Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: WCaUJGZr4W+1gt5hD9AiUJqcvskubl6kZLgniJQ8fHs=
Subject key identifier: F3:4E:DA:E3:44:8C:94:9B:3F:5F:A1:60:30:79:F5:91:50:1C:86:61
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 019FA14DC67B6EC3096884D47DEE3ED5DC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 02:00:56 +0000
Manifest this update: Mon 27 Jul 2026 02:00:56 +0000
Manifest next update: Tue 28 Jul 2026 02:00:56 +0000
Files and hashes: 1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: BN/9kpbPAwlEoiGoTo4ytcomDGvQIGxmgWXD/pxqa6w=)
2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:c6:7b:6e:c3:09:68:84:d4:7d:ee:3e:d5:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Jul 27 02:00:56 2026 GMT
Not After : Jul 28 02:00:56 2026 GMT
Subject: CN=f34edae3448c949b3f5fa1603079f591501c8661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:b9:ed:1c:64:df:38:f6:71:b2:1c:77:6b:
41:58:ba:9c:e1:a2:36:60:cb:69:97:8e:08:29:09:
37:e0:36:67:c8:a7:25:4b:b4:9a:73:46:6d:8e:70:
0b:a3:e7:a3:b3:94:80:c8:52:9a:07:c3:e4:88:27:
04:84:24:d4:ff:75:50:b5:9b:91:dd:6a:cc:a6:60:
6d:93:50:04:50:7b:fa:ce:7b:7c:9c:17:24:67:96:
a6:9b:45:d7:56:59:2d:bc:cb:ef:71:61:00:18:83:
06:28:0f:2d:46:6d:7f:d8:c7:7d:11:d1:7a:a6:25:
0c:49:0c:06:59:d4:c9:af:61:56:9d:e2:47:5e:d4:
13:91:2a:8d:ae:ff:04:3b:71:b3:b7:29:95:73:3f:
96:b6:e9:e8:24:85:0a:60:88:13:48:09:42:10:5e:
21:18:d9:76:0b:37:3b:82:6c:c6:ea:70:fe:6f:fe:
e6:c8:47:4f:1d:b6:00:20:50:77:a4:3d:22:b5:c9:
e5:9d:21:73:2f:d6:e4:c8:de:fa:ed:1b:99:16:1b:
8c:40:9c:f9:74:b8:b8:6a:0f:fc:e6:d0:0f:50:48:
d9:92:b6:0d:b4:9f:a9:31:b1:33:3b:26:ce:ac:d3:
6b:91:16:2f:58:f3:38:0e:f9:65:e5:9a:2e:a7:95:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:DA:E3:44:8C:94:9B:3F:5F:A1:60:30:79:F5:91:50:1C:86:61
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:7f:52:e1:9b:13:b2:ff:f2:3a:a8:e8:f5:47:3b:56:e3:
fc:d0:ff:21:23:34:6d:06:52:69:2c:da:9c:a3:e8:74:ae:39:
ae:81:18:45:30:93:a5:95:70:5c:76:4b:1b:db:50:b2:0a:76:
a8:a4:32:fe:e3:7c:06:fe:c0:e9:f9:81:bd:36:af:7e:af:4c:
88:54:81:e8:cd:a7:13:25:58:b9:47:97:34:6f:f0:ee:47:54:
ac:f1:01:1c:be:93:a6:bc:e1:4e:1c:e5:dc:d6:45:41:70:6b:
fb:69:a3:90:64:77:ee:4b:f8:09:bd:5b:af:7b:1b:4e:3a:ab:
4a:08:43:3c:25:64:d7:e2:a0:52:92:e6:a0:34:9d:47:73:07:
90:60:ff:01:1f:76:87:94:17:3d:d8:6c:9a:11:6d:f8:a4:5e:
c0:41:1d:bc:f7:19:14:82:b0:ac:da:22:13:f7:24:69:58:88:
aa:c4:b0:62:63:77:45:56:a1:ab:52:f8:a7:50:30:b0:93:89:
b9:8f:0d:a9:9f:55:f9:3e:51:61:d9:e6:94:03:e7:99:a5:e7:
43:ac:23:00:ef:8b:c8:44:78:19:d8:76:5d:81:f0:20:76:4c:
ff:3c:fc:9f:5a:9d:b1:11:41:b3:4a:d1:eb:84:c2:1d:41:42:
35:8d:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:20:26 2026 by rpki-client