Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: SEFDNDhZL4GZvxn204aitVg9YViow5e8LF1+tn5JfGQ=
Subject key identifier: 68:D0:4E:BA:7F:09:5E:F3:55:71:8E:C9:D5:86:81:FA:30:C8:B5:DE
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019FACE47766B7D310632831885031463993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 08:01:21 +0000
Manifest this update: Wed 29 Jul 2026 08:01:21 +0000
Manifest next update: Thu 30 Jul 2026 08:01:21 +0000
Files and hashes: 1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: LqqAlq9zvK9VYkZPd2uKxj03vaU85iDv9M4dbWDF4xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:77:66:b7:d3:10:63:28:31:88:50:31:46:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Jul 29 08:01:21 2026 GMT
Not After : Jul 30 08:01:21 2026 GMT
Subject: CN=68d04eba7f095ef355718ec9d58681fa30c8b5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:5b:f5:91:be:b1:fa:4a:ce:99:95:c3:ff:
a0:4c:df:5c:3f:df:af:e8:eb:68:db:36:cb:03:eb:
ab:27:4d:53:d5:cd:44:79:1c:06:12:50:34:18:f1:
e5:7c:ef:74:35:59:29:6f:ee:cd:07:9d:fa:a0:47:
b1:50:d1:9a:8f:3d:ae:d0:c0:6c:2c:74:2a:9f:7f:
ca:5c:b0:c5:d4:8f:9c:52:28:49:de:ef:f1:44:51:
78:85:94:43:d2:95:43:55:ad:44:5c:18:71:13:24:
c0:e8:c2:4f:90:41:4e:38:19:92:d2:f1:87:80:66:
e6:07:7c:dd:f6:39:ce:ee:f5:b6:84:5c:17:39:7b:
54:da:fb:25:f7:f6:fa:d8:cc:4b:61:3d:65:4b:d9:
96:b4:48:f3:5a:df:89:e2:2e:d8:ca:49:65:6c:66:
1f:89:41:b3:71:82:64:9b:05:63:20:ec:8e:31:72:
9f:c5:47:f8:21:c7:4b:b1:81:42:60:43:de:d9:ba:
d4:df:05:df:96:ef:23:bb:f0:21:8f:82:49:29:92:
30:25:78:e1:8d:76:c5:45:b5:d3:5a:7e:fb:8d:54:
02:d9:0b:7e:02:09:a9:af:53:df:7a:fb:22:a9:10:
83:94:19:3c:8a:fe:a1:59:81:8f:ef:df:36:cb:01:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:4E:BA:7F:09:5E:F3:55:71:8E:C9:D5:86:81:FA:30:C8:B5:DE
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6c:ad:f3:84:e4:8c:0a:b0:fa:b9:5e:2e:c4:85:71:90:bf:
17:14:d3:64:85:60:2d:fa:e2:48:13:59:85:bc:73:66:7b:36:
4c:10:7b:9b:9f:9f:b0:0d:bb:70:b1:c5:bd:dd:b5:81:2e:fd:
7c:c4:fe:f0:28:59:a2:e4:a4:f7:05:f3:ce:d6:4a:be:04:53:
fc:63:3f:b2:ec:d0:48:1c:0b:10:56:cf:7b:d3:46:31:24:39:
d0:03:cd:af:d8:e2:bb:37:a9:fa:4e:08:82:d5:61:a1:7b:d1:
4a:cd:cf:99:06:48:4f:8f:1f:89:27:5a:0a:27:db:bf:4f:2b:
48:d2:ef:79:1e:da:d2:19:50:8e:b0:9c:09:30:78:9e:be:bd:
96:2e:de:89:b1:69:0d:ec:be:e4:7e:d4:c8:28:7f:f0:77:63:
4a:23:c6:a2:15:41:a6:29:cf:17:45:53:1b:29:42:73:1a:ef:
c8:2b:66:b4:a8:59:77:56:33:df:c9:4f:c2:64:31:cb:36:be:
be:2c:d4:8e:b3:90:90:fb:56:b6:59:31:e5:80:6d:0a:48:5f:
c3:b9:61:62:ed:75:f8:8c:50:a1:75:ab:d7:f6:7a:62:a3:f1:
9c:07:2b:6d:e1:e6:20:58:24:c5:d6:e4:d1:60:ec:d2:da:0a:
64:db:23:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5Hdmt9MQYygxiFAxRjmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4
YWE5YzEwHhcNMjYwNzI5MDgwMTIxWhcNMjYwNzMwMDgwMTIxWjAzMTEwLwYDVQQD
Eyg2OGQwNGViYTdmMDk1ZWYzNTU3MThlYzlkNTg2ODFmYTMwYzhiNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kxb9ZG+sfpKzpmVw/+gTN9cP9+v
6Oto2zbLA+urJ01T1c1EeRwGElA0GPHlfO90NVkpb+7NB536oEexUNGajz2u0MBs
LHQqn3/KXLDF1I+cUihJ3u/xRFF4hZRD0pVDVa1EXBhxEyTA6MJPkEFOOBmS0vGH
gGbmB3zd9jnO7vW2hFwXOXtU2vsl9/b62MxLYT1lS9mWtEjzWt+J4i7YykllbGYf
iUGzcYJkmwVjIOyOMXKfxUf4IcdLsYFCYEPe2brU3wXflu8ju/Ahj4JJKZIwJXjh
jXbFRbXTWn77jVQC2Qt+Agmpr1PfevsiqRCDlBk8iv6hWYGP7982ywFWYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjQTrp/CV7zVXGOydWGgfowyLXeMB8GA1UdIwQY
MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt
YTllYTIwNTcwNDJiLzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi
LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2yt84Tk
jAqw+rleLsSFcZC/FxTTZIVgLfriSBNZhbxzZns2TBB7m5+fsA27cLHFvd21gS79
fMT+8ChZouSk9wXzztZKvgRT/GM/suzQSBwLEFbPe9NGMSQ50APNr9jiuzep+k4I
gtVhoXvRSs3PmQZIT48fiSdaCifbv08rSNLveR7a0hlQjrCcCTB4nr69li7eibFp
Dey+5H7UyCh/8HdjSiPGohVBpinPF0VTGylCcxrvyCtmtKhZd1Yz38lPwmQxyza+
vizUjrOQkPtWtlkx5YBtCkhfw7lhYu11+IxQoXWr1/Z6YqPxnAcrbeHmIFgkxdbk
0WDs0toKZNsjWw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:22:10 2026 by rpki-client