Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: MdciVIcyjHL8mpPrUz4oPTNXtphY1Z2Cw2SR8ZyQnmk=
Subject key identifier: FB:BA:45:0D:D3:BD:E1:D0:BB:14:5B:26:80:23:C5:EC:81:40:A4:DC
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019FAA879FB62E49271F237A9D77F710C07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 11B1
Signing time: Tue 28 Jul 2026 21:00:42 +0000
Manifest this update: Tue 28 Jul 2026 21:00:42 +0000
Manifest next update: Wed 29 Jul 2026 21:00:42 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: 7JNAS+nqcmUm2J0xVkq3kVsEIiyd9NNUJ/Gc8wqcxCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9f:b6:2e:49:27:1f:23:7a:9d:77:f7:10:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jul 28 21:00:42 2026 GMT
Not After : Jul 29 21:00:42 2026 GMT
Subject: CN=fbba450dd3bde1d0bb145b268023c5ec8140a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:41:7d:68:3b:57:3e:8e:b6:d8:ef:31:f2:
5d:32:3b:aa:c9:76:f9:d4:95:b9:2b:ee:26:48:f6:
b0:89:7e:2d:a7:50:6a:85:d8:d3:1c:ac:09:09:4e:
a4:fc:1f:98:35:8e:5d:50:01:26:fc:1e:54:9f:32:
c6:f1:40:6c:96:10:de:6d:2e:06:34:d6:a7:9c:31:
98:ff:dc:0b:e6:66:51:b0:6e:9b:1e:f8:63:c7:8b:
76:8c:7a:ac:1f:12:74:9a:12:c4:90:00:e1:c7:78:
77:50:8d:a6:cf:3b:be:db:9c:18:7f:1b:a6:74:40:
23:14:0f:2c:94:64:fa:22:a0:91:f7:a9:22:a4:83:
56:54:d0:19:41:e4:b3:88:61:37:f4:df:91:f5:97:
c3:49:cd:97:5d:27:c6:d5:72:bc:d3:e4:d0:b1:2f:
28:ee:c6:9b:6a:b9:41:f3:83:e8:fd:fb:fa:42:b5:
67:f1:c0:33:d8:37:5a:f9:53:78:6d:fe:0a:05:c2:
67:41:5c:fd:27:be:81:0d:34:ba:50:35:8a:00:13:
2f:56:47:30:f9:68:23:d5:28:9c:fa:fe:10:38:87:
09:d5:45:18:aa:cd:fe:27:f7:85:78:7a:29:2f:d1:
dd:17:91:43:dd:9f:f5:66:87:72:aa:13:b7:5d:89:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:45:0D:D3:BD:E1:D0:BB:14:5B:26:80:23:C5:EC:81:40:A4:DC
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:89:02:4e:08:57:4a:8a:dd:6b:dd:55:d1:73:68:0d:a3:08:
fd:5a:92:cb:8e:25:50:79:81:1e:5b:bd:b8:8d:19:73:db:51:
5a:30:43:f1:cd:b8:e0:58:dd:1f:2d:3f:60:cb:4d:50:bf:11:
c0:db:77:74:6e:7e:fa:2d:aa:f9:1a:63:8f:fe:40:53:84:1c:
a2:06:03:54:eb:3b:8f:ee:ca:f0:0c:31:dd:37:9a:f4:e6:31:
74:7d:ae:49:6a:2a:3a:7e:5e:90:37:37:11:dd:c6:4b:cf:63:
aa:cc:5a:4f:dc:90:05:d6:77:b9:1e:86:e6:a0:62:39:ee:d3:
0e:33:93:50:90:07:97:43:51:45:36:44:d9:20:c2:b2:64:88:
c3:59:f3:2b:e6:b6:93:7f:8b:c7:22:5a:7b:9b:31:51:a6:24:
7d:19:6e:39:0e:82:83:2b:a5:74:b0:d8:31:e7:a7:a6:7e:d3:
0d:80:85:a8:d1:46:67:56:a6:4e:a9:92:b8:ff:25:8c:58:8d:
22:b9:f9:f3:8a:bf:0d:ec:f7:cd:bd:aa:d9:e7:4b:62:de:a3:
ac:f3:fc:37:28:0b:53:88:1a:c4:07:f4:ba:26:8b:1c:ce:e1:
66:47:a7:2e:13:bb:3f:ac:61:a6:27:68:14:8a:33:4c:43:25:
cb:d8:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:32 2026 by rpki-client