Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
File: OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft (raw, json)
Hash identifier: PMuqu4la4j7sbWIgh+MxM7nPXIwW46iVM+LWaui6FAo=
Subject key identifier: A5:E2:D8:F9:1C:6E:1B:0A:85:97:C1:36:DF:A5:48:55:2F:0F:42:DD
Authority key identifier: 3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
Certificate issuer: /CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Certificate serial: 019FA89A5D57780C7C7131241EBE4DFBCD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:56 +0000
Manifest this update: Tue 28 Jul 2026 12:01:56 +0000
Manifest next update: Wed 29 Jul 2026 12:01:56 +0000
Files and hashes: 1: OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl (hash: qawXO8dfH6dkc1dPlIOHg8PJgBKPJYIwueSFqNvXvKw=)
2: lGUSShaLZbHrG2hxXfbd3gujno0.roa (hash: cC+BsnEt29P3BJfc+K3wjvfhKLVQR7wZcV1TURDbdTs=)
3: naOdqcYODmRtxOcy9Qc1k89TSYc.asa (hash: xGnv4cIxdw0NhIR5zzNkuvrK8dWoa3n0RqBgikLm7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:5d:57:78:0c:7c:71:31:24:1e:be:4d:fb:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Validity
Not Before: Jul 28 12:01:56 2026 GMT
Not After : Jul 29 12:01:56 2026 GMT
Subject: CN=a5e2d8f91c6e1b0a8597c136dfa548552f0f42dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:51:78:ae:3a:ba:e1:bc:2f:14:0d:69:3a:
20:ed:62:66:5b:58:5b:02:eb:73:d2:02:2d:c4:9c:
a5:7e:1d:02:d4:d8:2b:60:3f:75:45:eb:4a:1d:c2:
1d:80:e8:37:1c:e5:39:87:11:e3:4e:1a:07:cc:8a:
dd:a1:92:56:46:4e:7e:7a:e6:f7:11:e9:20:f5:55:
dd:40:97:70:7b:f1:06:d9:75:d1:5c:53:7e:f9:64:
1e:27:fb:97:75:a9:c4:33:5d:42:f6:1c:2a:40:93:
e6:94:7b:9d:45:5c:51:44:2f:d8:e3:de:93:70:94:
a0:f4:3c:65:f2:1c:00:96:6e:c1:f5:8d:6d:22:e7:
f0:8c:d9:07:af:c3:49:23:1b:cd:73:96:22:68:46:
5e:23:85:04:b5:41:9c:79:d8:f6:c9:de:ed:19:64:
63:ba:90:9e:6e:9a:27:e6:6e:f7:72:38:cb:f1:1b:
b7:eb:9f:a5:2a:2e:2d:f3:3f:70:0b:a9:f9:59:d9:
cf:6c:39:cf:25:f2:fa:22:77:cb:d7:a0:b6:93:9b:
07:03:65:7e:8b:01:95:33:92:56:32:23:da:c1:d5:
de:71:94:c3:1f:6b:9b:fa:e3:aa:32:e6:64:6a:cf:
e5:dc:ac:db:ef:14:33:a1:e6:e6:cd:8c:8a:35:d0:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:D8:F9:1C:6E:1B:0A:85:97:C1:36:DF:A5:48:55:2F:0F:42:DD
X509v3 Authority Key Identifier:
keyid:3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:3d:6c:d2:0f:bd:cb:5c:bc:63:2e:62:87:d6:1a:60:80:
81:ac:3f:5f:66:52:82:e8:65:b2:0b:1e:4c:a3:c9:7f:90:92:
ac:7b:ac:d1:98:b3:67:03:c2:64:8a:6d:bb:c7:62:e1:46:7e:
db:c3:97:63:93:2c:2a:3e:ef:3f:3b:58:f4:3b:d4:9b:15:a2:
5f:f2:60:27:5e:72:c3:ff:dc:de:68:1d:ed:d5:71:ad:bd:9d:
b2:55:61:92:f8:a9:f3:a7:2d:bc:57:25:7d:dc:31:90:3f:4a:
04:ac:e7:58:5d:83:dd:6b:ec:98:f7:54:8b:a0:d7:55:a2:26:
02:e0:3b:1c:52:34:06:8e:2b:1a:e3:ee:98:3c:da:f7:ee:fd:
5f:58:10:1e:54:a8:44:49:42:91:ec:90:e5:4b:03:3e:7e:08:
ad:03:f4:e8:ea:66:b4:0f:03:d3:ac:78:d0:d5:91:74:f6:e2:
da:72:5d:4e:55:eb:be:2f:01:c2:ea:0f:c1:74:da:c8:61:37:
3e:7a:7a:46:56:49:7f:f7:02:6b:ce:7e:b3:1c:b5:57:b8:b7:
bb:80:1e:e7:2b:4c:be:35:9a:fb:c7:13:c9:2d:28:42:eb:80:
36:e3:87:4a:7f:dd:17:7c:bf:58:3f:1d:dc:48:f5:56:f2:16:
70:05:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:46 2026 by rpki-client