Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
File: Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft (raw, json)
Hash identifier: ctf3WvZ9jNBEQ/lNYtxl8QVU2k7YjeptuosBDgCYy9g=
Subject key identifier: 4A:CD:D3:BB:B3:3B:D4:B2:A5:2D:22:56:1B:3F:0F:65:60:85:38:85
Authority key identifier: 39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
Certificate issuer: /CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Certificate serial: 019FA4BD2E6D1857D930E0673081C8AA60B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:01:29 +0000
Manifest this update: Mon 27 Jul 2026 18:01:29 +0000
Manifest next update: Tue 28 Jul 2026 18:01:29 +0000
Files and hashes: 1: JLnk5C74MEI_NjoEcm6PQfIFO6E.roa (hash: mjm8zSzLPcPug8icRhADhhaesrGC//QbH1Zmg7AdhiY=)
2: Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl (hash: Mb8qIrC/LEVOWOU6wkTvFVIcZQN4qYaIUZ2JmELxFJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bd:2e:6d:18:57:d9:30:e0:67:30:81:c8:aa:60:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Validity
Not Before: Jul 27 18:01:29 2026 GMT
Not After : Jul 28 18:01:29 2026 GMT
Subject: CN=4acdd3bbb33bd4b2a52d22561b3f0f6560853885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:27:36:dc:55:1f:43:a6:e9:60:e4:2d:7f:
25:95:7e:ca:61:a0:9e:06:d5:62:82:e1:4b:6f:78:
fc:5c:eb:8c:1c:65:07:9f:98:8a:a1:d9:db:d4:53:
90:8b:a6:e5:91:ed:65:83:f2:ab:86:6c:b3:d4:9c:
f3:d4:03:c7:b2:55:9e:e4:84:bd:29:40:4a:f2:64:
8e:ee:c8:e0:fc:61:15:1a:ea:c5:18:6a:02:8b:5d:
0b:f8:67:14:fd:4d:fc:47:77:21:33:10:d7:cd:28:
6c:39:e3:7f:07:37:94:a3:af:e2:95:70:a7:2e:c0:
64:32:a4:c8:48:25:c7:f3:02:66:65:78:06:09:21:
0b:69:23:d1:b6:39:aa:3c:32:92:e5:29:a8:ff:6f:
12:1a:52:a6:76:0d:72:a3:b1:ed:ba:52:e7:43:6e:
55:3c:6a:c2:1e:24:96:15:7a:c3:af:82:4e:48:3e:
89:40:57:22:ee:a8:f6:b5:61:c0:12:30:1c:73:7b:
61:e6:d8:5e:e1:c3:04:8d:db:bb:2c:fb:d2:99:e8:
7a:38:bd:6d:09:a6:d6:a0:2d:91:ee:cc:bc:f1:f1:
ec:e9:73:eb:ed:d0:cc:82:df:ca:66:2f:09:70:9f:
75:c4:a5:ec:a4:c6:4e:fe:b2:1d:08:c7:3e:a0:ca:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:D3:BB:B3:3B:D4:B2:A5:2D:22:56:1B:3F:0F:65:60:85:38:85
X509v3 Authority Key Identifier:
keyid:39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:93:aa:c4:0b:8a:b3:17:1e:3c:a1:3d:e9:2d:4c:3d:30:
13:3f:5d:d8:f7:2c:59:58:67:25:15:53:af:0d:c8:a6:98:2e:
c7:5b:24:e9:bd:14:43:56:74:c4:ef:0f:f5:90:db:64:c4:f7:
16:ad:f7:dc:65:35:3b:17:70:c2:73:73:72:ae:c1:1e:f3:e6:
2b:57:87:d3:11:f7:df:3b:68:5b:bb:96:f0:be:6d:85:22:11:
cf:69:a9:ac:e5:bd:61:37:11:1d:96:87:12:65:6f:20:6a:76:
71:f2:40:39:ec:e2:2e:f0:29:d1:b5:63:46:68:9b:2d:dc:b6:
27:d9:3e:4f:58:fc:55:41:93:5a:46:d6:a3:ee:28:1f:25:67:
47:b9:9c:dc:59:47:48:34:da:39:6c:43:46:73:2d:73:03:a2:
9d:92:6c:11:63:55:08:0c:d4:73:91:d3:e5:b2:33:93:97:51:
db:9d:c4:94:79:37:dc:d1:eb:d1:8e:1c:a7:b7:d7:11:af:0d:
22:0b:c7:8a:10:9b:7e:01:f1:bb:f1:4c:80:8f:1f:cb:13:f6:
79:44:d0:2e:d4:0c:8e:d2:85:cc:fa:b1:69:ee:40:f2:39:db:
66:31:2e:31:d2:4e:24:86:bd:79:b1:69:d0:7d:f0:ca:74:de:
06:b3:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:11:40 2026 by rpki-client