Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
File: oUaknFXDAyf4rSIKTpm53G5j4Tw.mft (raw, json)
Hash identifier: Oep8tMdcNXSgyj3FQnkfUxNSsubqa+ztkQUBHUAj9/s=
Subject key identifier: 01:A7:B9:AA:7B:1E:FE:E3:CC:35:C0:64:A7:2C:70:D6:E5:7D:D2:EE
Authority key identifier: A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
Certificate issuer: /CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Certificate serial: 019FAC7684D7D3BE98CCCF3DFF52C18CC5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
Manifest number: 24
Signing time: Wed 29 Jul 2026 06:01:16 +0000
Manifest this update: Wed 29 Jul 2026 06:01:16 +0000
Manifest next update: Thu 30 Jul 2026 06:01:16 +0000
Files and hashes: 1: aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa (hash: WP2Dcdi3GBMOmI0NK/vj8JV6PzwkSo14hHtbf3df0KQ=)
2: oUaknFXDAyf4rSIKTpm53G5j4Tw.crl (hash: rSrOP9gyBKfO+eWW4NmvLFbnhRWfYaxCkblU+SMJXr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:84:d7:d3:be:98:cc:cf:3d:ff:52:c1:8c:c5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Validity
Not Before: Jul 29 06:01:16 2026 GMT
Not After : Jul 30 06:01:16 2026 GMT
Subject: CN=01a7b9aa7b1efee3cc35c064a72c70d6e57dd2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:1a:cd:1f:c8:03:5b:78:0b:39:6d:13:53:
59:44:58:7d:cc:36:ef:6b:7c:db:5a:82:1c:f8:13:
9b:cc:e7:74:0c:cf:91:c1:cf:89:e0:e5:ef:86:83:
5b:d1:3f:70:e4:af:22:79:4e:b5:cb:76:5f:a2:1a:
e6:a1:cc:d9:91:a8:66:77:c0:99:bb:2c:fe:0f:86:
a4:2e:6a:79:67:83:46:60:7a:db:0e:0e:21:4c:9b:
4d:be:b5:d5:89:3e:2d:6e:ea:21:dd:d8:ee:9f:0b:
04:f9:c1:d9:fc:21:0a:3c:af:dd:e8:8b:7c:11:9d:
e1:0d:9a:fd:23:28:30:4e:7c:6d:ca:69:58:e2:33:
21:5b:fc:b8:c8:c1:36:8c:da:d1:64:d3:15:e5:bc:
19:15:bc:cb:1e:f0:23:08:28:44:b9:68:d8:e2:2a:
4f:72:5e:31:33:38:b1:0e:db:3b:77:ee:27:e8:bb:
23:de:a8:41:8d:83:3b:39:ff:4b:ec:34:37:ad:f4:
e1:01:75:34:fa:35:0b:20:84:4c:93:9f:1d:20:ca:
f4:62:1c:96:d5:09:42:3f:0d:bd:d5:3e:cc:a2:b6:
ac:74:28:dc:36:c9:e3:bb:4b:35:1f:81:21:2b:d0:
c6:75:f9:63:2f:78:8c:0b:1e:85:e5:16:b5:e8:48:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:B9:AA:7B:1E:FE:E3:CC:35:C0:64:A7:2C:70:D6:E5:7D:D2:EE
X509v3 Authority Key Identifier:
keyid:A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:e6:3d:a2:f5:6f:43:80:2a:4e:17:f4:67:c7:2d:de:91:
2d:4d:45:bb:07:e4:d7:7f:57:52:a2:75:fe:cf:65:0f:9c:3a:
83:3a:d0:f0:d7:22:13:7b:46:f0:7d:68:3d:a3:0b:43:54:41:
02:e1:c6:fc:c9:24:28:49:29:e4:00:d2:c9:54:a2:a0:c6:10:
c6:a9:84:f4:ca:b7:b7:db:7c:39:e1:86:7d:6d:d2:dd:1a:26:
ac:1e:77:3e:af:bc:06:78:8c:b0:c9:dd:49:04:ee:89:61:47:
d4:55:0e:06:d9:f9:f3:e7:db:8a:17:b6:f9:02:f8:08:7b:69:
b2:65:cd:8a:6f:51:08:6e:9d:c0:5c:66:d7:1d:da:09:8d:0b:
1b:96:31:d2:0e:3c:01:98:6f:22:71:9d:67:55:25:4b:2c:e9:
d2:61:f5:c5:8e:65:4d:d4:ae:56:1c:06:60:c6:90:48:4a:bb:
49:00:2f:a6:94:f8:07:b3:0b:5c:af:da:3c:99:b7:f8:48:b4:
a4:a3:ea:c2:d3:21:6b:82:2b:a0:7d:6f:2a:2f:1b:24:6b:de:
3a:ed:70:25:8d:b3:64:64:25:5c:df:06:59:a2:1f:10:fb:56:
b6:cd:ed:5d:4a:15:a0:4b:36:32:69:22:17:00:35:fd:22:18:
cc:fb:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:36:54 2026 by rpki-client