Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: HtV2sNrunitIMvEwwRkyGn3gLH6t81ZLRenFJRko93M=
Subject key identifier: 9D:73:05:40:30:95:10:B5:3D:01:8F:40:D9:EF:66:F1:59:37:15:80
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 019FAA1A8891CD4506FD3816D19442FA0B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 01FD
Signing time: Tue 28 Jul 2026 19:01:33 +0000
Manifest this update: Tue 28 Jul 2026 19:01:33 +0000
Manifest next update: Wed 29 Jul 2026 19:01:33 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: nUWNi1f8iMn8w9aj8nS/S2MBCquHVrshgsyg6Gc6vic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:88:91:cd:45:06:fd:38:16:d1:94:42:fa:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Jul 28 19:01:33 2026 GMT
Not After : Jul 29 19:01:33 2026 GMT
Subject: CN=9d730540309510b53d018f40d9ef66f159371580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:ad:f1:a8:6e:4f:8a:08:c1:35:cb:d5:6c:
57:37:a0:e1:f2:1b:01:dc:41:30:6a:63:70:62:be:
87:5f:bf:0e:dd:be:44:e0:cb:55:c0:af:32:31:e3:
6b:ae:db:0b:d4:68:2c:42:63:4f:29:33:e2:77:6a:
e2:a0:cf:43:d9:b1:5f:35:77:d3:66:10:55:99:7f:
e0:ff:1b:b7:cb:6c:ba:4b:0f:d1:2a:df:91:0a:26:
ed:af:87:39:c9:68:2e:b9:8d:20:cc:ef:23:28:56:
0d:49:86:2b:d6:d6:73:65:0f:8c:92:44:88:e8:03:
92:39:d1:e1:96:74:8e:d0:35:29:00:55:0d:3f:7f:
5c:96:8a:c8:68:2c:ec:08:f2:af:91:da:46:b6:fd:
40:2b:89:cc:bb:8c:06:bd:15:c9:2f:c0:f8:95:af:
6a:7b:1b:01:a3:8f:8f:1d:07:0e:31:2e:93:49:f1:
81:b5:2e:72:2d:a2:bf:dc:9b:87:6f:a3:0a:86:45:
41:bb:a0:95:2f:a7:60:78:ed:09:6d:2b:d5:dc:ba:
67:fc:d1:1a:ea:dc:94:65:bb:c3:79:a6:a2:74:dd:
69:59:f2:62:d8:cc:7c:07:93:4c:49:bc:64:7a:3b:
32:30:08:b8:67:84:53:7a:41:08:6b:fc:00:79:90:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:73:05:40:30:95:10:B5:3D:01:8F:40:D9:EF:66:F1:59:37:15:80
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:78:59:3d:d4:5a:07:ba:3c:a1:0b:5f:d1:9e:b6:f3:38:13:
09:15:70:f7:00:29:60:ee:61:be:8f:43:f6:1b:27:7c:46:cf:
de:fa:18:35:c9:86:82:22:57:22:e6:33:84:c9:cd:87:73:12:
1e:40:3e:76:25:bb:2a:06:db:86:4a:91:97:7e:08:ef:40:ed:
1e:e7:e3:05:98:b7:02:97:f5:9d:cc:2b:48:a5:b3:37:27:6b:
bd:f7:44:5c:5c:7d:50:64:0d:08:5c:b6:5d:34:57:49:96:06:
c3:d7:b5:f7:1a:93:a9:a5:72:cf:cb:3c:ef:67:4a:e3:8f:40:
b0:ff:62:37:19:fa:e1:8b:6d:41:b6:4c:6d:aa:1c:49:f3:97:
d1:3f:e9:32:25:3d:68:b0:c3:de:8b:b1:02:db:69:16:3c:73:
bc:64:97:b5:2b:7f:e3:68:18:31:d9:e2:f6:22:e8:b8:23:71:
2a:3c:9a:8f:29:76:7c:4b:52:48:0b:ed:70:6d:89:74:ae:cc:
01:f8:ad:1f:ac:ee:46:f2:e9:2f:4b:1a:40:29:4d:36:24:bc:
70:08:51:b0:ca:10:7b:60:f8:af:a3:6b:06:72:64:05:fa:c6:
de:bb:81:b2:8a:16:49:20:98:01:e4:94:d9:ab:27:d1:d2:cb:
6d:1a:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:06 2026 by rpki-client