Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: P7S/XfIHfLX/WhmP1FRfn3s+2M2fIXQC+m9xxTHOn3g=
Subject key identifier: D2:21:16:33:4D:44:72:D3:99:6E:78:EC:89:33:24:37:84:FE:84:7F
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019FA9AB97CACFCDD327945E00348D885DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 19EF
Signing time: Tue 28 Jul 2026 17:00:22 +0000
Manifest this update: Tue 28 Jul 2026 17:00:22 +0000
Manifest next update: Wed 29 Jul 2026 17:00:22 +0000
Files and hashes: 1: McIHeSgScebcIpkPT4THS1jto5Q.roa (hash: fdb99PeEhGhn7zMv+ymuqGVl1nC5qV/Bm2pOoVJfRTc=)
2: QOOLONPw0mL0zRM6xNCnZ8lu_HA.roa (hash: t5PPKx70RsbnvkvxFWuFNiVu0RY4KKSyPrpAVr06jsQ=)
3: lfZvGuublTghs87OLe3YBrTz9rw.roa (hash: 33L3jHKPnMn4vOjKfAOLDS9PGwe/ZxS6Z/D2j8Yjgis=)
4: mBsIhxGKE9P1VcdBmaDVaq-y2yg.roa (hash: FjrD6MxlebN9aOC6ecpbIK3eMGRCmF4PugIT8px8qes=)
5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: 0zJAzrTC51aoIVgDctVcKRvQN2sIzBxuQKS6F+TBxrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:97:ca:cf:cd:d3:27:94:5e:00:34:8d:88:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jul 28 17:00:22 2026 GMT
Not After : Jul 29 17:00:22 2026 GMT
Subject: CN=d22116334d4472d3996e78ec8933243784fe847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:b2:76:16:a5:46:86:23:94:7d:aa:4d:fa:
07:24:59:89:dd:dc:ac:fb:28:1f:f6:e3:5b:c8:61:
bc:3c:1d:66:9a:98:ba:64:52:d8:1f:88:06:7f:ac:
f7:f6:cf:4f:9d:b5:ca:d3:6d:68:b8:60:c2:10:00:
7b:48:e5:1b:53:73:c8:d9:c7:67:0d:83:17:f0:6e:
55:e5:e6:32:8f:9b:61:13:2e:d9:0c:bf:6b:01:0e:
2a:18:eb:dc:aa:e0:a6:f5:c5:af:c1:90:e4:81:76:
e5:e8:3d:0e:da:10:19:ae:d5:b8:2b:72:39:47:80:
7a:0e:63:3e:cc:b1:d1:3d:8b:9a:07:3e:a1:cc:ae:
a9:0d:2b:48:5a:c4:20:4d:3d:fd:64:f8:6b:97:5f:
53:de:3c:c5:8d:c9:c6:f9:6a:d9:48:03:93:c6:50:
10:24:2c:af:c5:3f:8f:c8:64:e6:df:f0:be:29:21:
8d:5e:6c:24:48:71:89:c3:98:3d:c4:b0:c6:71:e8:
03:76:1e:44:4a:45:5c:a1:01:31:e3:b4:39:ac:5a:
ba:c0:fc:e8:2c:cd:7e:7b:9a:9e:0d:2e:ce:bb:88:
1f:58:1c:01:5b:0f:bd:d1:6a:6c:1e:0f:8f:69:5c:
f8:7b:ca:21:c8:62:ab:3e:aa:0a:a4:21:45:d6:b3:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:16:33:4D:44:72:D3:99:6E:78:EC:89:33:24:37:84:FE:84:7F
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8e:7d:63:99:01:bc:d6:68:6e:a1:d3:09:d4:c8:1b:ee:71:
17:50:64:d0:92:0b:4e:c7:89:51:7e:69:eb:e2:f3:87:51:37:
a5:d9:7e:c5:94:0d:58:b4:25:81:c9:b9:33:dd:8b:6b:f8:5b:
27:38:a6:35:23:37:f7:b3:a1:eb:7a:aa:54:47:bc:e6:1c:db:
a7:42:b7:fc:f1:96:af:fa:bc:16:65:29:a1:c1:bb:44:53:ce:
74:18:d4:18:45:9b:27:e2:c2:3c:7a:0e:22:86:cc:6c:d8:54:
23:cc:55:8b:af:41:b2:6a:d3:c4:9a:52:e5:3b:be:61:40:c6:
3c:c6:b7:14:d4:2a:8d:a9:35:54:c2:86:50:2c:28:5b:40:5f:
9a:29:a5:5d:ee:53:4a:09:55:44:30:a4:db:5c:8f:9e:95:d9:
70:c6:12:fd:87:34:7e:c1:a5:9e:f1:29:81:f6:e1:b7:82:31:
ad:ad:c1:04:47:89:ba:3d:26:76:66:b0:00:59:e8:55:e8:3e:
0e:4f:c9:d4:1b:78:30:61:8b:45:0b:a4:71:7f:a9:1e:bc:4a:
06:e2:17:44:18:23:83:ff:f5:59:f5:12:48:13:75:ec:e7:3a:
b1:15:27:e2:87:d5:54:0a:b1:79:18:43:29:4f:95:da:ce:d1:
9c:64:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:38 2026 by rpki-client