Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: fzRciO1g8zv/4+KoddmtFnFzzFeExJH7FM5mmQhZAB4=
Subject key identifier: B1:6C:1E:6E:C9:E1:1A:45:B8:77:A5:C3:2D:B8:70:F1:4E:69:3D:D4
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 019FAABE5872A00B633914FB6E8AE5BC09E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 22:00:28 +0000
Manifest this update: Tue 28 Jul 2026 22:00:28 +0000
Manifest next update: Wed 29 Jul 2026 22:00:28 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa (hash: JS+2KcEt2B3UHtm7B1l/JkKD38qf54IF2F3MmmklzBA=)
3: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: UpmeKKYMFMM9jL1c1XHvWLlh9ox8rOMU1RvM804Ru/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:58:72:a0:0b:63:39:14:fb:6e:8a:e5:bc:09:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Jul 28 22:00:28 2026 GMT
Not After : Jul 29 22:00:28 2026 GMT
Subject: CN=b16c1e6ec9e11a45b877a5c32db870f14e693dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:7a:8d:d0:44:1d:88:e2:fb:ab:4d:0f:15:
a4:45:c6:2d:8e:a9:af:ab:bb:f3:88:f1:48:5e:4e:
e4:5e:e3:e9:f3:66:f9:04:7a:f7:9c:a2:d9:b0:b1:
ed:eb:b9:f3:9f:76:fb:a1:32:f8:85:75:8a:5c:a8:
ab:f0:ca:73:cd:43:11:e5:2b:b7:9e:dd:69:84:97:
59:f8:75:9f:80:a9:4d:32:a1:8f:cb:cf:0e:71:38:
2a:ed:3b:a8:60:3f:70:92:f3:58:f7:fc:08:ef:8a:
9c:3b:8f:59:d5:ca:55:af:a2:cd:88:0e:95:70:e9:
35:8e:b5:68:cd:98:03:fc:ab:5e:f2:2f:64:19:8c:
89:ff:15:c0:b6:c2:c9:e8:36:dd:a6:72:d4:20:a4:
43:34:e8:b9:2d:ce:a4:bf:45:09:c3:57:3d:69:38:
c5:89:e4:57:ee:59:a1:36:ec:28:e3:5e:9d:3b:aa:
ae:63:ae:2c:26:11:99:01:98:0a:95:92:11:73:9b:
19:e4:16:6f:e5:f5:5f:5a:f6:df:3e:d1:b2:97:0b:
ce:03:40:45:6f:0c:48:c8:4d:f8:d0:d6:eb:30:eb:
ef:f8:2b:b7:0b:44:63:ea:54:3a:52:25:c4:51:f8:
45:88:a8:28:79:21:86:37:78:4b:e2:17:e2:61:69:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6C:1E:6E:C9:E1:1A:45:B8:77:A5:C3:2D:B8:70:F1:4E:69:3D:D4
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:58:86:b1:7e:4e:f7:ff:1f:e5:04:7b:3a:6b:0c:a4:87:
44:fa:be:ea:1e:9c:f5:89:24:d7:d4:d3:6e:ee:e9:a2:9e:87:
65:e8:c9:3d:cc:f2:a8:d7:ca:a9:42:c6:25:82:53:b4:0a:e7:
ab:3f:ef:4d:30:f6:cc:b1:3f:99:2e:ff:bb:93:14:a3:0f:31:
28:e3:85:41:31:04:2a:a1:e4:56:1f:66:7f:74:4b:2b:2d:23:
08:cb:fb:57:c9:6a:c7:b1:32:64:62:ab:ee:22:0c:7a:7d:7d:
7d:a2:96:9a:f3:3d:ea:f3:47:82:42:82:cf:28:70:a5:98:a8:
60:cd:03:6f:7d:83:7f:0b:84:a4:58:03:53:16:e1:6f:33:b1:
31:dc:5a:c4:3f:e6:01:6d:e6:2c:c1:05:05:65:30:05:e2:99:
67:2a:fe:a5:24:42:b4:24:3c:9f:d1:d5:36:72:ec:07:80:75:
57:be:bb:af:cd:dd:c9:f7:c7:e8:ff:42:b7:3c:56:05:34:23:
74:57:50:f4:03:5d:33:84:bc:f6:fa:26:22:1e:ef:6b:2b:25:
06:29:d5:e0:9f:41:cd:7b:4e:ab:25:f0:28:04:9e:ae:85:1c:
98:64:c5:a5:f1:65:13:1e:e6:7f:b0:3c:d3:13:a3:b0:ad:50:
c0:41:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:53 2026 by rpki-client