
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: PnI784TdCA6Jaxmb1XQA9Ad2tC6tuUqkXkiHzPzzOSI=
Subject key identifier: 85:BB:ED:E0:86:7A:63:2D:B9:84:8F:AE:73:34:F6:5F:09:09:56:E2
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019FAA507E4FAA97BB0D279F4E965BE09DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0876
Signing time: Tue 28 Jul 2026 20:00:29 +0000
Manifest this update: Tue 28 Jul 2026 20:00:29 +0000
Manifest next update: Wed 29 Jul 2026 20:00:29 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (hash: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: uauamSSD+cZwrwSHOYlkkGiEA8Y89zTIVEsLoGK5lHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7e:4f:aa:97:bb:0d:27:9f:4e:96:5b:e0:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jul 28 20:00:29 2026 GMT
Not After : Jul 29 20:00:29 2026 GMT
Subject: CN=85bbede0867a632db9848fae7334f65f090956e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:10:93:73:e5:20:37:1e:d8:b1:5f:81:0e:
78:30:8e:d4:b0:00:c2:27:8b:6e:f6:9b:87:48:08:
64:11:3f:e7:a3:a6:cb:d2:09:44:3c:4a:2a:2c:e1:
52:d8:0f:1d:0a:73:17:bf:24:18:0c:48:ab:d0:bd:
b9:0c:86:68:0c:a9:21:c1:bb:de:62:b0:55:bf:89:
7b:40:d2:b3:f3:6e:6e:1d:16:74:86:46:68:c5:be:
1f:e7:ab:72:f5:e7:52:41:a6:41:a9:36:40:dc:e2:
b4:dc:97:9e:3c:4c:93:c3:a4:d6:a1:a3:89:34:90:
df:c2:4b:30:1f:97:af:f4:54:e5:2e:19:9f:51:a3:
0d:dd:dc:f3:82:ea:7e:87:0c:57:77:50:19:43:58:
3d:48:04:ec:8b:76:6c:6e:22:5c:c9:1f:43:02:2c:
cf:70:6d:54:d8:f9:ec:5e:99:a7:78:1f:8b:37:78:
df:76:fd:3d:2c:a0:4e:b2:cc:47:62:09:f5:f1:2c:
e1:a7:bd:ba:d5:d9:99:5e:a1:a0:9b:5d:a2:4c:ad:
31:c6:7c:09:5c:be:11:da:1f:c5:f3:d6:a3:ae:b5:
45:8b:b9:00:aa:b6:7a:9c:a0:a7:62:79:32:8e:ed:
45:a6:6f:b9:60:4c:a3:94:d8:1d:22:72:a0:a3:d6:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:ED:E0:86:7A:63:2D:B9:84:8F:AE:73:34:F6:5F:09:09:56:E2
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2e:6c:2e:54:75:93:2d:95:fa:3b:4e:71:bf:4a:a7:58:af:
f7:a5:8e:81:e2:4d:e0:e8:7e:b7:26:9e:b7:1c:ed:25:cb:3b:
a5:75:c0:9a:81:fc:96:78:e8:9c:3a:d9:e6:e9:af:f5:bd:67:
b9:8e:6a:4c:5e:25:1a:c0:17:f7:8c:30:e9:c3:d7:90:ac:22:
54:6a:17:98:7d:32:18:48:99:a9:f4:3c:77:dc:e6:33:a0:21:
2c:4e:fa:e9:d9:85:80:ba:e0:2d:05:d6:62:13:3f:e6:b8:f0:
66:90:eb:7c:94:b5:3b:21:00:c8:e9:e7:a0:af:70:28:b5:d7:
b6:3b:79:e0:aa:a8:dc:4e:e5:b2:b5:55:2d:c2:2e:21:40:f7:
f3:76:e6:ff:24:a5:c8:e4:94:26:95:86:4d:f5:3c:d2:36:f3:
eb:2f:94:76:1f:46:6e:02:f8:e7:54:a5:c9:dc:27:c0:e2:e3:
cd:d4:a4:30:38:1e:2e:6f:75:74:40:a8:3b:ec:6c:dc:52:54:
59:31:62:cc:ba:04:6e:12:98:67:b2:fc:e2:fb:2c:ca:1a:3e:
2a:11:87:df:49:1f:20:c3:52:a3:81:d0:da:30:68:c6:34:20:
d0:94:2a:65:9a:5a:58:ac:7c:ff:4e:0f:6f:df:0e:80:53:da:
fc:fe:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:22 2026 by rpki-client