Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: k6wVXiZXyESZ42woGt+UdJzXjUfYDazDRDAG94lJPmg=
Subject key identifier: CC:1E:EE:57:ED:D2:2D:4D:94:07:79:BF:BA:81:E2:B1:36:4A:72:DD
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 019FA11680D2A97D28E23EFF2480AA005542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0B41
Signing time: Mon 27 Jul 2026 01:00:34 +0000
Manifest this update: Mon 27 Jul 2026 01:00:34 +0000
Manifest next update: Tue 28 Jul 2026 01:00:34 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: AqVIBXV6GtJv5A5ldewU9fF8oxePwo+TwVMCgae2Yfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:80:d2:a9:7d:28:e2:3e:ff:24:80:aa:00:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Jul 27 01:00:34 2026 GMT
Not After : Jul 28 01:00:34 2026 GMT
Subject: CN=cc1eee57edd22d4d940779bfba81e2b1364a72dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:98:68:ed:30:5f:61:46:10:4b:53:e4:87:
7b:34:fc:6d:63:ff:f3:3c:58:c4:88:1a:c2:65:ad:
9b:3e:06:53:f3:cd:dd:a5:d2:9a:c9:fd:ae:9f:e1:
d5:64:49:6d:42:6d:cf:da:35:7e:af:7d:9c:7d:de:
49:16:a0:9d:47:3d:56:6a:26:01:65:5c:c9:02:7b:
82:0d:ea:84:96:41:75:b3:2d:51:ee:ef:7e:c1:e1:
de:fa:ac:d7:c1:49:e6:18:e7:82:08:9c:f1:58:d9:
08:1c:8a:4d:81:22:87:92:49:cf:7f:e0:54:13:5a:
94:91:00:db:aa:ae:5c:fe:04:fe:c4:09:22:b3:ce:
e1:6c:1d:af:2a:67:38:b7:43:c6:48:7f:37:f1:65:
c6:db:b2:b3:c1:8e:ae:f4:0b:e5:29:f7:32:bc:a2:
01:82:0d:f7:6e:a4:97:25:cf:f9:5e:29:6e:1c:1f:
76:96:20:8c:8b:65:cd:72:0e:1f:5b:98:0c:47:14:
df:ac:9a:38:65:91:c8:77:da:1d:fd:cb:91:6e:d4:
1c:ce:36:40:8c:96:cc:98:a6:6a:38:af:fb:73:a0:
8b:8a:85:e6:41:83:80:c7:c2:f1:cd:fd:c8:71:0b:
68:f6:ad:7d:86:0d:4c:09:8e:e5:98:60:e8:e3:fc:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:EE:57:ED:D2:2D:4D:94:07:79:BF:BA:81:E2:B1:36:4A:72:DD
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4a:f0:18:82:47:58:e2:ba:31:bd:b3:29:8a:8d:a4:7b:ca:
01:24:4b:a0:aa:1a:cc:de:20:09:af:fc:45:36:42:60:34:65:
1e:8e:a9:5f:5d:58:ba:17:1a:0c:b9:0f:b5:70:13:08:c7:d6:
97:91:bc:97:18:1a:1f:d9:0b:74:e6:fe:14:5e:4d:3a:72:a7:
ed:70:1e:b7:bd:77:33:15:87:5d:8c:d0:79:bd:c2:7f:47:66:
3f:a7:18:a7:62:28:54:d5:73:6f:c2:93:3b:16:89:4c:0f:20:
f1:75:b1:2e:42:34:e4:ac:f8:fc:46:4d:da:07:e1:9d:da:27:
3f:70:da:58:52:27:3b:05:45:dd:82:dc:29:62:a9:b0:23:dd:
6a:cd:da:50:07:65:a8:2a:39:d8:57:aa:61:d8:6b:d3:2b:67:
de:1a:df:c5:ce:d2:69:a0:4a:e9:d1:bc:64:f2:81:76:f1:47:
8b:45:94:bc:a5:bd:8f:e6:91:7a:3b:8a:64:29:d2:bf:b4:a4:
4b:a7:3f:f9:ab:b2:48:70:18:0f:f3:3c:a5:46:7e:7a:0c:4d:
d8:f8:bc:e4:63:eb:70:2e:0a:a5:3d:0f:31:a3:66:de:a2:48:
50:36:54:4f:a9:96:59:b3:6e:6c:80:cb:58:53:dc:64:5d:86:
71:41:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:33 2026 by rpki-client