Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: fak6rNaPbG1p18nw9rBrZe9Ix752GLaMQxhfUZNFnXU=
Subject key identifier: 10:E7:01:CF:AE:34:09:92:9D:CF:8B:27:00:F9:9A:BB:06:C5:B1:40
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019F837A279C57AE67074CED865D1368D24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0F26
Signing time: Tue 21 Jul 2026 07:00:48 +0000
Manifest this update: Tue 21 Jul 2026 07:00:48 +0000
Manifest next update: Wed 22 Jul 2026 07:00:48 +0000
Files and hashes: 1: BTzuCE44rDIH7Pz-rptrI7qeNcc.roa (hash: V5yrPjJe+cVyMOCOK0ABvwS7gMjw/S3V3X3G/kpSiFA=)
2: YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa (hash: HUVAVch0tpB2Eafp8Rpcw9ARFWadeMwT0krWeIBPrQo=)
3: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: WhQ9kJy5S7LOJVg65oMFVDVCKBZqbIam1kbEAZg8ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:27:9c:57:ae:67:07:4c:ed:86:5d:13:68:d2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jul 21 07:00:48 2026 GMT
Not After : Jul 22 07:00:48 2026 GMT
Subject: CN=10e701cfae3409929dcf8b2700f99abb06c5b140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:02:d5:bd:37:d4:d1:f3:9c:b4:e2:a8:3e:
6e:95:8a:21:a1:0c:b6:3f:d1:b6:e1:e8:00:e3:17:
60:c2:a6:c0:2c:97:87:b5:ad:9e:a9:a7:3f:a7:58:
0e:51:a5:ed:2f:f1:49:96:ca:60:ea:33:0a:6f:10:
a9:fa:48:4f:8e:4b:b7:c2:c5:8a:32:20:27:21:c1:
97:63:c2:e3:ae:cc:d4:19:6e:64:54:e0:2d:05:ff:
15:eb:31:1b:6b:f2:79:98:bd:90:92:c5:27:50:47:
ce:69:b3:08:59:88:0e:d2:d7:c8:42:27:f1:02:28:
20:31:10:93:62:50:7c:1e:43:c7:85:61:9b:dd:94:
97:68:6f:de:c4:41:14:07:21:6e:05:17:c6:31:b9:
ca:c6:fc:90:7e:2b:80:e0:97:02:a5:c8:1c:49:76:
6a:c7:33:23:c2:4f:85:ce:2c:28:3a:54:27:12:2a:
65:67:70:3d:13:d2:8d:39:cb:b1:9a:f4:2d:e3:75:
0b:d3:31:68:91:07:c9:12:9d:b0:7e:31:8c:5c:bc:
41:6c:8f:85:00:3d:1a:cd:3f:d1:0e:fb:75:f3:d0:
5c:1b:9a:0c:72:d4:3b:2f:5d:4a:22:56:1b:c5:7f:
92:1f:10:ab:74:8a:25:0e:3c:74:21:14:7e:07:12:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:01:CF:AE:34:09:92:9D:CF:8B:27:00:F9:9A:BB:06:C5:B1:40
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:65:38:06:96:cd:fd:83:2d:f4:6f:fd:76:83:9f:db:ed:
cb:e1:d9:45:50:27:9c:7e:b8:0b:e1:07:d4:3e:9f:95:58:1c:
47:6c:d6:87:f5:ec:ec:04:98:9d:aa:89:b9:28:ac:ff:99:21:
46:b4:1a:79:46:05:3d:d8:ba:67:65:81:a4:8f:ff:c2:1d:c4:
cc:53:ba:4f:34:d1:46:3c:ad:c0:f2:78:66:17:61:35:28:76:
7f:73:1f:ef:9d:b7:58:8a:09:81:15:8b:60:16:56:d6:43:df:
43:22:da:55:e2:e1:99:21:9b:c6:d0:9b:96:02:6e:df:39:50:
3b:f3:df:fa:fc:53:ab:77:8f:08:f5:18:64:10:c6:ca:cf:77:
8f:3d:bb:90:8d:8a:ef:8d:e7:50:a4:32:72:3b:bd:ac:70:3e:
6a:59:34:33:b9:a1:55:cf:5a:b5:d3:af:e8:aa:77:7a:0e:1e:
10:89:b3:d3:bb:3a:00:cd:52:75:cc:27:aa:70:61:8b:26:6a:
d8:34:0a:10:57:db:55:40:2a:34:af:08:8a:01:06:58:e6:bd:
a9:f1:3f:8b:11:9b:ba:90:95:f1:8b:11:82:f5:ff:5b:f8:06:
23:19:54:f2:63:69:d8:48:02:4d:cb:af:a8:fd:fc:53:dd:65:
29:a6:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:33:38 2026 by rpki-client