Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: Y0NWMgKaIg6kMwqEwZcSLrunqGoGtEg5T0BFAhoiaUQ=
Subject key identifier: 4A:8B:54:70:24:87:62:A6:E9:90:F4:B2:E2:4F:04:C3:E6:94:E2:71
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019FA9E31E44BE9A57785A6993B204D1F4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 0143
Signing time: Tue 28 Jul 2026 18:01:01 +0000
Manifest this update: Tue 28 Jul 2026 18:01:01 +0000
Manifest next update: Wed 29 Jul 2026 18:01:01 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: q6WGwPCG5OS6cZjCUUTmrkBrPBR5EKEbgDZrh8R/OE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:1e:44:be:9a:57:78:5a:69:93:b2:04:d1:f4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Jul 28 18:01:01 2026 GMT
Not After : Jul 29 18:01:01 2026 GMT
Subject: CN=4a8b5470248762a6e990f4b2e24f04c3e694e271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:15:ee:78:84:05:97:ba:52:c3:d3:35:09:
bb:da:72:f6:56:35:c7:17:a5:7a:57:d5:3e:58:50:
04:02:a2:7a:8e:06:06:26:fb:70:a6:83:49:c1:0b:
41:de:ca:b8:44:41:f8:84:22:df:20:00:4b:aa:bb:
59:e1:41:be:39:ab:f8:6b:63:bd:38:3e:99:11:fa:
78:55:a5:06:fa:4c:30:91:e1:45:f3:a3:11:5f:54:
76:1f:2a:4a:b8:22:44:d8:7a:14:16:fa:49:2d:d5:
b3:d0:88:7c:2a:01:5e:93:6b:d2:ba:b5:fa:94:df:
52:d2:12:bd:45:e5:ec:6e:ec:b1:39:64:8e:44:cb:
ad:5e:16:5d:3d:2e:07:ac:e9:b7:7b:55:db:59:6c:
c8:a1:89:94:61:47:fc:cd:32:2c:94:78:81:9a:02:
0b:70:ea:7b:1d:27:b8:a6:f2:28:e1:65:82:00:6d:
63:4f:4a:6d:55:df:24:14:51:94:7e:52:7c:04:4f:
3b:11:26:8a:b6:1c:98:d3:bb:c2:81:46:1f:97:ef:
7d:85:58:b9:a8:a5:08:6b:cf:7e:f9:06:67:76:ab:
71:c8:64:fb:79:a3:82:92:e3:35:d1:9c:17:53:67:
cd:ae:14:a2:fc:7c:4b:4d:38:48:24:5f:67:44:4b:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8B:54:70:24:87:62:A6:E9:90:F4:B2:E2:4F:04:C3:E6:94:E2:71
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:01:ab:6d:f0:17:24:1b:57:cb:3e:75:e3:e3:c7:5e:ec:
d1:b1:4a:18:b0:ad:8d:b7:90:df:ae:78:91:38:79:0a:41:23:
f9:5d:b5:ba:ff:5f:66:9d:2b:14:fb:09:61:9a:ef:52:08:94:
d4:1d:f1:de:2d:f2:15:b9:67:b5:06:1f:e8:eb:70:39:1e:92:
34:a5:44:69:65:7e:6e:fe:99:08:96:76:87:58:37:ee:71:63:
77:7a:d2:59:d3:49:49:b5:5b:b9:5f:a8:3a:84:3a:fd:7a:33:
0e:58:1f:c7:bf:53:b6:48:a6:2b:50:2d:87:21:25:eb:17:e9:
07:0d:46:28:dd:ff:be:5a:59:91:7c:ca:5f:20:ff:92:bd:25:
73:a1:d4:37:9a:09:72:30:6e:48:a1:3c:9e:c7:82:d7:28:6d:
13:48:b6:64:94:23:43:35:0a:48:f7:43:a6:b2:75:b1:e9:17:
cc:23:cf:99:64:5e:99:08:35:1a:95:5e:bf:1f:40:ee:10:b4:
74:85:20:f2:02:0a:e0:14:18:91:11:93:a3:3b:e1:66:39:da:
01:11:46:26:8b:75:0f:fb:62:a4:a0:68:77:a5:15:f7:bb:be:
e4:ec:cf:83:09:79:33:d1:24:21:a4:dc:63:55:46:9b:f8:f9:
dc:3e:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:17 2026 by rpki-client