Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: xrCMzahdncV0jesIYCG6+DaLLqs8TVwnBJA+NBPp3kU=
Subject key identifier: B2:9A:AB:47:67:FE:BF:6A:9A:3C:98:79:49:E0:B7:43:5F:F2:9E:48
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 019F29248696CDA1E2D36C8A669DA37D89E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 1573
Signing time: Fri 03 Jul 2026 18:01:27 +0000
Manifest this update: Fri 03 Jul 2026 18:01:27 +0000
Manifest next update: Sat 04 Jul 2026 18:01:27 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: z99Yau521AmW9NYdileKFk/9C/CsUrr+k9VkwQQUDW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:24:86:96:cd:a1:e2:d3:6c:8a:66:9d:a3:7d:89:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jul 3 18:01:27 2026 GMT
Not After : Jul 4 18:01:27 2026 GMT
Subject: CN=b29aab4767febf6a9a3c987949e0b7435ff29e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:1b:71:15:46:06:43:ba:34:e6:88:14:44:
5e:2b:d6:e0:89:38:d8:ac:7b:93:19:ed:ba:7f:87:
67:65:15:8c:49:dc:3c:d9:9e:2c:b2:5b:ae:14:b1:
82:c8:30:f7:5f:28:69:11:59:b2:cf:fa:5a:5d:4d:
2f:ef:2c:f9:ac:7a:af:ce:cc:60:79:3f:6d:a3:c7:
ef:fb:56:ff:43:0f:21:5e:54:60:36:51:89:9b:73:
de:9c:8d:49:75:b6:ab:99:a8:53:f4:32:fb:f4:20:
81:e2:20:d4:62:7b:34:31:a4:27:bd:3e:1f:3d:8b:
ae:1d:f3:79:0b:dc:67:a8:42:29:fa:05:62:59:2a:
2d:71:df:f0:47:34:4c:ab:37:22:90:09:c7:fb:ef:
da:59:37:4e:53:5e:0e:38:a9:70:09:b2:18:cd:4e:
13:0f:8a:c2:c0:56:f6:31:c4:9e:c4:37:b8:90:6f:
eb:85:58:dc:38:e1:76:85:1c:4e:57:ea:a4:6b:bf:
ce:dd:4e:e9:9a:b1:45:a9:79:0a:f5:1f:be:bf:73:
46:31:9c:20:d2:a7:dc:e4:7c:cb:a0:29:02:cf:75:
d3:9b:03:c9:5e:39:49:26:84:b6:4a:46:00:eb:9a:
29:e7:10:5b:85:48:b0:bd:e0:d1:22:ed:bb:c1:56:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:AB:47:67:FE:BF:6A:9A:3C:98:79:49:E0:B7:43:5F:F2:9E:48
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:1a:e1:08:be:3f:18:ac:b6:c5:15:95:23:ce:04:9d:b2:
df:67:40:94:e8:b5:82:fd:69:b1:a4:53:61:32:a5:c8:67:a9:
63:c8:0f:ad:cc:a3:a8:95:89:a7:24:ee:6e:8f:d6:84:2f:24:
96:30:be:fb:dd:02:5a:9e:03:a0:31:40:48:a3:6c:c5:f2:1c:
59:8e:a8:83:07:ed:b7:7f:6d:54:98:0d:63:b9:0e:be:b0:70:
64:bb:55:f7:d5:c8:4d:8d:84:3e:00:35:d1:68:34:f0:48:f3:
83:d8:aa:75:36:73:9a:64:75:84:46:91:f6:7c:32:f6:43:84:
e2:c9:e1:0d:0f:31:0e:1c:3a:4f:ce:c1:88:f8:bb:ae:b8:0f:
c3:61:07:27:a5:0b:da:29:e2:91:82:af:30:b9:a9:be:7c:cb:
bc:e2:2c:38:a1:37:83:44:01:eb:67:ae:ac:b5:02:97:61:a9:
94:62:c8:b7:19:e5:3c:bb:cd:8d:77:a7:38:95:d1:68:47:a8:
41:de:6f:00:bb:31:ab:08:27:aa:80:e0:b3:91:a1:16:a5:81:
aa:96:ee:6a:35:a2:63:c6:a3:1b:0e:97:b7:01:9a:44:16:f1:
54:b3:76:0e:73:d3:8f:99:21:0d:e5:b4:9f:e1:cf:a0:7f:04:
30:78:af:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pJIaWzaHi02yKZp2jfYngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0
M2I0Y2IwHhcNMjYwNzAzMTgwMTI3WhcNMjYwNzA0MTgwMTI3WjAzMTEwLwYDVQQD
EyhiMjlhYWI0NzY3ZmViZjZhOWEzYzk4Nzk0OWUwYjc0MzVmZjI5ZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn10bcRVGBkO6NOaIFEReK9bgiTjY
rHuTGe26f4dnZRWMSdw82Z4ssluuFLGCyDD3XyhpEVmyz/paXU0v7yz5rHqvzsxg
eT9to8fv+1b/Qw8hXlRgNlGJm3PenI1JdbarmahT9DL79CCB4iDUYns0MaQnvT4f
PYuuHfN5C9xnqEIp+gViWSotcd/wRzRMqzcikAnH++/aWTdOU14OOKlwCbIYzU4T
D4rCwFb2McSexDe4kG/rhVjcOOF2hRxOV+qka7/O3U7pmrFFqXkK9R++v3NGMZwg
0qfc5HzLoCkCz3XTmwPJXjlJJoS2SkYA65op5xBbhUiwveDRIu27wVb0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKaq0dn/r9qmjyYeUngt0Nf8p5IMB8GA1UdIwQY
MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt
NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh
LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP0a4Qi+
PxistsUVlSPOBJ2y32dAlOi1gv1psaRTYTKlyGepY8gPrcyjqJWJpyTubo/WhC8k
ljC++90CWp4DoDFASKNsxfIcWY6ogwftt39tVJgNY7kOvrBwZLtV99XITY2EPgA1
0Wg08Ejzg9iqdTZzmmR1hEaR9nwy9kOE4snhDQ8xDhw6T87BiPi7rrgPw2EHJ6UL
2inikYKvMLmpvnzLvOIsOKE3g0QB62eurLUCl2GplGLItxnlPLvNjXenOJXRaEeo
Qd5vALsxqwgnqoDgs5GhFqWBqpbuajWiY8ajGw6XtwGaRBbxVLN2DnPTj5khDeW0
n+HPoH8EMHivXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:48:59 2026 by rpki-client