Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: Ei9Zko90DUkRv1WgK/bWXV1+Pjl20m5FcJDYf75GRZ4=
Subject key identifier: FE:50:02:C6:FB:E0:06:4B:FD:B9:F3:AD:82:0A:3D:D3:27:26:78:72
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019FADF70B68F8A239547BBE54B13CFA4792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 13:01:16 +0000
Manifest this update: Wed 29 Jul 2026 13:01:16 +0000
Manifest next update: Thu 30 Jul 2026 13:01:16 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: nJLicFCYR37tJiSqzt8kHEkWtsJ1WNFYR4Pt2L9IHZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:0b:68:f8:a2:39:54:7b:be:54:b1:3c:fa:47:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Jul 29 13:01:16 2026 GMT
Not After : Jul 30 13:01:16 2026 GMT
Subject: CN=fe5002c6fbe0064bfdb9f3ad820a3dd327267872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:d0:70:fc:74:fc:0e:94:81:a7:20:c3:cb:
30:e3:63:e3:97:db:ff:49:ac:a1:b6:15:d7:ba:8e:
31:ad:66:1b:07:10:1f:71:64:85:56:43:ad:06:ff:
e3:25:b9:bb:b2:6e:f0:26:0b:f2:1c:f5:78:25:42:
a5:04:1d:34:69:3d:66:45:6d:18:98:6e:51:6c:cb:
7c:45:70:37:31:05:7a:83:9a:a7:7b:bb:b0:c6:65:
3e:9e:3e:10:9b:d9:2c:89:ea:34:63:66:2a:71:c8:
76:c6:8b:d2:0b:bc:b6:30:85:83:65:99:fc:a5:e7:
6d:94:c0:e0:42:f8:9c:eb:71:9e:f3:24:70:23:7d:
e8:9c:d6:02:af:05:7b:96:da:4d:4a:cd:e7:5c:e9:
bc:69:13:90:ad:63:41:ee:ba:98:89:9f:cd:e5:42:
52:a4:f0:0a:01:df:f0:30:fc:d9:2f:1d:e0:34:ee:
3c:6c:f1:72:4f:89:f0:6d:0e:e8:21:70:95:71:6d:
ee:bf:93:eb:e2:80:98:2f:96:a8:34:3e:fa:3a:bd:
d9:2f:e4:2d:38:06:9d:67:95:9c:7e:62:7a:41:17:
3e:a3:4f:62:fb:99:28:92:c3:df:93:c3:3b:ae:da:
fc:1c:49:ce:22:54:77:8f:99:46:e6:f8:f8:c6:a5:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:02:C6:FB:E0:06:4B:FD:B9:F3:AD:82:0A:3D:D3:27:26:78:72
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6a:9c:b6:70:72:36:86:c3:2a:e9:21:d0:92:b5:54:0b:5e:
d9:e0:dd:58:ee:ed:7f:0b:4b:a3:3c:5c:06:82:dc:84:4a:a1:
f3:d5:0d:c7:18:8f:dc:be:13:96:ff:1d:67:ae:0e:84:b4:85:
9f:18:90:c3:bb:5f:ad:be:84:91:b3:65:34:f2:20:92:c9:f4:
c3:2d:4e:b2:bc:34:e9:74:29:90:72:af:cc:b5:00:af:40:34:
e6:e8:d9:27:7e:74:f1:a7:83:8c:9d:82:1b:48:10:76:6d:45:
2c:47:23:3d:08:56:ea:ab:06:1b:7b:0c:5b:10:85:3f:af:f5:
fe:1f:98:88:4e:08:22:9c:1d:5f:8d:02:e9:b6:7b:36:13:93:
d5:d2:11:dd:70:7f:e7:60:cc:37:d3:3e:3a:4f:bc:83:09:60:
86:38:05:e8:eb:c0:3e:d3:cd:8c:86:fd:61:1e:a8:2a:cd:36:
78:af:43:d0:de:3d:c5:7c:9d:62:87:59:eb:12:99:f2:fe:4d:
0c:d8:80:02:56:f3:4b:89:2d:cf:37:31:17:24:1c:85:2d:c1:
e2:04:87:a4:0a:33:bb:13:66:f0:83:67:ba:be:5e:03:4b:e1:
5f:e2:6c:aa:3b:39:9f:63:c4:e1:ba:dd:60:18:0e:cf:e8:32:
1a:2e:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:36 2026 by rpki-client