Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
File: oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft (raw, json)
Hash identifier: GhEHMsdTRLWsIl/7A3XIGQONJanhsDBdy4y5iTPWpFw=
Subject key identifier: A2:C3:B2:0C:FA:F2:AC:DA:02:0E:60:7E:28:B3:F5:63:20:AB:F8:F1
Authority key identifier: A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
Certificate issuer: /CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Certificate serial: 019FA899C274CC09E27A6C0F164D71FF8CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:16 +0000
Manifest this update: Tue 28 Jul 2026 12:01:16 +0000
Manifest next update: Wed 29 Jul 2026 12:01:16 +0000
Files and hashes: 1: 3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa (hash: 9PxpYct4ZYiB2ZINKKmfgomCpciPW9Ne+TgfTCByrxM=)
2: oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl (hash: AKVAh1oqRPtj6ZFOvY+GoBRGHZkUHGy5r5kTuJ2cULM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c2:74:cc:09:e2:7a:6c:0f:16:4d:71:ff:8c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Validity
Not Before: Jul 28 12:01:16 2026 GMT
Not After : Jul 29 12:01:16 2026 GMT
Subject: CN=a2c3b20cfaf2acda020e607e28b3f56320abf8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:09:63:6b:77:3d:9f:88:d0:6c:cb:8e:be:
ff:bd:3e:07:49:98:c8:f3:70:1b:3f:c7:32:56:53:
1f:d4:52:bf:5a:08:8e:3f:d3:69:2e:8c:7e:c0:8b:
36:d4:91:e4:d6:dd:51:11:01:4b:67:b8:61:48:cd:
8a:ff:8f:59:63:0c:d9:09:6c:5c:b5:75:c0:1d:d8:
2e:35:e0:72:2e:d6:84:91:4c:08:61:89:88:87:4f:
20:d2:a2:3d:07:40:6c:a7:51:14:ef:82:67:65:27:
b1:ea:fc:9e:b1:28:48:4f:b5:9f:61:96:58:04:a2:
f8:e8:e1:34:a4:91:7b:cf:04:d0:e7:2e:27:01:e3:
90:c6:90:4f:98:e9:b4:5a:7f:0f:d9:71:c6:e8:47:
f6:75:b4:30:c1:e5:5c:44:e7:97:b0:6e:dc:c9:c7:
98:0a:bf:cc:cd:2c:84:c1:8d:59:80:bd:e6:3a:68:
2f:fe:37:f7:47:f0:bc:10:81:ee:41:32:72:cb:f5:
37:e4:67:e3:1c:bd:d5:96:f1:40:dd:2f:da:03:a2:
09:34:ff:e8:cd:9a:fd:90:ba:d1:57:dc:7e:e5:8e:
45:55:71:c8:02:cd:eb:5b:66:49:df:13:69:d9:b3:
e8:c3:3a:ef:09:c7:e4:68:18:ee:7e:2a:72:f0:6d:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:B2:0C:FA:F2:AC:DA:02:0E:60:7E:28:B3:F5:63:20:AB:F8:F1
X509v3 Authority Key Identifier:
keyid:A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b0:14:12:a6:52:3e:f8:cb:5d:cd:55:8e:f1:03:a6:78:ff:
f7:c3:7c:27:04:a9:df:d5:b3:bc:ab:ec:40:57:5f:ba:9f:4a:
1d:91:98:d3:ca:e8:c1:a5:60:a6:af:1b:85:4a:36:e0:24:24:
f0:ba:bf:23:ec:39:72:5b:77:d1:b0:3b:ea:f3:86:9c:71:de:
75:eb:c7:2f:a4:55:82:e9:85:c9:7b:3d:7e:fe:5a:51:a8:91:
39:3b:ed:c6:97:9e:ef:b1:f6:9c:9f:6a:80:a8:d2:ec:c8:92:
11:6c:fd:12:01:ee:ff:57:33:fb:26:b0:68:93:48:e1:2f:b7:
76:73:1e:81:06:ab:7a:1e:84:70:ab:59:a8:ab:fe:54:c8:fb:
25:a9:d5:a8:9f:37:65:61:39:02:b9:62:c2:c4:31:91:23:89:
c3:df:7f:9e:4b:20:ea:76:24:d4:26:59:45:1a:18:d4:5a:15:
18:90:93:f8:6a:8e:37:e0:e4:e8:98:63:85:e6:74:ab:a4:da:
00:ec:3b:65:b5:51:79:da:f5:72:4f:19:55:1a:d5:2d:54:c3:
a8:81:77:29:73:86:46:d9:7d:51:c6:33:bb:a9:8e:77:71:e1:
12:f2:5a:5b:1f:7c:0b:14:8c:8b:53:91:73:93:69:50:d8:2b:
f5:63:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:05 2026 by rpki-client