Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: sHhir9tobwhIKmY4LZiKzMvuRkxTu3EolVAdGef5vS0=
Subject key identifier: 63:FC:D8:A3:D3:EB:7C:E6:B1:93:A5:09:EB:55:B0:DC:AE:F8:06:20
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019FAC07F9269A2993C42E8CB5663847C569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 16A0
Signing time: Wed 29 Jul 2026 04:00:31 +0000
Manifest this update: Wed 29 Jul 2026 04:00:31 +0000
Manifest next update: Thu 30 Jul 2026 04:00:31 +0000
Files and hashes: 1: 0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa (hash: r7csimlTjHrK6Lrz57cYuylUp8cy5+rV8BLjohqs/qU=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: UyACvvH/4Td/hJcn8y5joCx8NmmnIOVHUIkwA7k82VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:f9:26:9a:29:93:c4:2e:8c:b5:66:38:47:c5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jul 29 04:00:31 2026 GMT
Not After : Jul 30 04:00:31 2026 GMT
Subject: CN=63fcd8a3d3eb7ce6b193a509eb55b0dcaef80620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:96:eb:54:7a:f8:51:4d:97:5b:a3:d2:b8:
68:72:77:86:fd:56:33:b5:48:a6:5c:0f:1b:e6:ea:
49:ac:06:44:a4:0a:28:5e:df:82:51:4c:44:3f:8f:
00:75:21:3f:11:e6:23:48:56:c4:26:ce:84:d9:36:
7a:99:ec:3f:5d:b4:ea:24:45:e2:82:5d:82:88:68:
e5:e7:37:2c:34:20:77:33:f3:25:65:0b:40:4e:4a:
dd:6c:a4:88:61:d7:49:8e:cb:21:f3:02:a8:e6:2f:
51:9c:6a:c9:a0:99:20:d8:45:f3:aa:43:88:12:9c:
f7:e2:34:52:2e:a9:4c:7b:25:93:af:56:ca:dc:f5:
2e:1b:05:4a:23:f3:9b:2f:c8:bf:e8:be:5a:24:c4:
cb:f5:f9:a7:20:d1:76:07:ca:f4:66:61:3b:06:f9:
e0:ad:0a:68:90:37:77:70:d3:a2:09:f8:70:ae:85:
a6:c2:d0:7e:cb:49:da:92:f2:95:cf:d3:09:1e:37:
a2:e2:1d:6e:88:06:3f:81:f0:9d:ff:4e:82:61:32:
3d:16:6b:ef:8f:69:57:e5:50:fa:7e:7b:96:87:e9:
a9:7c:3b:cf:49:75:36:9d:d1:ad:a6:b7:98:74:3b:
42:68:10:8e:f9:53:5d:9d:7f:62:7d:be:83:6a:f0:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:D8:A3:D3:EB:7C:E6:B1:93:A5:09:EB:55:B0:DC:AE:F8:06:20
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:1b:ea:44:70:16:fb:01:9e:d7:14:a5:86:6d:6d:7a:92:
36:35:28:79:27:11:4a:d0:3e:49:ee:d4:01:5b:52:27:7e:c6:
39:5b:10:44:be:ea:50:3d:0e:f6:c5:d2:c9:7b:17:e5:6f:c0:
aa:ee:ac:c1:dd:46:01:37:28:99:50:cb:e1:3b:13:9c:64:48:
83:ac:c3:36:59:99:dc:5c:0a:d2:e9:82:29:26:c2:aa:79:9a:
22:78:4b:f5:70:25:f7:a9:8c:35:d0:05:0d:f8:63:91:73:59:
9c:b8:af:d0:cd:38:54:1d:5b:db:49:ab:83:ab:e4:7d:f1:9b:
c8:20:40:1b:f8:3e:9a:cf:14:6c:b0:8d:58:b9:bb:48:24:45:
2d:4b:d8:5d:aa:bc:44:c6:be:90:1b:f1:92:a6:4d:af:a1:4d:
a4:85:6c:fb:5f:a2:e7:07:db:2e:c8:b0:0f:3a:b4:84:05:2c:
14:bf:43:e6:5f:75:0f:61:4b:66:fa:b3:15:d5:5f:11:0c:03:
24:10:4b:19:16:53:af:db:df:8d:ba:4c:ec:6f:f5:d4:c3:24:
b2:d6:49:60:29:ce:0c:af:14:2d:92:a9:d1:06:9d:80:1d:8d:
96:a8:c8:6a:e0:5b:c6:66:fd:b2:7d:52:1f:c1:10:73:54:76:
e6:ba:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:42:11 2026 by rpki-client