Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: HCGirTUtcV7UOLVd2xHFkiDaKhMLe76UVUe5nD7YWcI=
Subject key identifier: 75:9C:6A:49:AB:69:11:D2:51:50:AB:1C:28:98:AA:36:C0:3E:6B:3F
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 019F86B255721D7BD728CE52682CB1146823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 19BE
Signing time: Tue 21 Jul 2026 22:01:01 +0000
Manifest this update: Tue 21 Jul 2026 22:01:01 +0000
Manifest next update: Wed 22 Jul 2026 22:01:01 +0000
Files and hashes: 1: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (hash: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: wWuMcbXvv0a2tLrY1tEFZKAc67xXojttzLNJxZuzgsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:55:72:1d:7b:d7:28:ce:52:68:2c:b1:14:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Jul 21 22:01:01 2026 GMT
Not After : Jul 22 22:01:01 2026 GMT
Subject: CN=759c6a49ab6911d25150ab1c2898aa36c03e6b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:e7:37:03:e8:e3:c9:09:5f:a2:cb:7a:dc:
0a:71:12:2b:52:10:9e:e3:1c:a1:ba:e4:10:c8:b0:
7e:59:67:7a:0c:0e:4f:fa:35:6f:9a:ee:fa:de:01:
95:1d:6b:8c:48:b2:aa:59:db:d6:91:72:8d:03:a6:
b9:b2:4b:ea:8f:b7:69:9a:c9:ef:af:ba:f8:20:a2:
f6:71:3b:15:7a:65:92:9a:f4:16:bf:e0:77:02:fb:
46:2c:a8:03:94:49:8e:34:fb:e6:43:0a:33:15:00:
0d:b9:0d:be:76:96:fa:80:85:57:7e:70:d5:f1:bf:
0f:42:1e:7b:48:45:53:ab:ed:f3:e5:83:96:97:a2:
19:9b:91:8e:cb:39:94:13:80:f6:54:78:52:b5:9a:
2d:53:c7:84:2f:f4:89:d1:43:15:95:ad:bf:68:20:
c8:22:f3:48:51:99:bc:55:44:f4:9d:fd:b4:e3:70:
74:02:d6:12:ab:64:0b:72:d8:96:1f:6b:de:3d:8b:
45:b2:c6:fa:fa:35:f6:a7:f5:7c:d9:76:b5:ba:2c:
13:b8:9c:73:91:48:4a:c4:d2:19:8f:ec:bb:fe:6c:
15:cc:2b:9d:d4:57:7f:27:e3:4f:15:f0:02:d3:d1:
dd:39:ba:10:62:6f:cf:4c:82:0d:d2:49:37:1c:d6:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:6A:49:AB:69:11:D2:51:50:AB:1C:28:98:AA:36:C0:3E:6B:3F
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:cb:11:8d:50:02:b9:80:ef:8b:9c:47:7e:27:5a:09:4e:
19:8a:18:b8:8e:24:ed:2a:ee:2c:7e:2c:00:ca:bc:87:74:4c:
59:94:34:24:89:5f:08:cd:2b:d5:16:ba:87:07:8e:f8:de:c5:
22:16:33:70:3d:b7:af:59:8b:b7:54:45:e2:14:14:4c:26:4d:
32:12:a5:16:31:c7:cf:16:f1:41:ef:86:3e:fe:4c:65:c6:a5:
d3:21:71:bc:c7:df:bd:05:68:ce:ff:08:81:d2:65:2f:81:bd:
84:ce:92:5b:49:c8:5f:98:d4:cc:af:78:86:65:ea:16:8b:4d:
dc:13:84:fb:7c:15:ee:b8:09:b1:99:60:e5:b1:9f:00:d6:0f:
39:8a:c6:e6:82:5c:76:8a:a4:e3:fe:26:57:33:8b:ae:33:45:
36:10:b5:77:49:81:e7:31:dd:5f:20:66:a9:b5:e7:3c:48:ea:
87:fe:5a:54:80:78:5b:71:c8:ad:63:56:b9:f5:24:25:63:80:
00:69:33:4c:8a:bf:78:07:3a:2b:ef:a9:f0:f0:ae:da:bf:8e:
1f:dc:20:c0:00:11:62:e9:53:47:84:e1:9b:a0:e5:2e:5d:c1:
d0:0c:28:d0:cf:f8:aa:b0:2a:4e:8d:d3:51:e1:d7:73:63:05:
34:f9:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:55 2026 by rpki-client