Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: 1Nx5edlEHPkZJUgI8jhX6wPs3EVx2D6UbufnTL7rIFs=
Subject key identifier: D9:20:A7:C1:73:29:1D:42:75:32:AA:E3:53:67:46:48:0B:EB:C4:F2
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 019FA0E052D02591FE03D0E114CCCBD82460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:23 +0000
Manifest this update: Mon 27 Jul 2026 00:01:23 +0000
Manifest next update: Tue 28 Jul 2026 00:01:23 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: lxPFEUK0ZQ2yd5bqpXdxVqnFrE9NWJOLaaFLXPmpiE8=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:52:d0:25:91:fe:03:d0:e1:14:cc:cb:d8:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Jul 27 00:01:23 2026 GMT
Not After : Jul 28 00:01:23 2026 GMT
Subject: CN=d920a7c173291d427532aae3536746480bebc4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:e0:9f:8b:7b:5c:8e:da:60:11:25:27:28:
f8:5a:de:89:b5:20:61:ad:3f:fb:fb:09:d6:10:d8:
14:3e:a9:25:32:ee:56:5e:8f:bc:89:aa:93:d5:33:
71:b5:ce:cd:5e:81:73:22:e3:fd:a7:ad:55:27:ab:
af:2b:d3:27:0d:5b:21:d6:89:8d:40:1b:90:fc:ca:
00:fa:b0:f7:7b:c3:53:36:31:f3:53:ea:55:e9:bd:
e0:03:5e:c7:62:a7:92:4a:57:a8:35:a9:0b:3f:b1:
20:67:74:7f:3b:3a:65:95:06:2a:69:72:de:7f:63:
7e:40:bb:86:04:1a:95:15:1d:a7:8c:0c:65:59:7b:
81:6e:ef:8f:3d:46:b7:b6:64:33:cf:ee:9c:b8:d0:
b2:23:ec:79:cf:1e:a0:02:e4:dc:d2:a3:1e:f3:b5:
a4:92:e6:a7:52:74:5d:66:85:0a:8b:92:09:4e:43:
45:ec:8e:fc:06:58:c6:98:68:ae:6f:63:f7:25:fa:
2c:8a:d6:ea:dc:0d:be:80:15:1e:c4:57:de:f1:07:
66:2c:87:42:95:29:6c:e2:7c:bc:2f:e8:2d:21:d8:
04:0e:3b:c1:30:aa:5c:34:e4:db:41:76:ce:d2:b8:
b1:cf:5f:64:85:08:70:b5:54:dd:af:a8:4d:83:45:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:A7:C1:73:29:1D:42:75:32:AA:E3:53:67:46:48:0B:EB:C4:F2
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:95:6d:83:46:53:63:6f:2b:c5:f4:06:86:ff:4d:74:d8:10:
10:d9:44:f3:93:c3:1a:f4:ee:06:94:d3:c8:b1:71:e9:68:d8:
b8:b3:49:0c:e0:a0:ff:ac:e7:b6:d1:44:d6:39:7e:11:2c:b1:
ce:fb:68:88:54:fd:c7:bb:7c:da:db:47:90:5a:c7:91:8a:84:
55:a9:63:28:9d:1b:e1:94:85:a6:70:d1:7a:83:4d:d8:e0:bc:
c0:78:78:8c:9c:b7:e9:b5:af:0f:2c:99:2a:92:3c:57:fa:ee:
d3:b5:b7:a7:0b:99:57:c6:ff:e9:4d:a7:ba:d2:a3:65:a2:d1:
9c:21:96:59:e0:d8:ae:bd:71:6e:12:a6:ca:a8:5b:0d:ae:3f:
c2:25:73:4c:2f:2c:50:7a:95:d2:aa:3b:5d:ea:b4:60:94:30:
f9:72:83:5a:82:da:d7:4c:b8:06:20:68:ac:ab:2c:2a:55:a9:
e6:3b:ac:d0:e1:b7:89:12:a0:8c:7d:3e:4d:43:98:10:d1:d2:
0a:d0:4e:f1:cb:ab:c2:d6:65:ca:e0:fd:92:09:09:18:cb:80:
ec:9a:a6:d2:42:a4:cc:13:5a:18:3e:dc:9f:5e:79:b9:cc:d5:
74:23:6a:19:75:5f:4d:c8:07:02:76:15:52:0f:46:11:4d:67:
55:52:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:44 2026 by rpki-client