Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: OLiPFDAsDMREKyqh07WBn+kfVy23eIBMqk51kQT6Q6o=
Subject key identifier: D9:30:DE:B3:16:CA:49:1C:3A:01:EA:C5:72:B9:1E:BB:C2:1C:2E:9B
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 019FAAF599DAEDCDAF2A67E511EFFF49C5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 1968
Signing time: Tue 28 Jul 2026 23:00:49 +0000
Manifest this update: Tue 28 Jul 2026 23:00:49 +0000
Manifest next update: Wed 29 Jul 2026 23:00:49 +0000
Files and hashes: 1: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (hash: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: VUsD0PKcQVoVXc+pGJ9Nb4L1ZC9u+Px78mQJQ4ya7rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:99:da:ed:cd:af:2a:67:e5:11:ef:ff:49:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Jul 28 23:00:49 2026 GMT
Not After : Jul 29 23:00:49 2026 GMT
Subject: CN=d930deb316ca491c3a01eac572b91ebbc21c2e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:50:cb:4b:60:c3:82:0a:31:d8:91:90:ab:
f6:5f:e5:31:0b:97:ae:34:31:4f:15:39:f2:dc:96:
88:3a:1c:a0:35:e7:ac:f9:c3:76:49:71:04:54:22:
e1:e7:c4:8e:29:f2:fc:26:1a:89:78:a7:67:4c:55:
50:62:1c:09:0d:71:f4:c5:bd:f0:83:5c:11:67:6c:
58:2b:da:61:19:b9:b6:ff:b0:89:3b:2b:3f:df:cf:
1a:5c:e3:84:58:8e:38:da:b6:c0:d9:a4:51:a2:b3:
25:b2:a3:63:b7:9a:28:f1:97:e4:60:a3:95:74:df:
db:f8:ca:0f:16:7c:68:9a:c6:c7:6c:c2:b7:36:a7:
42:7a:02:0c:64:67:fd:b4:6c:e7:33:92:15:b6:ae:
72:05:30:76:90:c8:35:c4:bc:54:ce:2e:3b:0c:24:
94:cd:64:d7:7f:bd:44:59:5a:0b:17:fe:fe:f5:17:
6b:8e:3a:39:22:61:1c:e0:ee:0c:79:ed:da:09:5b:
62:f7:ca:fc:bb:f2:22:a2:18:39:d7:50:9c:d7:7b:
53:64:4f:fb:52:c0:ac:15:96:3e:64:53:45:03:c8:
03:fe:83:04:3c:97:f8:83:c7:61:4e:34:2f:6b:71:
da:46:88:b6:43:83:c6:d0:57:dc:07:98:04:b9:f5:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:DE:B3:16:CA:49:1C:3A:01:EA:C5:72:B9:1E:BB:C2:1C:2E:9B
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7e:83:29:c7:4c:77:66:b8:e2:ac:5d:18:c2:29:1d:26:df:
ea:f2:72:d4:c5:44:ca:ce:1f:6b:3f:2d:67:11:4e:9f:cf:76:
0a:b8:14:ef:b3:b2:c9:40:e7:3e:e5:49:0a:31:b7:e1:02:18:
13:60:f3:86:96:63:c5:ad:02:f8:7e:f7:e3:4c:94:15:15:45:
f9:f7:5a:01:e6:ac:3a:f5:23:33:f8:13:99:ad:f8:12:fc:b7:
78:12:af:14:2d:c7:b5:44:f8:16:90:d7:56:15:61:30:c0:c9:
bf:f5:91:8a:06:d2:a1:78:43:18:25:e9:4e:f5:57:1c:c3:63:
b2:9b:08:59:1c:3a:b9:8d:a2:06:c9:26:d5:ff:82:74:d4:b6:
65:9a:db:ec:77:c9:e5:40:2a:23:19:51:31:3b:92:fa:b2:7b:
03:48:0b:3a:44:d0:3e:dd:87:35:ac:d3:8c:2c:d5:cc:6b:61:
51:8d:9d:a0:8b:16:3e:e9:b7:6a:27:c3:46:f5:75:68:da:ff:
71:a3:0c:ad:ae:2f:ae:3d:fa:18:b3:f7:a3:1f:4f:96:86:12:
8c:9d:45:f2:b6:d2:11:d4:12:67:5e:51:82:e7:47:61:9e:61:
76:74:a8:fb:bb:18:66:3b:41:67:1a:28:20:66:21:a4:82:6e:
48:46:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:18 2026 by rpki-client