Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: tNHcVSyibHns1XqwBhn3BFoP2dMyP43idAE2ucQa85Y=
Subject key identifier: 8D:2B:41:92:AF:E5:1A:79:FF:83:FB:6F:9F:24:44:99:66:5D:3F:9A
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019FAB63E047DD38102A96BCCD3D117C44C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 01:01:17 +0000
Manifest this update: Wed 29 Jul 2026 01:01:17 +0000
Manifest next update: Thu 30 Jul 2026 01:01:17 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: k78XDA+na26RbYL/WT097Ksu5v7xSnqgJHnqSHR2Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e0:47:dd:38:10:2a:96:bc:cd:3d:11:7c:44:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Jul 29 01:01:17 2026 GMT
Not After : Jul 30 01:01:17 2026 GMT
Subject: CN=8d2b4192afe51a79ff83fb6f9f244499665d3f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:ca:09:7e:b0:b9:bd:65:b6:2b:d1:01:79:
e2:6b:b9:d8:68:f6:a9:d4:d3:f2:3e:66:bb:99:4c:
ce:78:8a:81:71:e5:4c:68:9e:18:4f:4a:2a:fe:86:
86:0c:76:fc:ad:68:e6:a6:4c:6a:98:a4:c4:00:a5:
2a:45:31:24:58:74:41:33:9c:5f:0a:b4:f2:59:31:
71:39:ab:e5:3a:a9:13:46:f1:ea:c8:84:d1:a6:2b:
0b:bb:11:63:55:1f:6a:8b:40:e5:5a:2b:7b:3b:46:
c6:eb:6d:06:1e:5d:5d:b8:14:14:b2:fb:07:de:b4:
4b:49:40:15:0f:ca:9c:19:52:ee:31:72:12:61:dd:
4c:f4:e8:f5:95:1a:85:8e:9b:1a:01:bd:49:90:06:
e7:26:89:ab:8f:8d:b5:29:82:ca:5e:59:fd:cf:76:
a8:27:bd:9b:b1:04:e0:21:43:5a:2e:44:76:a6:e4:
7b:ba:cb:42:24:c5:4c:a3:05:1f:b2:c8:f0:f0:b7:
ff:01:c4:a4:87:8b:00:36:0a:23:8a:9b:68:ef:39:
d5:98:d3:12:1a:b2:aa:d1:13:0f:e6:b2:14:ed:9c:
0f:5b:72:42:f7:bb:28:19:d5:3e:03:4a:e7:00:58:
63:67:77:f1:5a:32:01:55:b0:4b:f6:cd:13:4d:8b:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:41:92:AF:E5:1A:79:FF:83:FB:6F:9F:24:44:99:66:5D:3F:9A
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0f:5f:29:ce:9f:80:02:84:90:07:10:da:d2:62:8f:56:16:
04:b3:d4:c6:5c:eb:0e:dc:65:a5:33:84:94:e5:9c:bd:df:ae:
1e:9a:e8:a1:d9:f5:ef:7e:20:2b:4c:59:80:b2:f6:46:6c:6b:
b8:0e:7d:7b:14:f4:68:cd:03:5a:d5:17:7a:d3:10:d5:3e:fd:
ce:77:91:65:35:78:aa:c1:b0:d9:65:56:d8:b1:ba:d3:90:4a:
b3:e1:c2:82:28:47:48:a5:72:07:df:33:2c:18:0d:6f:78:8c:
9b:f5:4a:e6:c9:e1:fa:ce:b0:8a:fd:54:eb:0b:a5:9f:9d:8d:
8b:89:88:46:e3:19:cd:2a:c4:2a:ef:68:c2:9b:6a:7f:68:c9:
ba:1e:d8:ab:91:1b:c8:91:c4:6a:ef:e5:23:06:01:18:2b:06:
92:1c:de:d2:e3:35:f5:fd:e6:89:6b:9a:95:6d:8e:fc:d8:14:
17:60:e1:54:25:4f:1d:a0:85:b8:78:7a:32:e5:68:20:39:f6:
a6:3e:c2:d0:2b:a6:e1:a8:28:03:22:06:28:6c:e2:ea:ca:8e:
fc:3d:91:bb:65:18:6a:9c:4a:ef:92:33:7e:9e:07:37:87:7b:
5e:2f:63:18:cd:05:01:28:a9:c7:aa:b0:aa:f5:a4:46:c3:f7:
f9:f0:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:42:44 2026 by rpki-client