Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: hBclx0LNgIYfIJ5ILi9KrzljRMWXAO9p+MkImVhnVXQ=
Subject key identifier: A0:CF:F7:F1:D2:19:EE:8E:4E:28:AA:75:1F:20:0F:B7:57:5B:D9:C4
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 019F8AFC71521D035B4D22149946184581C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 19C1
Signing time: Wed 22 Jul 2026 18:00:27 +0000
Manifest this update: Wed 22 Jul 2026 18:00:27 +0000
Manifest next update: Thu 23 Jul 2026 18:00:27 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: TSa/KelywqCiMVBNxgpDP1Ke0OtnuNC+4bl6ROfVflg=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:fc:71:52:1d:03:5b:4d:22:14:99:46:18:45:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Jul 22 18:00:27 2026 GMT
Not After : Jul 23 18:00:27 2026 GMT
Subject: CN=a0cff7f1d219ee8e4e28aa751f200fb7575bd9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:8e:ce:1a:c3:da:b5:4a:fc:91:a8:7f:02:
33:16:4c:59:96:f1:ad:46:e4:df:2f:0a:57:57:68:
bd:7e:5d:48:06:80:b3:63:ed:fa:c3:2e:a4:c9:46:
10:be:37:3f:15:cc:60:3f:29:4f:27:d7:72:38:c3:
6d:6a:29:49:7a:72:16:fc:c2:47:00:37:a6:46:87:
9f:e3:ea:2b:95:5c:03:c8:ff:73:ba:39:c0:ac:d6:
f0:05:38:52:6a:40:4f:d1:13:d3:5c:5b:04:4e:98:
c1:31:c0:a1:8e:5f:37:9b:ed:33:d4:9e:2d:9f:c4:
9d:03:9a:16:80:a9:a4:3b:be:fb:71:a5:e6:3a:e6:
2c:92:55:6f:38:11:d0:4f:e8:69:3a:0c:ac:82:83:
99:f3:0f:25:84:f8:1c:a2:15:9c:43:00:82:80:f0:
8e:61:18:79:f0:23:e5:1c:7b:35:e5:94:0c:fb:22:
7a:64:30:98:e3:07:43:e6:6a:a0:9f:9b:83:99:90:
a1:9d:c4:38:ac:13:2e:29:b6:8d:e7:22:09:bf:57:
6b:f9:18:d4:01:a4:37:31:91:2a:55:92:2f:e1:4f:
fb:f7:db:b5:e4:ea:72:27:d9:d4:05:8a:30:3c:8f:
f7:5b:ab:c6:00:31:1b:6d:97:9b:0e:d8:e6:09:96:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CF:F7:F1:D2:19:EE:8E:4E:28:AA:75:1F:20:0F:B7:57:5B:D9:C4
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:31:dc:23:b9:95:16:11:0c:a0:0a:98:46:ca:75:aa:b4:
01:38:b2:ab:3e:10:a7:c4:2a:ba:c7:14:28:1a:0c:7c:61:43:
30:2f:48:78:93:48:40:29:2a:53:2c:0d:da:f6:ef:17:17:10:
bd:30:1d:07:97:69:f1:77:5e:10:34:94:ef:40:b4:65:2f:a2:
9a:04:fb:ed:2b:1d:c8:e6:c8:ab:26:79:c8:f3:51:9d:55:45:
0f:9b:10:63:16:00:10:07:28:45:39:77:54:21:b9:cb:02:95:
db:11:ab:12:36:4f:d8:e9:c0:0f:f8:a1:c2:60:bb:4c:8a:79:
39:5f:d3:f3:ee:c9:d7:58:c1:4d:4b:2f:74:a4:5c:9f:b2:2b:
44:c3:9a:ff:b9:c5:fd:ef:00:7f:e2:5f:80:07:1f:3e:9c:da:
a0:81:66:4f:fe:83:97:25:b3:4a:ff:14:da:23:1f:81:4d:71:
65:f8:19:fe:cf:da:55:43:f6:e4:56:51:fc:9d:89:85:bd:f4:
73:0b:82:9d:ef:a4:69:88:9a:24:b2:44:3d:af:ae:bd:fa:25:
25:e5:f4:0b:77:3b:4a:fb:fc:34:fa:5b:81:25:34:f2:4a:52:
7d:a0:fd:7c:b0:ac:58:eb:e5:7f:54:36:a3:bc:a7:06:9a:22:
ef:b0:8d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+K/HFSHQNbTSIUmUYYRYHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWMwMzAwMzY3NTZhYjhjZGFjOTIyYjFhZjIzN2JjZTEz
NjdjZTAwHhcNMjYwNzIyMTgwMDI3WhcNMjYwNzIzMTgwMDI3WjAzMTEwLwYDVQQD
EyhhMGNmZjdmMWQyMTllZThlNGUyOGFhNzUxZjIwMGZiNzU3NWJkOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXKOzhrD2rVK/JGofwIzFkxZlvGt
RuTfLwpXV2i9fl1IBoCzY+36wy6kyUYQvjc/FcxgPylPJ9dyOMNtailJenIW/MJH
ADemRoef4+orlVwDyP9zujnArNbwBThSakBP0RPTXFsETpjBMcChjl83m+0z1J4t
n8SdA5oWgKmkO777caXmOuYsklVvOBHQT+hpOgysgoOZ8w8lhPgcohWcQwCCgPCO
YRh58CPlHHs15ZQM+yJ6ZDCY4wdD5mqgn5uDmZChncQ4rBMuKbaN5yIJv1dr+RjU
AaQ3MZEqVZIv4U/799u15OpyJ9nUBYowPI/3W6vGADEbbZebDtjmCZZu0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDP9/HSGe6OTiiqdR8gD7dXW9nEMB8GA1UdIwQY
MBaAFDicAwA2dWq4zaySKxryN7zhNnzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMGZjYTAtMDRiMi00M2IwLWJkMmMt
NjcxN2I5YmFiYjM0LzEvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMGZjYTAtMDRiMi00M2IwLWJkMmMtNjcxN2I5YmFiYjM0
LzEvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOYx3CO5
lRYRDKAKmEbKdaq0ATiyqz4Qp8QquscUKBoMfGFDMC9IeJNIQCkqUywN2vbvFxcQ
vTAdB5dp8XdeEDSU70C0ZS+imgT77SsdyObIqyZ5yPNRnVVFD5sQYxYAEAcoRTl3
VCG5ywKV2xGrEjZP2OnAD/ihwmC7TIp5OV/T8+7J11jBTUsvdKRcn7IrRMOa/7nF
/e8Af+JfgAcfPpzaoIFmT/6DlyWzSv8U2iMfgU1xZfgZ/s/aVUP25FZR/J2Jhb30
cwuCne+kaYiaJLJEPa+uvfolJeX0C3c7Svv8NPpbgSU08kpSfaD9fLCsWOvlf1Q2
o7ynBpoi77CNqg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 22:34:29 2026 by rpki-client