Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: TYi2rZuTkZ8tE4EsclZL4PIZmfihio5OvKlXysLUMcs=
Subject key identifier: B6:AF:4F:AD:5B:EC:B5:0F:63:BF:57:5D:EA:67:6B:8B:C7:14:9C:2B
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019FA74F78EF660AAA7A2B437DB078DAF058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 10E7
Signing time: Tue 28 Jul 2026 06:00:30 +0000
Manifest this update: Tue 28 Jul 2026 06:00:30 +0000
Manifest next update: Wed 29 Jul 2026 06:00:30 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: GAlRwF+CrqecJTQJv0UlcIRjsD//jojz/vF0bFCso+k=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (hash: 2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:78:ef:66:0a:aa:7a:2b:43:7d:b0:78:da:f0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jul 28 06:00:30 2026 GMT
Not After : Jul 29 06:00:30 2026 GMT
Subject: CN=b6af4fad5becb50f63bf575dea676b8bc7149c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:b2:c2:77:ae:40:92:e6:dd:ff:9a:68:d1:
71:6f:6a:79:67:fb:a8:e5:7a:07:8a:57:f7:78:f9:
3c:bb:72:76:2e:f0:43:82:a4:aa:16:32:58:dd:c7:
98:c6:9f:05:20:b5:79:12:ae:3d:0f:b3:fd:79:c5:
1a:9f:a3:88:05:1b:64:d4:20:85:75:c4:50:54:7d:
9f:af:20:73:67:7b:ec:04:71:51:7c:a9:0b:93:ad:
50:e3:ce:cc:2a:c9:05:04:4a:4d:d4:da:06:14:c1:
4d:d9:1a:47:0f:77:9b:4f:ca:c8:08:6d:41:4c:30:
7b:3f:aa:7d:fe:36:72:65:a0:68:c8:c1:e4:7a:f7:
90:01:19:32:e6:78:28:fb:b3:cb:c3:36:f5:39:72:
cc:1f:70:d4:84:19:fb:74:a7:04:e4:a7:d2:d9:eb:
c4:8f:0e:bc:df:21:78:dd:e8:6f:13:7c:a8:0a:f5:
b0:7f:6d:42:0e:a1:50:85:30:32:f3:ef:08:f7:c9:
19:88:30:d5:03:f9:9c:68:95:5d:b2:25:00:38:fd:
e0:19:3d:f5:00:d0:56:b8:22:63:78:ed:10:a8:be:
d8:63:61:1f:5c:f6:b4:3b:0d:20:ca:a8:59:7c:5c:
d0:eb:61:4d:74:3c:2c:cc:26:57:3f:f2:4d:df:8f:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:4F:AD:5B:EC:B5:0F:63:BF:57:5D:EA:67:6B:8B:C7:14:9C:2B
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3e:d4:d7:b1:4a:c1:f8:f0:a0:b6:2f:b2:67:fd:63:1c:34:
a6:a5:59:a1:d1:50:95:68:d1:eb:70:2d:23:0a:a5:88:55:e7:
0f:22:b0:99:68:ef:77:76:62:ba:8f:b1:02:42:45:71:3a:f1:
35:b8:88:1c:ce:a6:8f:5c:bb:23:55:ac:80:4d:e0:50:b0:88:
15:20:8c:08:7b:f4:12:5a:75:e9:73:57:3b:f5:d7:43:6e:4f:
25:fc:c4:18:db:61:2d:63:3b:2f:c1:6e:21:b7:ce:78:6f:50:
f4:23:23:28:91:cc:32:a9:67:8a:ca:51:70:ea:5d:aa:c3:63:
d5:0f:a1:c8:54:b8:cc:68:56:a3:20:e3:a7:17:b7:bc:d5:1a:
ab:a4:a3:af:a1:1f:a3:5f:7d:0c:e8:77:98:2b:f8:5b:72:39:
59:2f:8c:76:5d:0b:21:44:f2:8d:27:86:4c:cc:8b:8f:a9:56:
68:57:01:34:77:3f:f8:e0:06:36:67:c8:58:45:c7:11:4a:e1:
97:60:63:46:f0:5a:1a:84:7a:11:2a:0a:34:4d:2e:c9:01:ae:
5d:51:d9:23:35:bd:ac:0e:64:b3:45:bc:81:ea:e8:e2:32:74:
d8:a2:6c:ca:d3:1a:cb:de:7b:c8:0c:07:64:27:b3:78:cd:e1:
df:1c:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:21 2026 by rpki-client