Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: Ntk9Vrk9TuGqdmDG5+9UHnehMYqf5COjDkwEZJ98rg0=
Subject key identifier: CE:3C:3C:44:9F:48:B8:C5:F3:4A:8C:23:DB:09:B6:F9:D4:46:34:86
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 019F743E163D5EBC7BB608C00F0A07324613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 1251
Signing time: Sat 18 Jul 2026 08:00:53 +0000
Manifest this update: Sat 18 Jul 2026 08:00:53 +0000
Manifest next update: Sun 19 Jul 2026 08:00:53 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: UBUKHW/jVeQCV+rdhgv9/37V1ErNGNUNwFTjdVbDP3Q=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:3e:16:3d:5e:bc:7b:b6:08:c0:0f:0a:07:32:46:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jul 18 08:00:53 2026 GMT
Not After : Jul 19 08:00:53 2026 GMT
Subject: CN=ce3c3c449f48b8c5f34a8c23db09b6f9d4463486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:7c:39:a8:96:95:cc:ad:f0:28:99:57:78:
43:a9:e9:e3:75:8b:0d:17:ef:b4:18:6e:9b:1e:be:
6e:9e:40:a4:bd:8b:e3:2d:05:4c:06:ba:9b:75:e5:
82:08:65:0c:11:3f:c2:f2:5f:f4:98:98:0c:17:90:
03:2b:19:5f:34:bd:5f:dc:5d:26:06:74:22:52:31:
5f:bf:1e:1f:48:3d:4d:79:b3:42:d9:6a:85:e7:4c:
85:5f:07:d7:2c:68:aa:c5:64:a4:18:d4:33:ab:12:
02:f8:80:53:39:ba:03:27:49:67:a9:06:f5:96:b2:
f5:c4:6d:be:2b:4f:42:b5:ab:f3:26:4b:76:84:9a:
12:1b:e1:62:11:9f:13:d4:95:c6:ef:c4:77:8b:ae:
47:c8:9d:d9:fd:67:09:2e:70:3c:df:ea:78:1e:74:
df:71:71:fc:f9:5f:18:e0:a0:53:a7:d1:26:7f:30:
c6:7e:10:7d:a4:8d:d5:6f:a2:2f:8e:a1:d9:1c:0e:
c6:6b:4f:42:25:cc:24:39:0d:70:ec:e9:90:5b:38:
19:04:60:90:9a:48:69:b8:fb:46:55:54:3b:ed:6a:
ff:c2:92:d0:ca:da:40:db:d9:d3:89:f0:d6:a3:81:
5e:03:ee:14:6e:0f:97:b8:29:8c:8d:9c:83:5e:c9:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:3C:44:9F:48:B8:C5:F3:4A:8C:23:DB:09:B6:F9:D4:46:34:86
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f7:ca:76:15:d8:f0:ff:26:55:ae:96:04:93:6d:bc:09:47:
9c:6c:d5:ae:d4:9e:32:fd:72:6c:6e:f7:d9:72:3e:25:1e:d8:
5b:66:92:d8:d9:c9:6d:7b:34:b3:5f:65:49:e9:55:12:7f:80:
ce:75:20:ef:bd:c2:76:96:8a:33:d7:80:a9:d4:94:28:26:40:
93:e1:f0:14:a1:59:61:d2:89:08:2f:52:df:36:bf:dc:e9:0f:
8c:cc:49:58:6b:10:81:03:2e:20:ec:82:b1:98:8b:29:bf:8d:
7a:1b:0e:51:31:dc:11:c9:8f:67:97:6e:fe:4e:af:70:1f:05:
9a:93:44:0d:4f:8f:1a:02:eb:5c:88:6c:51:4a:56:9f:69:de:
90:83:f5:c2:ed:cf:f7:b4:f8:86:22:b9:a7:89:14:09:30:cd:
13:38:d9:00:62:96:9c:20:cb:fe:e9:d5:e0:6f:1b:63:e5:42:
3d:f3:63:68:0d:48:42:60:fc:d4:7d:e0:9f:5d:ab:3b:5a:46:
1f:c0:59:e1:5b:7a:91:97:3f:4b:24:0c:43:b9:ee:d7:09:24:
30:c4:3c:25:d2:a1:5d:f6:28:c9:54:06:bd:00:de:15:58:1d:
ac:c2:5a:5c:1c:93:55:8b:e0:4e:e8:47:00:11:87:5b:1f:4a:
30:e7:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 16:54:23 2026 by rpki-client