Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: pX65yEoAfciH00C8GzjeS0vafLETP+kQfp6aIpvlHWw=
Subject key identifier: 30:3D:D2:9E:ED:85:66:AB:83:82:F8:DF:A1:61:F8:5E:87:5D:CC:F4
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 019FABD197B019DB2DB755F2B85CF79AC3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 0114
Signing time: Wed 29 Jul 2026 03:01:07 +0000
Manifest this update: Wed 29 Jul 2026 03:01:07 +0000
Manifest next update: Thu 30 Jul 2026 03:01:07 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: g+aluTP/xJsP+iaQEU3EblkUbzrYvqyS4rIDhGlfskQ=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:97:b0:19:db:2d:b7:55:f2:b8:5c:f7:9a:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Jul 29 03:01:07 2026 GMT
Not After : Jul 30 03:01:07 2026 GMT
Subject: CN=303dd29eed8566ab8382f8dfa161f85e875dccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:91:e2:64:f9:a0:68:24:a1:1e:cc:31:74:
ef:a8:18:e6:0d:34:f2:8a:98:01:b4:55:6a:a7:4a:
35:14:5c:1d:13:df:9e:a3:0b:7b:5f:50:66:32:50:
c0:1b:9e:ac:ea:f8:4c:00:3c:3b:93:30:de:66:10:
d6:33:fb:da:aa:40:bb:1a:99:6c:6c:41:c5:b4:3f:
2a:60:85:a1:13:c0:c0:a8:2e:e9:e8:42:e4:19:6c:
52:b9:e5:97:0b:ae:d9:39:3e:36:d0:ec:44:f8:6c:
52:b6:5b:09:34:4a:0e:12:03:e0:a5:94:a9:54:16:
96:39:e2:78:77:13:62:7b:66:8f:80:90:78:d6:9e:
ae:aa:3a:7c:9f:35:a9:6b:87:4d:af:cc:b9:08:88:
35:78:c7:84:60:b3:1c:1d:db:2f:e2:61:b7:bb:f7:
eb:ea:0c:bf:2c:8d:38:f8:fb:9a:06:8a:95:e0:c3:
0a:06:a5:80:4a:08:89:de:37:5e:33:41:2e:01:c3:
21:71:d1:db:90:fb:86:d0:64:f3:61:42:23:4a:df:
92:06:d5:cc:9b:05:f6:01:3a:8b:81:39:c7:62:66:
fc:fd:aa:10:56:75:ee:e8:36:26:27:70:f4:66:08:
c8:60:62:3d:e1:e4:b8:5a:9b:f1:8b:cf:04:f4:c3:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:D2:9E:ED:85:66:AB:83:82:F8:DF:A1:61:F8:5E:87:5D:CC:F4
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:57:75:72:19:de:50:4e:1b:f9:43:fc:f3:15:b2:87:5f:
54:56:47:d8:f3:75:b6:00:7d:33:87:eb:95:b1:35:bf:39:9a:
74:b6:c9:09:a5:6c:6d:59:4d:0c:26:65:af:4d:db:83:74:eb:
5c:99:a8:d0:0e:8d:38:5b:6b:d4:89:0b:a4:04:7b:24:99:25:
e3:9b:66:99:ae:30:f2:92:aa:23:e7:48:5b:5f:31:2d:26:d7:
94:c7:0a:d4:29:05:f2:d2:1c:9f:ff:13:70:fa:e9:45:9f:f3:
a0:9c:8c:95:11:06:00:02:7f:a3:7d:14:2d:4f:a9:00:29:1d:
71:75:59:c4:81:bf:54:30:68:97:b4:22:cb:f8:f4:5c:ba:9d:
12:c6:09:f5:40:92:b0:56:2c:7f:44:99:73:d3:ea:e3:01:35:
cc:c7:15:f6:e3:7b:1d:14:33:d3:d8:57:53:9a:8e:81:b2:0e:
1b:c9:98:be:0c:dd:ba:fe:8d:0b:02:f2:4b:1c:5e:64:21:c5:
23:88:09:9b:b4:c4:6d:9f:a7:1d:86:1c:3f:1b:70:c1:cc:70:
ab:b9:ea:cb:ea:4a:7a:0b:6c:61:af:35:9f:3c:c2:1d:47:f3:
31:ed:e3:0d:76:3e:f6:ae:65:2a:c8:5c:af:a5:ba:50:ca:06:
c5:d9:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:43 2026 by rpki-client