Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: m95DXYwX4G6zWiTDk8e+ZWuY7S+vgeeSFpl2k+ys6Kw=
Subject key identifier: 87:5D:83:4A:3E:57:71:F6:E8:7D:3D:42:CB:F6:E3:9D:72:23:DA:EE
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019FAABE89E975B462BC5162BFF901D77CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 19E3
Signing time: Tue 28 Jul 2026 22:00:41 +0000
Manifest this update: Tue 28 Jul 2026 22:00:41 +0000
Manifest next update: Wed 29 Jul 2026 22:00:41 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: nGfFF1SwT2j6sR5eiXsQ40P+yh+3z4++h3LA32Ax00w=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:89:e9:75:b4:62:bc:51:62:bf:f9:01:d7:7c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jul 28 22:00:41 2026 GMT
Not After : Jul 29 22:00:41 2026 GMT
Subject: CN=875d834a3e5771f6e87d3d42cbf6e39d7223daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:56:d5:9c:1b:ba:97:3c:5e:25:b5:c6:71:
82:e6:bc:33:2e:3a:d5:89:cf:d5:76:39:9d:a4:0f:
51:1a:04:2c:ce:38:5d:c8:8d:c4:6c:9a:11:af:ee:
a0:8e:e0:43:c5:0a:f2:b3:d9:1d:d3:9b:7f:61:ee:
23:3d:79:4d:7f:51:df:b0:b0:3b:49:ca:e7:43:20:
7d:a6:87:fc:cb:16:97:e3:78:ed:a7:2a:09:8b:ec:
56:bf:5b:8b:5e:2c:6c:59:da:09:70:d1:19:bf:ec:
1a:fd:bd:68:0e:97:33:89:79:01:63:dc:ac:ee:f1:
0c:82:57:b1:52:0b:1a:94:ad:aa:86:a7:ac:3f:18:
b9:b9:53:ce:c8:ed:fd:b6:11:f9:e6:7d:0c:e6:b4:
1d:a1:db:29:f9:2a:97:fb:85:d3:ed:7c:32:c1:ac:
81:de:e8:46:67:fc:f4:3f:0f:dc:d9:6b:12:6e:60:
98:03:84:be:23:48:c0:a5:15:86:4f:01:55:6f:3d:
d0:71:d9:60:35:f3:22:31:31:fa:6a:17:5f:73:1b:
76:41:3e:28:d9:9e:2f:75:93:81:d3:55:1b:63:d6:
00:a1:02:a3:98:83:ba:8b:ae:8a:84:11:b9:04:2d:
76:a1:5e:39:9e:7f:c6:b7:1f:84:1d:2f:3b:ce:b9:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:83:4A:3E:57:71:F6:E8:7D:3D:42:CB:F6:E3:9D:72:23:DA:EE
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:49:59:d3:b3:69:ed:21:4c:17:2d:0d:8d:67:cf:56:25:
bc:05:72:5a:50:67:cd:3e:ea:ca:6a:4b:e0:7c:87:98:d5:38:
2a:62:bc:2b:e0:2c:68:80:cb:57:e1:61:ab:9b:e2:d5:6d:b9:
f2:89:ae:fb:f3:a4:de:0f:60:8d:c4:1c:f9:b0:20:ef:c8:fd:
bf:35:22:bf:71:1a:d8:04:35:f3:d6:6f:1e:ac:93:a7:90:30:
95:49:a5:b3:ab:b1:2c:8e:f8:f9:58:8a:0b:22:5d:0f:0a:fa:
3b:b6:6d:3d:d4:57:87:5b:0e:e4:3b:49:9b:b4:f4:26:f6:38:
55:b6:77:99:5e:fb:54:01:2f:8f:8f:d0:bc:03:42:a6:f2:a2:
81:45:2a:61:c6:f2:f0:07:73:3e:1d:26:91:cc:4c:11:c8:92:
1a:97:b7:34:80:92:0d:1e:b7:25:ad:6a:65:5e:86:0c:13:b8:
15:dc:f8:19:3c:3a:81:fc:70:c4:50:24:54:3c:e7:8a:00:85:
3e:0f:49:2c:5a:71:b0:2c:f0:da:76:fe:3d:d4:cf:e8:dc:f9:
89:6c:a7:73:9c:b9:ca:cf:dc:0a:cf:06:e2:23:4a:b9:38:42:
ad:9c:4f:5a:73:d1:e5:da:80:eb:1e:79:e0:8b:1d:2e:69:27:
4e:98:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:12 2026 by rpki-client