Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: HKvzHeZPof+GYLI8waw/ZfmvSpA1tlbSLkx67sKj9KE=
Subject key identifier: EA:C4:97:1B:79:62:99:D2:49:19:66:77:7A:72:8C:58:78:FA:BB:CC
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019FA7BD306E7AE2DB11882945C80B836160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 08:00:21 +0000
Manifest this update: Tue 28 Jul 2026 08:00:21 +0000
Manifest next update: Wed 29 Jul 2026 08:00:21 +0000
Files and hashes: 1: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
2: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: qSApc4tZmHruAXBgJFLlLohDWj3g8XDEMCwRz4/OK7M=)
3: rk_qIg4M0T6VeSZIH6qI5IJsveA.asa (hash: LxPs6qFGOS3d/DfhY0ScdJWhdWn8Ibcrre8xQ10KueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:30:6e:7a:e2:db:11:88:29:45:c8:0b:83:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jul 28 08:00:21 2026 GMT
Not After : Jul 29 08:00:21 2026 GMT
Subject: CN=eac4971b796299d2491966777a728c5878fabbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:1c:b2:af:53:82:3d:86:d1:b1:a3:ee:a3:
61:2a:67:bb:8a:63:1b:2c:b5:a0:88:91:13:44:c3:
62:21:69:ad:2b:2f:2d:d0:31:a6:da:33:b8:86:a3:
56:5a:85:e2:eb:37:70:22:a0:0e:90:5e:1e:45:76:
06:73:1a:ed:67:17:ea:ec:28:cc:b9:a5:61:25:16:
1d:60:d6:5a:fc:61:c3:9c:53:9c:dc:6e:40:fe:06:
3f:b4:92:36:97:a0:6e:5f:1d:6f:30:a4:8e:35:17:
1d:12:3e:26:94:78:f3:e2:62:23:a3:3f:73:c5:f4:
e0:d2:d4:87:75:46:71:b9:c3:e1:93:2c:2a:c9:b2:
85:a8:5e:18:11:6a:d3:50:4e:d9:21:f6:0c:1f:aa:
ea:a1:2c:3a:36:c5:af:44:3c:c0:20:c7:05:1a:08:
79:2f:59:0f:04:48:5b:6f:51:45:8e:51:02:c7:ab:
04:2c:d6:b9:eb:36:c3:2d:ea:3e:f1:89:10:a6:2f:
33:df:f7:85:da:e4:63:95:65:46:06:55:7f:6f:4d:
26:89:9d:87:36:44:fd:b0:2b:8d:9e:44:49:04:68:
bd:8e:01:1a:f9:d3:ce:c7:1d:7e:95:a2:f3:57:37:
47:a3:6b:38:5d:10:8e:a9:1c:a9:7b:52:46:6c:1d:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C4:97:1B:79:62:99:D2:49:19:66:77:7A:72:8C:58:78:FA:BB:CC
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f1:ff:d2:e2:04:51:6e:ed:b9:e0:e5:12:a5:90:67:86:40:
93:86:b5:1d:c0:96:af:92:4c:b0:a2:93:e0:76:40:0d:65:c2:
9c:79:32:5a:13:bc:e2:88:c5:ea:b8:c0:b6:ba:4b:e0:84:e9:
af:8a:49:bc:09:fb:85:46:d9:6e:fc:a4:7e:d7:86:33:f4:1f:
9b:02:24:7f:9a:01:7a:91:21:24:e8:9e:90:c5:b7:b6:6f:a8:
20:04:14:b7:30:1f:98:67:8e:89:2e:0e:65:7b:ff:dc:21:08:
80:87:3a:b0:53:ca:20:f9:33:07:e3:90:c9:7e:5c:7b:3c:d9:
0d:8d:03:54:5b:a9:1b:3c:44:77:ea:87:fd:39:97:aa:6e:9e:
d9:c1:12:c6:75:92:70:35:a6:25:05:5b:9d:5c:21:56:70:2c:
4b:4c:6b:5e:9d:ab:85:d3:51:10:57:d9:4a:8e:20:a6:73:33:
d5:16:6d:7b:55:99:13:ed:13:fa:b4:11:22:6a:cd:4a:fb:f8:
1a:f5:81:41:f8:ca:66:a0:57:61:fc:63:48:0e:b7:ae:b6:0e:
57:a0:10:7a:61:a5:e0:c0:6f:2a:2c:7a:ad:62:92:ea:51:91:
d5:8b:3d:f6:9f:50:90:71:45:66:7c:48:63:ed:e2:13:c3:09:
7c:37:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:17 2026 by rpki-client