Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
File: oCbLucfoHNxJ0b6zRtutyR80rsE.mft (raw, json)
Hash identifier: PQSVqAG+msDgkF4kZLIrucyH8xuXxsYxh6nKz6BqGWY=
Subject key identifier: 35:57:72:7F:4E:32:1C:64:35:AE:1E:80:45:FA:34:F9:AB:24:55:00
Authority key identifier: A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
Certificate issuer: /CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Certificate serial: 019FAC75C4C81EA1DB48034D96B4E3F36589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:26 +0000
Manifest this update: Wed 29 Jul 2026 06:00:26 +0000
Manifest next update: Thu 30 Jul 2026 06:00:26 +0000
Files and hashes: 1: jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa (hash: sqHWrvNe0MvxI2kDDh6irgL9TZbFavXwZmxBezSbKWU=)
2: oCbLucfoHNxJ0b6zRtutyR80rsE.crl (hash: 1OcZn3HM+aIBqIcGSTfw9QT6uoqQJsDWWzK127qhIxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:c4:c8:1e:a1:db:48:03:4d:96:b4:e3:f3:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Validity
Not Before: Jul 29 06:00:26 2026 GMT
Not After : Jul 30 06:00:26 2026 GMT
Subject: CN=3557727f4e321c6435ae1e8045fa34f9ab245500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:8f:9c:25:63:80:f4:72:83:51:e4:61:11:
4e:75:ca:ac:68:7c:94:6b:30:b5:7e:09:4b:64:5f:
13:90:d2:71:3d:8b:e8:96:aa:2e:0b:e0:4e:48:9f:
e3:ab:71:08:a6:20:c7:71:46:73:40:1e:cd:d3:96:
ee:d8:6a:ad:49:e5:2e:91:00:23:30:f0:a3:5c:d9:
22:97:dc:f7:5c:8b:ce:c7:e0:86:60:1c:01:1b:48:
a3:dd:68:f6:02:eb:8b:41:22:df:87:fe:21:15:8c:
c8:62:de:92:bf:1e:10:3c:0c:be:fa:f9:4c:95:6c:
06:02:5e:c9:73:ac:30:50:8d:c2:38:53:45:3f:b6:
1f:74:fd:2e:07:b5:55:46:8b:05:00:cb:ca:90:8b:
81:f8:f0:c2:b9:41:dd:8f:4d:6e:a9:aa:19:df:15:
7a:dc:bf:ff:72:22:05:ab:b5:b3:f2:0b:06:51:1e:
6f:b4:25:97:61:77:cb:4b:e7:e7:d4:de:29:f0:0d:
7f:8f:14:eb:06:50:1d:32:16:58:8c:7c:9a:2c:ad:
24:88:1a:0e:f6:7f:9b:ad:0b:45:ec:19:2f:3d:38:
d9:6f:68:aa:29:6d:09:94:93:2e:17:31:3d:22:3d:
20:d3:b2:22:23:97:88:91:e8:3f:65:43:5a:8d:f1:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:72:7F:4E:32:1C:64:35:AE:1E:80:45:FA:34:F9:AB:24:55:00
X509v3 Authority Key Identifier:
keyid:A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:32:b6:2b:d0:8b:a1:9d:ae:86:e6:af:aa:06:eb:5e:27:eb:
fd:26:dc:ef:90:28:6c:c9:b1:ef:d7:51:1e:27:34:4e:20:60:
56:74:c0:76:0a:bf:cd:d9:b7:04:a7:06:8d:a7:04:64:b3:ad:
32:6a:0f:5d:09:91:75:fa:e1:1c:5b:ba:3c:cb:ae:15:54:45:
65:26:f5:68:fd:91:b6:75:b3:83:07:0f:d0:97:4d:d4:12:d0:
5d:95:98:a6:53:14:70:dd:47:37:1e:3e:7a:db:c3:a5:d0:cd:
bf:a9:3e:be:9c:03:09:6e:cb:c1:63:e5:10:ba:b1:76:8f:88:
24:8e:be:7e:30:11:26:c6:10:d2:8e:68:32:1f:ca:cc:96:62:
ad:82:bf:e3:22:6d:99:8f:14:29:f9:de:35:f1:71:cb:5c:b3:
5b:3f:c7:46:ec:cb:75:92:a7:04:7e:df:f9:dc:99:f8:bf:02:
8f:e2:20:0e:35:2e:63:c3:81:69:91:e0:56:1d:bf:e1:1d:76:
7f:66:d4:7e:40:2c:d2:05:d8:42:28:7a:5f:af:64:2b:41:c0:
8e:46:e8:0b:b3:89:14:66:e5:6a:4b:e9:07:4d:c7:4f:ee:48:
ae:f7:17:99:c0:cb:b1:7b:fe:de:91:e2:b5:46:db:56:83:98:
f9:96:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:24 2026 by rpki-client