Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: OBm47OeS1nAmAyjAHPpMXqH2s8qH6qfj/BFzklXqm3k=
Subject key identifier: 6C:2B:4E:FC:E4:1E:BA:55:A1:FB:A1:01:A9:73:26:9B:3E:48:04:63
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 019FA8622340C449471BE75FF3CA269A2EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 0689
Signing time: Tue 28 Jul 2026 11:00:31 +0000
Manifest this update: Tue 28 Jul 2026 11:00:31 +0000
Manifest next update: Wed 29 Jul 2026 11:00:31 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: CUqZc8hec0Ms-egOcTLYoCv3kIM.roa (hash: ZlTiAUnMG4BkW/1TEjOoZRHb8X1Pe28FH9YpKcWqV/8=)
3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: fcYyXgsaMJ/MnpMNJEOigCDFrgEG9780f3W97152Wvw=)
4: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
5: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:23:40:c4:49:47:1b:e7:5f:f3:ca:26:9a:2e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Jul 28 11:00:31 2026 GMT
Not After : Jul 29 11:00:31 2026 GMT
Subject: CN=6c2b4efce41eba55a1fba101a973269b3e480463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:c3:b6:d9:84:32:41:bb:78:98:cd:88:31:
9a:f8:da:95:8a:a0:82:58:65:77:c0:d4:6e:9b:14:
20:3b:82:9a:4c:e0:a1:5b:fa:b6:45:95:fc:31:6c:
5e:3e:9b:dd:8f:92:36:a9:59:fd:8e:38:eb:ab:65:
b3:b2:4a:00:95:4b:3e:bb:0c:b6:ca:b7:7f:08:77:
1e:3f:50:e1:2e:81:22:1c:a8:14:a4:c9:cf:0b:4b:
f5:b2:fc:15:6d:f5:91:bf:d1:48:a3:b2:ce:36:66:
67:f9:1c:7c:73:cf:fc:f4:29:46:0c:82:45:5c:3b:
23:bd:31:43:68:7b:c4:c6:30:f3:aa:15:9d:7b:1c:
db:73:a1:61:a8:b6:a7:64:db:c1:c8:57:b9:2f:c5:
2d:a6:30:93:8a:fe:88:36:65:57:80:73:75:a2:76:
f1:98:f1:fa:96:73:7a:5c:cc:ac:ec:bd:6b:0d:6b:
3e:0e:3b:01:c4:7f:0f:94:04:77:8e:11:ad:9f:b9:
9f:d0:65:34:86:df:2a:be:c6:ec:8d:b8:e1:f8:49:
73:13:e9:63:1c:14:3b:42:a1:27:7f:6a:ec:be:bb:
a5:a3:11:17:5a:58:ed:32:8d:13:a3:f3:89:95:01:
8f:03:f6:d6:e8:16:e9:56:d8:bb:85:a1:70:60:8d:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:4E:FC:E4:1E:BA:55:A1:FB:A1:01:A9:73:26:9B:3E:48:04:63
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:1f:3c:c1:f6:33:e3:77:ba:f0:8a:e1:fd:22:1f:24:ae:
2a:72:bd:93:f1:cd:4c:10:a3:4a:47:78:99:6e:09:3c:95:01:
e2:1b:a0:96:65:b3:43:33:8b:75:37:5b:a3:52:17:ac:4e:d0:
b5:2a:a1:ea:7d:5a:2c:50:16:a0:e5:2b:a1:20:06:5b:78:08:
e1:c1:4a:b8:8c:d1:f2:60:d4:e3:5a:97:ce:01:82:5b:21:e9:
56:a0:2e:66:d8:a9:d3:2d:13:c8:f0:d0:fa:9b:54:8b:8b:88:
a8:60:3f:be:b2:ea:e4:5d:82:1f:24:25:2e:9c:a3:aa:9d:21:
6d:fc:6f:44:d1:a3:f5:ea:6e:51:06:b7:c0:50:8a:d3:ff:c2:
f5:49:d3:16:1f:ef:4f:0e:d7:f3:bf:ec:3c:3d:67:f0:33:7f:
d8:43:03:ff:ca:f8:87:6c:35:95:4d:6a:f9:3e:b3:a6:53:d2:
46:d1:0a:14:09:00:18:77:e6:8e:2e:9a:8c:fd:6d:44:7f:d3:
3c:7c:ca:84:0e:35:b9:23:bd:a6:98:ba:df:74:25:82:ab:32:
71:f5:ff:af:dd:f8:82:fd:4d:48:ed:b9:80:c9:42:cc:1e:ce:
f1:35:74:61:98:19:62:69:be:98:7c:ae:51:0c:4b:be:d0:ea:
dc:8f:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:33 2026 by rpki-client