Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: xm08bPVqDGtFNEw+KP/8u1eyFpfz0Hz3BY5HpcZz3WI=
Subject key identifier: 18:86:9D:08:84:EB:D3:D9:5E:46:51:E9:1D:7C:39:0E:C1:0F:7E:13
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 019FA82C35AFC3C50ED6006EBFA94D0E8616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 10:01:37 +0000
Manifest this update: Tue 28 Jul 2026 10:01:37 +0000
Manifest next update: Wed 29 Jul 2026 10:01:37 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: 7WqmYNq3OqOvyBXMzznzNXX5UFUtH8tRkK25HZGOmX4=)
2: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (hash: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:35:af:c3:c5:0e:d6:00:6e:bf:a9:4d:0e:86:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Jul 28 10:01:37 2026 GMT
Not After : Jul 29 10:01:37 2026 GMT
Subject: CN=18869d0884ebd3d95e4651e91d7c390ec10f7e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:87:3d:95:fb:6f:81:ae:92:40:4d:63:ff:
9d:84:81:ab:51:fb:94:22:83:d5:f5:5f:c6:1a:88:
ab:7d:2a:9e:e6:d4:de:24:f2:75:e2:8b:d8:b5:3b:
b0:d7:f7:a9:64:5d:f4:38:69:7b:1b:a8:a3:78:cf:
9f:ab:6d:9b:48:07:76:10:26:21:27:17:9f:4c:55:
07:38:58:a4:c5:83:57:98:37:a7:c7:c1:64:40:46:
da:4c:22:af:6c:b8:2d:fe:9e:1a:de:68:f1:22:5e:
40:ef:3d:14:29:3e:be:3f:b1:f6:66:f3:74:9d:4d:
18:3b:3d:d5:92:0c:3c:e8:1b:e0:77:c2:56:10:ef:
32:1f:ea:f0:2a:30:73:b7:32:a8:47:42:e4:b1:09:
5d:d8:17:a8:26:df:45:b3:b0:8b:e2:d4:78:47:27:
7a:6e:0e:8f:56:7c:c0:b0:a9:fe:ca:9a:6a:b0:36:
b0:fc:5b:eb:25:56:77:81:4c:b5:22:15:da:24:55:
53:7f:78:e9:09:8f:7b:f5:52:a5:b3:60:71:d8:a8:
35:32:bb:d5:ce:81:97:06:0e:6c:6b:bc:7d:c1:00:
60:46:a1:fa:5c:22:d6:33:1a:bb:9f:32:a9:2e:b3:
36:75:29:d5:7f:16:51:09:04:96:db:63:a9:80:02:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:9D:08:84:EB:D3:D9:5E:46:51:E9:1D:7C:39:0E:C1:0F:7E:13
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f0:3d:73:d8:ac:b8:bf:e4:49:97:23:d6:05:7f:cc:0f:74:
47:1b:ba:44:ef:f3:a8:b5:4b:8a:1c:6a:1e:60:b2:1f:64:03:
87:b4:fb:fc:74:89:dc:16:1d:5f:20:e6:7c:05:01:dd:27:85:
a4:bf:20:49:41:d9:09:f3:e1:a5:5f:67:76:41:88:d2:b7:29:
b8:2c:a7:58:e8:c0:cf:8d:8f:7e:24:de:22:3d:6f:ba:1c:de:
9d:a8:15:88:7d:74:4a:2c:b6:0d:c0:d2:cb:c5:1b:47:26:f7:
2f:9a:a9:e4:00:55:a5:c6:83:4c:9c:c9:20:f9:78:a0:34:ea:
ed:c7:84:07:9a:3c:f0:10:2b:18:da:09:5d:6e:49:22:27:bb:
b2:4e:c4:7a:fa:86:93:2a:7e:b0:d3:1c:1e:ff:1f:0d:b5:fd:
34:06:12:4f:82:fb:13:78:10:3d:18:51:1c:95:08:8c:3d:ff:
d0:56:a8:ab:2c:40:b6:0a:99:4c:cd:45:a2:89:ec:bc:f0:0f:
5e:af:10:97:fe:8d:a7:a2:95:04:bb:17:83:bd:a0:b7:ad:f8:
a4:e5:d2:5a:5f:a0:f0:c1:d9:95:23:e5:a3:18:99:ef:9f:ae:
ca:d2:18:4b:5d:b2:af:df:13:af:57:a0:42:d9:ff:12:e7:98:
11:aa:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:56 2026 by rpki-client