
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: aTkE2xxHydx5cCoqdmC2Bk8kDS+3EzUW5hMJX/+RrsU=
Subject key identifier: 55:44:92:7A:DB:93:D5:D8:4C:A4:1A:AA:8F:1E:83:10:0A:2F:3E:76
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019F837A86C2ECF2EDB05AEA78BC7D0D065B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 07:01:12 +0000
Manifest this update: Tue 21 Jul 2026 07:01:12 +0000
Manifest next update: Wed 22 Jul 2026 07:01:12 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: ff2tXxM9KnU3ZQfRsTFCtMfuGyjOigpWf5D4ipGANoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:86:c2:ec:f2:ed:b0:5a:ea:78:bc:7d:0d:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Jul 21 07:01:12 2026 GMT
Not After : Jul 22 07:01:12 2026 GMT
Subject: CN=5544927adb93d5d84ca41aaa8f1e83100a2f3e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:15:c0:8c:31:90:ed:e8:78:9a:75:6f:9a:
ae:6f:52:6b:bd:90:8b:25:d9:72:a7:f7:bc:3c:1b:
b4:84:73:9a:2e:dc:73:97:9d:b3:9b:01:be:4c:1c:
b6:45:c5:dc:af:55:09:25:d5:02:ad:29:44:d8:12:
25:2e:14:5f:2c:33:7b:18:84:b0:63:b3:e9:3e:29:
b7:74:bc:ec:b6:38:5a:e5:a9:5d:5d:42:50:6d:69:
0d:12:91:f2:37:60:5e:e7:a9:4e:4c:a7:3e:4e:1e:
e2:eb:28:7f:3a:9d:11:3f:f8:db:68:92:d1:56:bc:
75:de:1e:33:ef:b3:f0:da:6b:f6:90:fa:48:3d:87:
01:e7:7a:4a:ee:1c:09:6f:3e:1c:6d:2b:05:05:72:
ec:1e:e1:51:82:17:0b:d7:d8:89:05:12:33:d0:74:
64:43:96:70:91:d9:74:fe:43:15:7b:24:41:6d:cf:
01:e3:27:ec:03:38:55:c9:ef:83:3a:32:4f:59:20:
27:72:54:e2:be:3f:37:ae:20:3c:c3:74:58:5b:de:
c5:aa:b4:26:92:13:90:30:d7:35:11:f6:4f:83:c0:
77:c0:75:c7:a0:84:96:0e:6a:6b:0a:66:55:3b:38:
e0:43:2f:19:49:9b:bf:24:55:e2:ab:c3:5a:dc:57:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:92:7A:DB:93:D5:D8:4C:A4:1A:AA:8F:1E:83:10:0A:2F:3E:76
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:64:8e:e9:04:89:dc:0e:c0:45:e0:5f:f8:77:90:1b:7e:54:
f2:09:04:bb:6b:f0:14:7f:c3:a9:3e:e8:ef:61:42:ba:67:8c:
5f:45:12:91:d4:95:a2:28:62:3f:3d:ba:2d:57:c4:ff:67:65:
90:a4:3a:2c:1e:b5:f4:19:04:3e:1a:5f:40:e8:bc:f0:44:ed:
8f:62:5e:0f:0f:35:77:c5:d3:1d:ff:83:81:75:22:4d:ad:49:
f0:1f:84:de:d0:5d:c5:5e:b7:d4:5c:23:21:0d:48:8e:a4:e3:
b5:f4:55:2e:1f:ca:12:26:53:1b:d0:5b:84:47:b1:28:7a:65:
2f:b4:18:1f:0b:eb:00:bd:c4:24:68:a1:d1:ae:fe:9e:f8:de:
dc:81:17:ee:23:c9:ba:76:72:17:8f:d8:10:1b:ee:b9:ca:5e:
73:a7:a0:60:3d:0b:bd:f4:a4:27:51:99:3b:ef:c0:77:64:9a:
38:72:a5:b8:13:1c:7a:e4:75:c8:78:f3:d5:93:c9:f3:fe:97:
c2:89:e4:a0:9f:a1:91:45:a3:6c:d5:2f:dc:c7:91:bc:87:40:
f4:ac:fa:4d:06:df:2f:f3:49:ed:8d:e5:52:c6:4b:d8:a1:5f:
3e:91:6f:4a:ca:d9:e1:74:34:fd:95:cb:a5:b2:e3:a1:bf:85:
0b:b8:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:56:23 2026 by rpki-client