Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: y/FMpkon+TVtl4AKRQPswioqbQnQJoTjJiC2tzMFlqE=
Subject key identifier: B3:64:51:AA:19:2C:29:56:AD:11:D9:AD:37:9F:2F:F9:2A:75:FB:D8
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 019FA898D173E84A515D0B76495373CF0E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:15 +0000
Manifest this update: Tue 28 Jul 2026 12:00:15 +0000
Manifest next update: Wed 29 Jul 2026 12:00:15 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: +Zc+MyGwgkKAzQ7OHfVp1LHYzRVgpJBLRW8yYXoHTcE=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:d1:73:e8:4a:51:5d:0b:76:49:53:73:cf:0e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Jul 28 12:00:15 2026 GMT
Not After : Jul 29 12:00:15 2026 GMT
Subject: CN=b36451aa192c2956ad11d9ad379f2ff92a75fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:86:68:8d:15:b2:98:35:56:5f:87:bd:0f:
41:1a:3c:33:38:43:c7:2b:7e:fc:2b:0e:a5:c7:6b:
eb:6b:cb:61:c2:5b:14:1e:2f:ca:ef:39:fe:91:3b:
e3:f6:fd:5f:a7:7e:bf:25:f6:c0:1c:0e:0c:d8:66:
e2:e8:80:93:78:54:ea:cc:69:04:cb:31:60:d4:4b:
df:d8:aa:e7:b2:d3:e2:a2:a0:5b:3c:6d:7c:c6:9e:
c8:71:38:df:cc:38:17:e4:24:54:fd:b7:18:ad:3d:
df:6b:e8:92:b0:68:71:5a:08:4f:ed:9c:54:e7:1e:
67:d7:85:a3:4c:d9:a6:df:f8:b8:cd:69:30:b8:7c:
69:d2:98:0d:a0:66:ce:7a:54:48:37:17:77:39:3d:
0a:7f:b3:e6:23:23:b7:a5:4d:bc:cb:b7:1a:28:e7:
5c:e3:d0:8a:39:8b:10:2a:ab:77:53:03:32:fa:4f:
7f:8a:b1:5a:85:64:f2:aa:ba:bd:f1:df:b0:09:d6:
c9:75:6f:1f:8f:6e:83:2b:f2:37:69:31:6b:71:2d:
95:85:8a:ef:6d:6e:7e:40:50:26:90:71:9a:8e:f6:
19:de:b1:c7:f3:3b:c8:fe:5b:9f:f8:d8:89:a0:9d:
45:6d:77:7f:2b:31:01:01:16:16:b0:83:e8:8b:fb:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:51:AA:19:2C:29:56:AD:11:D9:AD:37:9F:2F:F9:2A:75:FB:D8
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:c4:c4:8a:40:25:d3:47:e5:67:72:ac:85:c3:eb:ba:94:
84:e1:70:c5:a7:d4:64:a7:e0:42:3c:58:78:91:b3:f6:4e:34:
7b:67:b3:3e:4d:4f:2e:51:f5:1d:c3:7f:9b:7d:9f:6d:c8:7e:
29:6f:f4:d1:2e:ce:85:96:a2:18:bb:44:f4:35:76:04:51:d9:
94:6b:4c:17:bb:83:f2:5c:14:73:38:4d:55:c7:30:cd:a5:f3:
a2:13:e5:bb:cf:a2:cd:e5:b4:c6:56:c4:26:8d:f1:b2:9a:5b:
1e:76:dc:b0:4b:eb:59:fa:ff:5b:4a:b3:4c:49:92:e5:ba:e3:
37:76:3f:59:de:9a:13:f2:0d:9b:1e:54:ad:46:4a:ca:48:1b:
0a:10:cb:c1:94:d3:a0:94:42:76:6f:b2:96:02:a5:e2:93:fd:
d9:d7:0b:87:6a:1e:46:54:0b:21:32:51:4c:72:1d:d7:22:4a:
36:aa:c2:09:0b:e6:4a:16:fe:69:9c:8b:67:f4:92:87:6b:04:
72:45:f4:be:57:f0:e1:4a:20:b5:19:8f:80:fe:31:14:f6:32:
69:85:18:f9:47:5a:63:65:d5:2d:be:f9:2e:a3:4c:6f:8c:64:
c4:9d:bd:4d:e9:21:b3:58:b5:bb:c8:38:1c:81:87:3d:58:22:
85:dd:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:04 2026 by rpki-client