
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: 0gEQkKc5iNzG5hR6qg+exQy5T1b9w8ftutnkaPLDR5M=
Subject key identifier: 69:FE:89:98:D7:28:3A:B3:42:F3:E8:6E:24:36:43:CC:EF:B0:A6:2C
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019FACE4522459F6F0176A0381408A1B1B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 0544
Signing time: Wed 29 Jul 2026 08:01:11 +0000
Manifest this update: Wed 29 Jul 2026 08:01:11 +0000
Manifest next update: Thu 30 Jul 2026 08:01:11 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: 2qgy6oPBQUmM2Ph3IoGffsJtoKOz+r9qVRssDW9igJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:52:24:59:f6:f0:17:6a:03:81:40:8a:1b:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Jul 29 08:01:11 2026 GMT
Not After : Jul 30 08:01:11 2026 GMT
Subject: CN=69fe8998d7283ab342f3e86e243643ccefb0a62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:bc:fe:bf:73:cc:b5:e7:c3:47:5c:af:3d:
1e:9a:9b:35:38:50:ff:06:78:1c:0a:78:83:60:aa:
5a:e7:ad:d7:f4:83:97:2e:52:2c:ce:0f:11:82:6b:
59:e9:d2:e8:eb:97:b8:9b:e8:93:18:f8:5e:00:ce:
e8:9a:02:97:d6:19:eb:a3:13:eb:9f:9f:a8:ad:95:
24:66:ca:3c:d7:88:f9:06:6c:35:66:62:47:48:7a:
70:20:68:a7:bd:2c:0e:a4:65:15:00:df:a5:1d:89:
05:81:17:c6:f0:f4:86:54:59:cd:83:f6:3c:ac:00:
a1:71:2d:2d:51:2e:db:bf:eb:21:56:57:d3:bd:8f:
db:b5:58:23:47:f5:44:13:08:86:ff:33:3e:3c:8b:
37:ce:db:16:b9:57:1e:ca:f7:58:73:19:52:74:84:
62:33:8d:17:13:f8:b0:31:fe:5d:dc:66:12:2e:3f:
0c:61:04:e4:47:53:04:e6:3f:8c:91:aa:91:ac:1a:
d5:2b:5e:7e:ab:0c:3e:b4:82:a4:54:cf:d4:15:9d:
3d:7c:c9:f7:48:c2:fb:98:17:df:0e:de:6a:56:c0:
f5:f8:be:24:42:54:23:2a:24:42:2a:73:fd:25:e4:
77:8a:83:9e:75:2e:4a:a4:29:39:ac:39:6c:a5:2a:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:89:98:D7:28:3A:B3:42:F3:E8:6E:24:36:43:CC:EF:B0:A6:2C
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:66:e0:ba:59:39:e5:88:f1:10:85:f0:e0:d5:98:89:b5:
57:ff:8a:54:56:41:ec:75:cb:ea:32:22:99:b7:4f:27:2b:e0:
75:50:21:9e:3a:18:8b:56:55:45:07:b5:96:38:98:d4:28:84:
35:33:39:75:68:d2:24:9c:7a:c4:eb:3a:dc:0c:c0:df:84:91:
29:de:be:4a:c1:b7:97:9a:b1:cf:14:3e:01:93:87:24:c7:d2:
3e:df:fb:5f:bb:42:70:75:23:40:67:da:2e:97:de:25:25:51:
b9:a9:74:5d:04:30:a5:47:a1:28:05:39:85:31:cf:dd:a4:05:
86:f9:b1:67:02:da:3f:4b:ca:16:86:14:b8:ea:1b:79:c3:5e:
f8:6c:bf:a7:e2:4b:0a:7b:4c:ad:f9:79:16:ba:2c:dc:9a:e3:
18:59:16:2b:9e:90:cc:1e:43:da:f2:a6:80:7e:8a:c9:6c:a6:
67:15:e2:54:cf:56:a6:7c:f8:a6:88:a9:ec:77:9f:ab:a7:49:
c7:58:7f:36:c6:88:ef:5c:d2:10:df:a4:09:e3:e6:d0:52:bc:
f6:c5:48:26:df:72:01:51:6e:6c:d7:4b:42:6b:6d:a4:6e:f7:
73:b3:c9:77:92:2a:4c:78:56:67:ff:c8:9d:4c:e8:91:31:77:
78:13:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:47 2026 by rpki-client