e:36:00:4b:50:63:a0:26:30:32:c8:55:
90:87:f4:6d:03:d6:c8:d4:31:99:73:36:f0:39:40:35:b3:30:
1b:3e:e2:cd:6b:f1:bc:d7:68:d0:74:0b:00:09:1d:05:f7:47:
1b:f8:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:18 2026 by rpki-client