Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: W5a6/31kkKjbn+1d3Ao8KqZ11on5YnNRG8x+sH8nwFA=
Subject key identifier: A2:17:FC:F0:F3:43:60:64:B7:FF:0C:DD:1F:DA:E4:9F:56:96:D9:8C
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019F841EADC31C7F2938C5703A37402E3AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 0184
Signing time: Tue 21 Jul 2026 10:00:30 +0000
Manifest this update: Tue 21 Jul 2026 10:00:30 +0000
Manifest next update: Wed 22 Jul 2026 10:00:30 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: NfTRXKZ3r+F4HIUt3LOmFwJT9H9KOo6kSCu0ODpUUzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:ad:c3:1c:7f:29:38:c5:70:3a:37:40:2e:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Jul 21 10:00:30 2026 GMT
Not After : Jul 22 10:00:30 2026 GMT
Subject: CN=a217fcf0f3436064b7ff0cdd1fdae49f5696d98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:74:a2:c9:7d:e7:e4:5c:86:fa:75:1d:2f:
b3:6e:71:ed:44:a3:8a:7d:21:13:83:8c:0c:87:8c:
a6:fa:58:22:8b:8a:1e:b8:2a:c5:70:49:f0:2e:1a:
5b:8c:37:69:db:b1:b7:10:1a:5e:b9:08:68:1e:63:
60:ba:b0:97:c6:c9:73:45:4e:79:09:a3:24:7c:5b:
7d:ae:d5:8d:08:ed:5d:84:7e:61:ba:4d:64:d6:e0:
33:6a:43:d3:c7:a9:61:4c:a7:17:59:14:e4:f1:2f:
c6:16:a5:f8:8f:5d:d9:64:6b:d2:d1:f3:4e:92:a9:
17:3e:cd:3c:be:85:42:1c:da:e3:76:5d:a8:db:1a:
8a:f2:08:04:a8:91:db:48:ab:d0:01:35:eb:d1:60:
38:cc:2f:ee:a0:5b:1c:45:ea:85:1b:0b:91:9a:2f:
8e:e1:3c:bd:27:4a:2e:19:48:9f:31:ec:ec:73:47:
87:82:1b:ae:96:e4:5c:cd:27:f3:7e:82:b1:eb:c0:
06:9d:9d:16:f5:57:81:97:9f:4b:f5:b8:0b:c6:8e:
89:3c:36:d1:61:27:b0:2c:da:f7:5e:56:c6:55:c0:
eb:a9:e9:c8:69:5c:0e:80:09:23:22:8d:84:3d:74:
2c:19:cd:b7:b1:7d:64:0d:66:53:5c:0a:f7:b3:a1:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:17:FC:F0:F3:43:60:64:B7:FF:0C:DD:1F:DA:E4:9F:56:96:D9:8C
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:54:1e:10:60:ff:44:35:f4:a4:c9:4f:4c:62:e2:f3:69:0c:
d5:92:a2:5a:1c:bc:6a:76:52:73:55:ac:b5:50:95:b8:eb:e6:
49:fb:ef:37:c1:22:b1:7a:6b:d0:c5:1c:ae:37:0d:7e:6b:55:
b1:31:28:dc:c7:06:b6:84:38:00:1f:59:dd:6d:b8:fb:83:4d:
9e:57:87:57:c1:02:4d:7d:31:2b:d0:f7:92:41:6b:df:f8:69:
d4:c2:13:bd:df:7e:55:51:33:8c:e1:ad:10:1c:e4:7b:35:db:
b5:a2:25:2a:b7:b4:c9:56:2a:43:8b:99:68:07:bb:64:59:52:
94:cd:a4:93:a8:5a:21:3a:5c:ac:08:d7:ea:b3:89:a3:1e:06:
89:99:35:51:eb:3a:3c:2a:75:7b:1e:7b:f0:15:b9:ec:27:f8:
68:34:7d:32:88:3b:38:e1:b4:21:5e:da:90:af:b5:f5:ac:83:
fc:c2:0a:80:c2:7a:4d:5f:f7:23:ce:e3:79:6e:45:92:cf:3b:
71:bf:d9:ea:70:8c:41:41:1c:43:e1:14:78:f5:e1:5e:64:34:
91:78:f1:7d:0d:0d:de:5e:dc:aa:02:69:91:e5:b4:96:ef:8b:
00:00:58:39:47:ac:6e:12:a8:84:b4:ea:07:b5:f6:7d:3c:f7:
be:0d:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:05 2026 by rpki-client