Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: vLA2EAqW3hmwafk2toTnGzEDTyF9L2IAHmV0wTyDA2Q=
Subject key identifier: F6:F2:67:27:A8:8E:57:BA:74:2D:7D:D0:20:C9:4A:49:C5:FE:2B:E2
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019FA9073228F5C2333729E911A3280FCD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 18F7
Signing time: Tue 28 Jul 2026 14:00:48 +0000
Manifest this update: Tue 28 Jul 2026 14:00:48 +0000
Manifest next update: Wed 29 Jul 2026 14:00:48 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: zlyCiZJw2/ZayVwjU/Ny2Yl/POUdEaOpV9ogra+1F/w=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:32:28:f5:c2:33:37:29:e9:11:a3:28:0f:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Jul 28 14:00:48 2026 GMT
Not After : Jul 29 14:00:48 2026 GMT
Subject: CN=f6f26727a88e57ba742d7dd020c94a49c5fe2be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:b5:98:9d:4f:c5:49:49:89:f3:db:7e:5e:
5c:5e:7b:cf:35:a5:9b:cf:33:68:ba:d1:9b:a8:9c:
74:1e:cd:cf:32:3b:92:b5:6d:40:fa:c4:be:47:46:
3b:1c:e3:bb:de:25:27:3b:51:83:4e:32:82:5a:92:
d0:6e:1d:99:53:84:e7:5b:81:79:3d:de:a4:50:21:
29:9e:3a:90:fb:f2:e4:31:82:04:37:12:11:6e:b0:
e7:12:7a:73:bb:42:a2:93:01:e5:9b:8a:40:fe:a4:
2d:95:25:41:b8:b1:39:04:fb:fb:9d:d6:c9:ec:5e:
e9:6c:3c:c9:55:27:b9:26:06:86:05:70:0a:2c:26:
6c:1e:8f:86:52:5b:42:b2:d4:1a:d1:e4:cc:22:5b:
d8:b1:96:a1:e4:52:c4:d2:20:9a:7e:76:59:ea:f4:
be:b8:dd:5d:3a:cb:70:64:45:3d:20:4e:96:87:a1:
f1:cc:8a:65:b7:60:e4:64:cc:3a:03:83:b6:f4:df:
14:d2:43:c0:53:3a:59:37:d3:99:2f:01:74:7b:b5:
56:d7:ad:83:4a:4e:f9:87:4c:3a:9a:81:32:eb:48:
6d:9a:2a:7d:fa:41:4d:1c:58:6a:d8:b7:aa:c5:1e:
26:f8:3f:c5:e2:e0:9d:70:52:2f:37:4e:f8:9e:bd:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:67:27:A8:8E:57:BA:74:2D:7D:D0:20:C9:4A:49:C5:FE:2B:E2
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f7:39:2e:83:f2:de:ef:0c:59:de:67:51:19:cb:eb:dc:ab:
4b:43:6f:f0:d7:a8:98:e0:62:72:51:59:e0:c2:7d:4c:8d:c1:
2c:34:55:ad:65:94:d0:54:70:12:f8:2f:ea:21:d6:0d:c3:fb:
9f:b8:5d:41:d7:3c:f7:ab:b0:c2:65:01:d3:c8:e7:8c:0e:bb:
93:ad:af:fb:c3:36:06:38:a0:eb:b1:a0:a3:cc:2f:a1:da:35:
20:77:9a:b3:3d:b8:0e:f9:23:f1:cc:ea:28:6f:7c:9d:a5:19:
c8:53:85:27:4d:88:94:92:72:77:a5:b3:92:02:c8:bd:97:4e:
e4:38:a5:ee:d1:b2:b6:91:e9:45:7b:f2:55:20:0a:04:8a:a7:
e9:cd:b7:47:bf:24:e4:79:3b:41:eb:2a:48:81:7b:31:42:98:
5f:82:0a:c6:e6:f0:d7:66:fb:b0:d5:9e:90:2f:b1:d8:18:c8:
1f:1c:2a:f8:2c:64:5f:35:04:a4:1c:22:40:3c:ab:a0:46:c8:
88:14:8e:ae:0a:ea:36:27:73:52:dd:58:d0:aa:89:05:45:a9:
15:72:90:55:a4:19:62:c4:99:76:14:fb:c2:84:60:28:c5:6c:
5f:2b:82:9c:dd:8f:e9:6d:0c:50:9f:79:be:51:28:04:73:f3:
9c:91:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:26 2026 by rpki-client