Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: oz8SyX4HxuDsF4WNP3YmBVSB0NEPXX1yrwYNuCccNI8=
Subject key identifier: B0:38:44:EF:40:D3:B6:AF:D5:6A:0F:07:67:AD:76:52:D6:69:1C:CB
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 019FA9E2D975747E0FBAA3B3352894125145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 18:00:44 +0000
Manifest this update: Tue 28 Jul 2026 18:00:44 +0000
Manifest next update: Wed 29 Jul 2026 18:00:44 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: SAlKbFGK4SqyxgmH310/ofA+s0Lha5v+eyjfvE3WezU=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d9:75:74:7e:0f:ba:a3:b3:35:28:94:12:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Jul 28 18:00:44 2026 GMT
Not After : Jul 29 18:00:44 2026 GMT
Subject: CN=b03844ef40d3b6afd56a0f0767ad7652d6691ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:25:f5:e6:cb:f1:01:27:f0:28:5b:bf:ec:
e8:57:aa:c5:89:94:5f:ab:11:92:be:ee:ca:2b:a4:
01:8a:de:98:67:6f:51:f7:4e:cc:42:09:41:40:b8:
32:dc:fa:1c:44:24:37:cd:2d:94:ce:1a:7d:72:79:
a6:3d:9a:dc:60:97:56:23:d5:d9:29:04:4e:62:09:
c9:dd:d1:99:b0:39:bc:71:c5:d9:15:3a:36:37:32:
48:75:51:37:c0:84:3f:9c:6b:1e:cf:f8:66:3e:2f:
d9:f1:ff:f4:d5:1f:73:cf:4c:38:d4:32:99:c8:33:
d0:89:fe:45:9f:ef:a3:58:95:c4:12:82:28:54:b1:
44:e1:24:01:96:e4:86:1b:e3:46:08:a5:cc:6d:5d:
cc:15:55:3e:26:14:02:26:d0:a6:8f:61:0a:ec:b7:
bd:16:15:59:4d:7b:fc:60:fa:60:d2:09:59:e9:3a:
90:4f:76:99:a1:be:71:16:78:3e:c3:02:6b:1f:d9:
6a:3e:42:4f:e7:85:2d:a3:c0:53:1b:6f:3b:37:a7:
e4:40:bc:e7:67:80:b1:27:c3:02:55:bc:59:16:5e:
9c:8e:c8:39:40:61:4e:fc:b8:e5:4b:44:72:9c:dc:
b3:97:7b:71:84:96:96:c8:18:e7:71:af:f1:34:54:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:44:EF:40:D3:B6:AF:D5:6A:0F:07:67:AD:76:52:D6:69:1C:CB
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6e:55:9a:90:92:18:5e:c8:9f:c3:40:13:9b:df:0c:88:3d:
c3:8e:1a:38:05:8b:d9:69:c9:0e:7c:4f:59:0c:6d:a9:76:c7:
f5:00:00:3d:1e:e6:9f:ba:d9:7d:93:1e:33:81:cd:1c:c0:a3:
c4:9a:c3:84:db:9b:34:48:57:77:af:4c:0c:0a:6d:ab:41:fd:
9a:87:28:25:cb:ea:b0:d6:dd:e3:a1:9f:cf:88:25:a5:c5:4d:
57:c2:11:b4:1d:cb:49:31:99:21:55:15:a4:74:48:fb:b0:98:
ec:42:e5:8e:57:f7:42:b9:06:35:46:8e:01:66:54:4d:af:7c:
b6:9b:6d:33:b4:03:ca:07:1d:bb:2b:2a:cc:17:fd:66:3d:41:
91:5f:46:5e:be:29:4d:57:bd:db:d7:87:1f:e2:db:a9:3c:d9:
dc:4b:48:c9:1d:37:8f:61:2d:b5:94:7f:4a:e2:a9:c5:f3:30:
10:32:a4:c8:32:15:fb:69:0e:b9:ba:94:67:f3:e0:69:ad:ef:
1e:83:a5:7b:64:b1:c9:ad:d6:dd:c8:31:41:c5:eb:bb:66:84:
0b:17:1f:19:1d:8f:62:55:40:a4:6f:29:ca:8b:ee:23:a6:77:
a6:0c:37:2b:50:7f:db:6c:83:57:23:75:74:71:aa:9f:e8:f7:
d6:f1:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:05:37 2026 by rpki-client