Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: CtBHnA4ccl4CZaurbgpgl7WxLXLzg6DahZY3X0XY6zA=
Subject key identifier: 38:38:E1:F0:EB:67:78:FD:19:32:80:33:82:97:87:A3:FE:98:EA:4A
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 019FAA88A15489B91B001776A98AA68AEFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 0388
Signing time: Tue 28 Jul 2026 21:01:48 +0000
Manifest this update: Tue 28 Jul 2026 21:01:48 +0000
Manifest next update: Wed 29 Jul 2026 21:01:48 +0000
Files and hashes: 1: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (hash: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8=)
2: cXM4klbaacUguvuXRN4gU4Cio9A.roa (hash: TvSKvxbQqZ/2OHUvXcP+0jqJAZh3aKDn2NH8HHVBK/A=)
3: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: dV7SeERU23LLkzKKqALCW3mkOq8KoVB1Yv0hdmpNOYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a1:54:89:b9:1b:00:17:76:a9:8a:a6:8a:ef:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Jul 28 21:01:48 2026 GMT
Not After : Jul 29 21:01:48 2026 GMT
Subject: CN=3838e1f0eb6778fd19328033829787a3fe98ea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:3f:bb:41:ad:d7:83:46:6c:92:0a:02:ca:
d7:c8:19:78:51:1e:e4:9b:c3:47:65:e1:c1:c9:b5:
c8:ad:02:8f:9f:66:b4:c2:62:ae:73:4d:28:28:75:
f2:6d:75:b6:27:df:2d:b4:0f:9a:c4:a1:9a:f1:4a:
8d:30:2a:3e:55:7f:33:ea:54:e2:7f:5f:c2:2a:d0:
99:d1:8c:f8:23:d0:d5:2a:0f:23:f3:67:0b:9b:3d:
72:33:a1:a2:6e:f9:7e:fd:92:f0:6e:a3:41:20:27:
c9:6f:ed:67:b3:f0:8c:e4:47:03:fa:fc:f4:59:d6:
e8:7b:1c:28:b0:df:df:af:65:13:6b:25:f6:77:48:
8d:01:96:6e:23:35:ea:ce:4b:a7:fc:e1:bb:b8:fd:
e7:5b:fb:af:6a:17:7e:e7:f6:29:41:1c:24:28:00:
50:f9:dd:72:87:8d:78:09:fe:50:01:4c:59:66:c6:
95:cc:d2:4d:9b:cf:de:a4:3f:a1:73:6e:9b:ea:80:
0c:47:13:7c:80:75:27:35:9d:d0:c6:dd:6f:22:df:
6b:83:dc:ae:d6:18:68:34:8a:e6:4d:98:cb:f8:97:
fc:e0:0f:8a:10:41:d3:92:5c:ed:13:a3:f2:fc:40:
df:18:c6:be:37:8f:0d:80:ac:59:ab:04:c5:be:5d:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:38:E1:F0:EB:67:78:FD:19:32:80:33:82:97:87:A3:FE:98:EA:4A
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:34:01:0d:8d:bc:fa:95:85:96:58:b9:6f:88:fc:43:15:3c:
4b:98:5f:5c:25:2e:49:fb:e0:07:0d:2e:77:66:b2:4c:9e:50:
d1:20:27:78:33:83:b7:1a:5f:e0:b8:1d:30:a3:f2:93:90:77:
e5:19:b0:29:c1:f5:8b:02:b2:aa:11:15:c6:1c:3f:98:60:a1:
c1:ff:e4:c1:8d:14:52:52:bf:dc:9f:e4:d7:7f:4b:6d:46:d7:
91:07:91:ac:a7:81:76:f9:06:fd:11:80:da:89:6d:fc:1c:fb:
59:a1:46:0f:92:5f:39:65:7a:46:29:40:bb:fd:f4:1a:6b:f7:
7c:ff:3b:60:8a:bb:9a:bb:6f:eb:8c:d2:4a:16:1e:ee:d8:18:
37:21:a9:2e:6b:a4:00:5d:0d:36:7b:95:cf:3b:32:1f:11:c2:
b0:32:bc:bd:8e:15:23:33:92:72:6f:96:f2:1a:17:ca:59:e3:
93:24:d4:90:7d:0b:4e:3d:75:42:f4:0c:54:09:02:d5:89:5c:
71:20:d4:e1:56:7c:67:4b:36:8e:0c:87:65:18:84:58:09:a0:
81:4a:4b:c5:a2:02:10:82:a0:bf:bc:89:9c:7c:0c:f7:0b:64:
af:af:f1:da:4b:97:94:a8:f8:02:85:07:cb:ae:5d:7d:cb:b5:
c8:0b:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:05 2026 by rpki-client