Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: E1lqUHFoToSUfYUSeF57SXgSsw0kyNe+3QwOqxu96eE=
Subject key identifier: 03:C2:77:D2:56:AC:D6:58:1D:D9:27:B5:91:11:65:ED:07:FD:D3:D8
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019FAAF55C085F12A52C27749898B9EC0DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: vYHgPuaysBOFJ8XrydMfiE+3+mWav4cwJ4rtERoFPfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5c:08:5f:12:a5:2c:27:74:98:98:b9:ec:0d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=03c277d256acd6581dd927b5911165ed07fdd3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:41:d1:17:0e:e5:73:36:4f:c4:f8:0a:e0:
3c:9a:75:cc:e7:25:3b:d5:4d:60:8a:81:9f:5b:b3:
e9:84:5f:1f:54:cf:96:39:36:18:cf:31:c2:6f:75:
67:bc:88:ff:e6:3e:ff:5b:a9:ae:07:2e:c8:83:02:
c7:95:b1:78:6b:7b:72:03:b4:5a:53:68:ac:69:e7:
0a:bf:4c:62:18:5d:61:28:cc:2f:32:6a:a9:8c:e6:
6e:e2:0c:dd:11:be:f0:77:05:48:0a:eb:79:45:77:
47:46:9c:5a:e7:c0:04:60:bb:de:51:57:ff:38:a1:
42:99:be:d8:c7:2d:17:0b:ec:a8:02:5c:85:a3:d9:
9d:6a:23:e0:9b:aa:22:86:de:70:f7:c8:75:15:32:
e3:57:bc:d0:40:94:13:63:d7:0e:dd:30:a8:3c:98:
72:60:93:7d:bf:88:08:2e:d8:ea:4b:a7:c0:1c:14:
bc:c6:e1:8d:5d:ca:ec:8d:30:60:c4:3f:ae:53:43:
7f:f3:63:8d:92:80:87:b3:2f:59:87:78:a7:14:20:
34:c5:24:45:4b:dc:51:1d:2f:19:20:12:79:ed:de:
53:30:1d:9d:43:e5:d7:9a:75:d9:e2:48:e9:9b:e5:
d3:46:6e:1b:67:bc:dd:26:c8:ab:ca:03:d1:e4:86:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:77:D2:56:AC:D6:58:1D:D9:27:B5:91:11:65:ED:07:FD:D3:D8
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:bd:e3:94:0d:77:8e:c0:ed:45:47:4b:8a:45:34:a0:95:
0e:4b:b2:c2:71:9e:0b:7f:81:ed:54:08:a3:6b:bd:ad:f0:8d:
f4:02:f2:fc:6e:5f:f6:32:43:c1:43:48:96:a6:fd:46:0c:c6:
d8:08:a1:61:b8:c9:89:66:28:7d:6b:be:a9:6e:6b:4c:fc:d3:
11:2f:f9:14:9d:b5:e3:9f:4c:58:d3:35:fe:70:59:2f:d7:78:
24:8b:19:57:10:ca:67:59:8d:89:80:fa:aa:5a:7f:9b:75:02:
a2:e4:d7:c3:55:d7:5c:03:76:00:6c:eb:b8:74:73:28:36:56:
09:b1:7a:e7:a7:c7:19:e0:28:c2:33:e3:04:0b:33:1b:83:11:
f1:5d:29:e6:8e:41:0e:c5:72:9b:89:56:7a:23:13:a6:89:86:
70:93:52:3f:be:4b:9e:14:8d:e6:af:74:03:3b:96:45:96:c8:
50:a4:d2:3a:e3:3d:78:4a:d2:78:bc:d5:a5:a4:a3:19:a0:99:
1f:b6:10:4e:3a:09:6a:a0:60:ce:c1:ac:32:29:eb:8b:d5:c7:
16:af:95:34:fa:5d:2d:25:73:5a:82:c7:3b:bd:d5:41:fa:08:
7e:1b:06:24:55:00:aa:60:7a:da:b8:36:b5:a2:73:9c:a2:52:
53:a8:36:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9VwIXxKlLCd0mJi57A3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4
YmRhY2YwHhcNMjYwNzI4MjMwMDM0WhcNMjYwNzI5MjMwMDM0WjAzMTEwLwYDVQQD
EygwM2MyNzdkMjU2YWNkNjU4MWRkOTI3YjU5MTExNjVlZDA3ZmRkM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tVB0RcO5XM2T8T4CuA8mnXM5yU7
1U1gioGfW7PphF8fVM+WOTYYzzHCb3VnvIj/5j7/W6muBy7IgwLHlbF4a3tyA7Ra
U2isaecKv0xiGF1hKMwvMmqpjOZu4gzdEb7wdwVICut5RXdHRpxa58AEYLveUVf/
OKFCmb7Yxy0XC+yoAlyFo9mdaiPgm6oiht5w98h1FTLjV7zQQJQTY9cO3TCoPJhy
YJN9v4gILtjqS6fAHBS8xuGNXcrsjTBgxD+uU0N/82ONkoCHsy9Zh3inFCA0xSRF
S9xRHS8ZIBJ57d5TMB2dQ+XXmnXZ4kjpm+XTRm4bZ7zdJsirygPR5IYSjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPCd9JWrNZYHdkntZERZe0H/dPYMB8GA1UdIwQY
MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt
NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm
LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaa945QN
d47A7UVHS4pFNKCVDkuywnGeC3+B7VQIo2u9rfCN9ALy/G5f9jJDwUNIlqb9RgzG
2AihYbjJiWYofWu+qW5rTPzTES/5FJ21459MWNM1/nBZL9d4JIsZVxDKZ1mNiYD6
qlp/m3UCouTXw1XXXAN2AGzruHRzKDZWCbF656fHGeAowjPjBAszG4MR8V0p5o5B
DsVym4lWeiMTpomGcJNSP75LnhSN5q90AzuWRZbIUKTSOuM9eErSeLzVpaSjGaCZ
H7YQTjoJaqBgzsGsMinri9XHFq+VNPpdLSVzWoLHO73VQfoIfhsGJFUAqmB62rg2
taJznKJSU6g2Jg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:38 2026 by rpki-client