Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: IzKq4XgtWl77jyfhdh6IJQWaCjWoLOGwqQJpwxinemg=
Subject key identifier: 43:54:E9:EA:06:42:38:AB:85:3F:CC:31:6E:6A:F9:26:EE:20:9E:0B
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019FA184C8D682939E1890361088A389072B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0916
Signing time: Mon 27 Jul 2026 03:01:01 +0000
Manifest this update: Mon 27 Jul 2026 03:01:01 +0000
Manifest next update: Tue 28 Jul 2026 03:01:01 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: yiC+UaGb3xWeGJqXve9LW+ot3E1DxQiz+vmQiYPhWO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:c8:d6:82:93:9e:18:90:36:10:88:a3:89:07:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Jul 27 03:01:01 2026 GMT
Not After : Jul 28 03:01:01 2026 GMT
Subject: CN=4354e9ea064238ab853fcc316e6af926ee209e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:0f:ef:2b:5f:78:91:4f:40:16:a7:84:dc:
40:0c:d9:a5:0b:ea:d4:8e:44:19:70:14:d4:f2:b0:
58:36:6b:00:4a:1e:d0:d4:41:4c:92:cc:ac:7c:72:
38:19:b8:5b:e6:68:a4:b8:a7:3d:b0:31:77:22:74:
0e:36:52:e9:99:68:58:d7:52:4c:28:bc:b6:8d:ba:
e9:54:bc:79:a0:34:0d:1c:3a:c6:db:34:cf:43:9c:
3f:fb:ee:cf:52:a1:cf:09:f0:8e:fa:d3:e8:5d:18:
d1:e7:ac:9b:fb:6b:ba:1a:08:f6:ea:6f:20:5d:70:
ad:68:98:8a:e3:8a:b9:d1:4b:06:e2:20:cc:e6:71:
1c:e9:e3:a7:bd:f7:fa:67:f0:d0:e5:e4:16:75:e1:
19:b2:41:0a:2b:b5:6f:d2:10:9d:67:90:ef:20:b5:
ca:13:f5:1e:44:38:18:ab:cc:73:5f:a8:03:87:c0:
e6:c2:29:60:45:02:f5:b8:bb:cb:86:b5:fa:8e:8f:
03:f5:01:fe:04:c2:ca:56:2e:4c:6b:59:3d:1e:80:
4c:70:dc:2e:9f:1a:9a:4a:aa:ff:7a:71:01:ab:b7:
aa:8f:9b:2b:d4:9e:48:e4:34:ac:51:dd:a8:9b:f0:
8b:f4:6d:35:ad:88:92:80:32:60:18:1e:ca:40:e0:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:E9:EA:06:42:38:AB:85:3F:CC:31:6E:6A:F9:26:EE:20:9E:0B
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b6:40:9b:b3:35:80:62:a5:2e:58:60:91:51:b1:16:84:1b:
19:aa:65:ad:5e:5a:ce:7f:95:c1:66:7f:fe:16:53:b4:f8:d5:
d3:e1:00:01:84:96:99:ba:f1:e2:1e:27:25:6d:90:cf:34:81:
fa:f5:96:f3:6d:63:df:a6:24:9f:e6:a0:fb:78:eb:fe:55:17:
6d:b2:39:5b:2e:1d:42:60:9e:c9:fb:81:92:b4:2f:7a:e1:8d:
8e:58:d1:97:56:7a:2a:05:86:b6:b6:61:42:03:d0:f0:f8:4d:
0f:dd:89:e6:63:17:4d:7d:f0:a9:d5:a9:74:05:1a:c2:e6:79:
7e:f9:14:3c:07:94:67:c1:f7:58:28:fb:10:b2:b1:6d:de:0e:
ae:c0:9b:66:af:48:d4:7c:e5:6e:da:78:21:1d:59:6d:7a:1b:
86:8b:11:d1:ce:39:2a:fc:e4:7b:cd:f7:38:8a:b1:13:d2:8c:
fa:63:28:6d:65:68:41:c8:55:0c:2a:18:d6:ea:af:3e:17:cb:
1f:64:a0:51:64:fc:13:1f:32:8c:50:c0:5f:77:2c:7e:73:91:
b7:12:a1:70:26:5e:26:5e:75:54:69:b1:06:39:b1:8c:17:c4:
d9:0b:50:7f:db:6b:93:3f:37:88:e1:71:20:90:96:82:f9:8f:
94:db:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:09 2026 by rpki-client