Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: dfzT98S9k47F/Zeqnq5kL1MSUSnEmZGRX3apTWCl4fQ=
Subject key identifier: 21:94:D3:DF:02:2C:3B:90:39:CF:2F:AF:25:EA:36:B3:05:AA:18:26
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019F84C3D2348FAF3B3156047925BB934134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0D1F
Signing time: Tue 21 Jul 2026 13:00:53 +0000
Manifest this update: Tue 21 Jul 2026 13:00:53 +0000
Manifest next update: Wed 22 Jul 2026 13:00:53 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: a+dMifbPPDeIRw20HHoqYpNNO7n2zNCuoLxzDYCg98g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:d2:34:8f:af:3b:31:56:04:79:25:bb:93:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Jul 21 13:00:53 2026 GMT
Not After : Jul 22 13:00:53 2026 GMT
Subject: CN=2194d3df022c3b9039cf2faf25ea36b305aa1826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:be:d6:d8:76:1c:db:be:a3:59:1b:d9:b9:
1d:5b:2d:f8:ca:f7:4f:88:aa:0a:86:40:16:65:1a:
36:14:ef:1f:25:be:a0:4f:f9:36:ac:43:f3:4a:14:
fb:6f:a2:b1:02:ca:a2:49:2b:12:a5:9f:f9:ff:bf:
b1:29:2d:dc:9e:98:cf:b4:1c:65:40:89:86:82:8e:
12:0d:25:74:08:92:d9:79:68:15:1f:36:da:04:6f:
9f:27:66:23:fd:af:7a:b0:d5:38:21:ef:55:ec:11:
3c:a2:76:e9:ad:c5:48:c0:7f:57:66:81:4e:b8:8f:
0a:c9:95:c5:8e:c5:43:8d:ff:70:4b:6a:40:40:75:
ca:ce:c4:e7:8d:8d:e4:3e:5a:85:06:d7:5a:55:ef:
6c:1a:6d:1a:18:bc:a1:1f:2d:19:37:0c:7d:9b:2d:
f9:2e:47:0e:54:4d:74:aa:be:6e:11:f3:6b:9c:23:
dc:7f:04:1a:d2:30:fa:c9:2a:fd:4e:d9:34:9b:28:
d4:9c:21:e6:d7:72:94:d0:c1:04:7a:f3:ec:5d:af:
f0:13:75:d2:01:07:74:64:e4:02:f8:1a:8d:7d:76:
0f:19:fe:a9:57:21:bb:b9:20:f6:40:16:1b:e4:5b:
59:89:8b:7d:5d:55:63:82:9d:fc:a4:c0:e6:fd:e6:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:D3:DF:02:2C:3B:90:39:CF:2F:AF:25:EA:36:B3:05:AA:18:26
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:a7:2d:2a:30:10:ff:e9:04:37:aa:25:ea:48:ef:75:b7:
16:32:a1:9d:7c:ed:7d:30:0a:48:fa:28:f6:cc:96:79:c7:4a:
34:ac:85:7f:16:e1:01:e0:fe:45:ad:ef:88:a9:41:46:de:d6:
ec:9f:f8:e9:64:2b:fe:95:14:d5:89:87:e2:75:9f:74:06:79:
7e:0e:3d:8f:45:d5:96:c5:41:e8:b7:79:50:89:48:05:3e:5c:
70:cb:a4:1d:3c:c3:6f:92:9a:19:b2:2f:36:47:23:d0:73:a3:
1a:0c:f5:1e:07:be:2f:35:23:db:52:6f:8d:f6:c7:37:09:bb:
5e:71:ab:7f:d4:32:3e:38:5d:73:da:d1:7d:06:85:7b:3c:fe:
fe:69:47:2d:c5:f6:dc:1a:60:1f:f6:9e:e4:c9:cc:22:6b:87:
f3:f7:9b:2c:52:f8:fc:c6:b4:03:f9:d8:00:a8:28:46:31:70:
d6:0d:48:14:6f:c8:da:3f:68:45:fe:53:24:be:b1:ff:5f:68:
fd:50:58:23:2a:7c:5b:d5:47:75:9b:fd:3d:03:db:d0:42:86:
7f:d2:b7:d0:bf:d9:f4:98:fb:69:a6:1c:e1:47:29:40:49:ec:
5e:4a:08:2a:a2:9a:3d:32:3f:ce:4e:2d:3d:c7:a9:e2:f2:53:
6a:18:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:17:55 2026 by rpki-client