Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: RlFXnNr/SsaxH1DmwB184crUli+e/q79o+D4OGfrhwE=
Subject key identifier: 28:4D:E1:8E:3C:2B:F4:C4:06:07:4D:B4:D3:54:92:F9:47:C5:F5:9D
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019FA2298BC17C2797FC5729DFD026E68ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0EF2
Signing time: Mon 27 Jul 2026 06:00:59 +0000
Manifest this update: Mon 27 Jul 2026 06:00:59 +0000
Manifest next update: Tue 28 Jul 2026 06:00:59 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: YmjvgRM8muPjl4asm6k53x0nm5UtFhJm+y/twxnChXk=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:8b:c1:7c:27:97:fc:57:29:df:d0:26:e6:8a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jul 27 06:00:59 2026 GMT
Not After : Jul 28 06:00:59 2026 GMT
Subject: CN=284de18e3c2bf4c406074db4d35492f947c5f59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:38:f6:83:de:6e:66:f2:d2:79:b4:46:ec:
50:b9:d1:8b:d0:ef:69:43:3e:bd:43:5a:82:b2:60:
b5:f8:d9:ff:58:e9:4c:37:9d:b8:ea:0d:b7:9d:ec:
5d:02:08:be:6f:5a:f0:e5:9f:2d:1a:b1:b3:89:63:
fe:5e:65:e9:da:8f:d9:80:9b:78:ec:2a:d9:c4:52:
d0:53:bb:63:73:87:c6:a6:6d:81:06:88:da:dd:d4:
6a:15:b4:d5:d1:dd:77:55:87:2f:3a:13:55:e4:7e:
b2:a6:67:97:ca:9c:2f:34:5e:63:9c:d6:16:1d:d4:
b1:8c:6b:17:0c:30:98:e7:bf:cc:6f:d2:c9:2e:26:
18:47:e7:3d:42:4f:4d:6d:13:4f:f9:89:31:97:23:
87:e8:63:51:f8:90:3c:44:65:c1:55:03:26:c0:95:
54:3f:89:a5:8e:c6:2f:23:ca:39:0c:fd:41:84:3a:
0d:76:fa:40:21:c6:19:c1:6f:38:9d:4d:8e:93:cd:
ff:21:95:63:2e:75:4f:e7:9f:06:1e:2f:31:ee:98:
a2:e3:b3:5d:4f:c0:b8:38:6d:cd:47:ed:9c:fc:68:
78:8e:d4:c2:1e:69:69:63:7c:5d:47:14:76:78:60:
c2:c3:ea:e0:a3:6a:b8:99:4d:a1:26:92:37:2a:ef:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:E1:8E:3C:2B:F4:C4:06:07:4D:B4:D3:54:92:F9:47:C5:F5:9D
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9b:9a:ac:53:b7:23:97:25:6d:56:67:dc:2b:74:d9:3f:85:
e7:e8:fd:80:51:eb:aa:68:43:64:aa:b6:44:7d:4d:6d:0e:82:
35:42:f3:b5:69:87:71:e9:87:3c:cf:13:63:33:ab:4b:c4:1e:
68:35:3b:fa:cb:65:d9:b5:a0:80:cc:5b:2b:75:20:12:fc:d5:
c1:79:e3:ac:d1:ed:60:25:b8:93:a7:8c:e6:e2:a2:42:e3:ec:
4e:96:5d:c9:02:3e:68:6b:4c:2a:c7:e0:ca:69:4d:03:79:f0:
52:6c:9c:30:1c:18:37:0c:f6:93:b3:79:36:22:8c:70:34:b6:
dc:7b:87:ae:bb:42:da:17:8e:bf:28:ab:01:48:84:55:11:a2:
e4:ac:e1:6e:6f:5d:53:01:12:d7:be:98:94:0f:ed:a4:7c:9d:
4a:17:d8:1d:59:d9:3e:92:fe:13:67:85:6e:11:6f:b8:9a:7f:
56:40:91:62:1d:82:f2:2b:2e:d4:a4:03:17:e6:56:9d:20:7c:
31:b5:45:ac:4a:89:1c:63:59:09:fa:37:7a:80:e8:a3:8b:25:
c1:29:1f:64:32:f3:d1:49:04:e7:8e:e9:cd:0a:91:a4:bc:2f:
31:77:dd:35:83:b9:77:86:3e:ee:42:e7:57:c9:ae:ff:d0:79:
8a:41:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:01:56 2026 by rpki-client