Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: T4qFUq9DE1rmARkqLlfkA8Gp8CktzGowUhWeuT2PTs0=
Subject key identifier: 06:7F:55:B9:56:07:10:AF:E5:A5:74:32:EB:1D:4A:1D:9C:64:D2:F6
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019FAC08A732B06B3730D2842A68E422F225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 19DD
Signing time: Wed 29 Jul 2026 04:01:15 +0000
Manifest this update: Wed 29 Jul 2026 04:01:15 +0000
Manifest next update: Thu 30 Jul 2026 04:01:15 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: BRf1u2tI0MdQq-fmpym4aodlAHc.roa (hash: EgaKCAtRV2lGFKlk2kU+aO26h/pUeqeqSUfRHYRzlNU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: tQLQ4joek9qjZC6g2w4vYbGe9NQbyJ7pxzux2qp0OYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:a7:32:b0:6b:37:30:d2:84:2a:68:e4:22:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jul 29 04:01:15 2026 GMT
Not After : Jul 30 04:01:15 2026 GMT
Subject: CN=067f55b9560710afe5a57432eb1d4a1d9c64d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:0e:e8:2b:fb:ad:62:9e:91:b9:ef:c0:2c:
e3:5d:5c:0f:b9:4b:2f:8c:da:5e:3b:42:e8:ac:ee:
65:9f:dc:92:da:4b:42:77:e1:9a:f5:6d:f5:c4:4c:
04:ca:8d:1b:05:96:86:fa:8c:d1:e9:03:58:37:76:
c6:dd:88:8a:22:4f:3e:32:87:63:9c:04:2f:81:56:
aa:fa:5e:3e:ad:c5:b9:06:0c:4e:5a:e2:48:17:f8:
74:df:3c:73:9e:69:a0:2d:05:cf:e6:7f:81:d2:4c:
d9:b0:db:75:1e:fa:fc:a0:da:11:76:e4:1f:87:c9:
ff:22:e6:ca:a3:42:e5:90:d0:f7:22:ed:30:d5:22:
53:94:8f:6d:a4:64:a2:1b:5e:59:df:40:32:9c:6c:
ed:76:2c:3e:3a:f4:1c:c7:9f:e1:a9:d1:36:f7:4c:
40:1a:3f:52:6f:44:35:19:49:f7:07:13:2a:26:b7:
22:4b:42:46:f4:f1:b8:91:46:f2:98:6e:af:ad:8f:
85:a4:fd:68:f7:4e:c6:8d:e8:30:f0:72:a3:40:6d:
66:ca:19:4d:ea:a4:45:3a:5c:0d:e8:32:36:55:f5:
7b:e3:57:c2:f4:3b:4b:e4:f5:4b:65:e2:f6:3e:65:
60:d2:15:11:77:32:f4:22:f1:85:f4:83:97:b2:f2:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7F:55:B9:56:07:10:AF:E5:A5:74:32:EB:1D:4A:1D:9C:64:D2:F6
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:8d:30:a3:86:02:3e:da:ab:74:a0:77:7b:70:c7:f6:18:
eb:d4:4c:00:97:f9:8d:52:4a:7e:c5:8f:69:70:d8:5b:bb:c3:
42:7d:a5:70:a2:e9:94:57:00:72:8d:3a:dd:9d:cc:a8:b6:f6:
28:8b:f5:31:21:f9:35:ab:e5:5d:14:46:cc:f5:ec:d3:94:97:
2e:a3:a0:f0:94:a5:6c:bd:24:a6:6a:d1:59:7e:09:3f:8f:c8:
4d:77:09:6b:26:87:d1:5c:4e:b9:83:12:9f:a8:16:3c:51:80:
2f:39:e2:35:6a:07:4e:f9:1b:d5:e0:92:6c:e6:70:4a:26:05:
ed:97:1d:5c:3c:c3:16:e5:15:b9:8c:0e:e4:21:77:f9:b8:a9:
03:6b:f6:b0:42:1a:29:2d:cb:dd:0d:3b:15:ac:7a:0b:95:29:
f4:4e:7a:5b:f8:88:0d:3f:ae:b3:43:31:71:14:d1:f1:f0:b8:
c5:c4:14:8f:cd:e3:2e:fb:6e:79:c3:29:01:a5:10:88:44:eb:
ac:ca:68:10:09:c8:6d:50:e3:40:29:9b:97:a3:de:a0:46:f9:
52:1f:00:bb:c1:17:57:3d:09:7a:8c:fc:64:3b:55:28:04:8b:
5f:51:35:25:9a:a0:12:38:f6:e7:b4:b4:dc:55:ec:ad:08:1f:
72:01:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:40 2026 by rpki-client