Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: NufppKR5py3Rxyw8VSa6KjSArNOQUYNcEEl7ejjQPM0=
Subject key identifier: E2:A8:E7:22:BE:97:62:98:0D:35:69:EE:66:2F:F0:5F:71:72:17:BF
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019FA1163FB7AC4774D3D200457CD93F1207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 19DE
Signing time: Mon 27 Jul 2026 01:00:17 +0000
Manifest this update: Mon 27 Jul 2026 01:00:17 +0000
Manifest next update: Tue 28 Jul 2026 01:00:17 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: e704EVDnF6HIZG66P7tOuSJ7EhpRRpVuq55v8R3xd9s=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:3f:b7:ac:47:74:d3:d2:00:45:7c:d9:3f:12:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jul 27 01:00:17 2026 GMT
Not After : Jul 28 01:00:17 2026 GMT
Subject: CN=e2a8e722be9762980d3569ee662ff05f717217bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:1d:c4:3c:87:ab:82:05:83:9c:d9:86:02:
94:35:76:d1:f0:0e:bb:2b:87:b2:fe:b6:5d:f3:2e:
af:ef:69:38:51:c3:29:c0:4a:ea:60:a5:1f:52:43:
18:6b:fe:ce:0d:e9:23:62:2e:86:fb:67:d7:91:5f:
b0:8f:7b:c4:37:8e:fa:b5:3b:52:99:6c:d1:07:92:
b4:9a:d4:db:47:25:67:c7:15:5c:55:b8:8b:07:b4:
1a:0d:73:5b:e8:54:5b:b0:56:12:fe:34:04:8c:e7:
01:e0:e2:ad:84:71:db:11:ed:55:c9:c2:36:2d:94:
fc:73:5e:d0:29:d0:c1:8a:eb:85:f7:32:61:89:29:
a5:ae:fc:e5:d1:ef:7c:32:89:cb:3d:62:73:34:01:
29:10:02:27:5e:47:97:e8:f7:b0:59:e4:62:06:5f:
16:58:72:04:89:b6:d4:b5:a4:79:07:e3:25:9a:8a:
65:a9:0f:dc:32:cb:81:4e:2a:5b:e2:34:37:c8:d8:
0d:37:a6:06:a6:79:41:27:30:d5:6a:b5:11:61:25:
bc:34:bc:1b:c3:7e:c9:a2:c7:76:d3:13:54:42:1d:
2b:ae:3d:81:ac:1c:6b:c8:d5:cd:54:af:8f:20:f2:
8e:31:1b:53:80:e5:8b:58:c9:f9:a2:d6:d0:95:74:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:E7:22:BE:97:62:98:0D:35:69:EE:66:2F:F0:5F:71:72:17:BF
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5c:d0:22:11:9b:c0:62:42:5e:28:47:e6:b1:46:6c:4a:65:
8b:94:db:25:3f:20:14:ab:6e:e6:90:0c:a3:da:6e:3a:9f:fe:
9a:c9:95:e1:e9:7e:a8:f7:87:c5:c6:98:ec:41:6e:12:13:41:
3c:89:ab:a0:70:7f:c0:a6:db:a4:98:41:e9:7e:b5:69:e9:8e:
63:4a:e2:e6:a0:cb:09:4c:7c:3e:29:78:32:91:0a:3e:b5:b1:
01:c4:a1:74:22:01:12:5b:c2:57:17:23:3c:e1:5c:a9:37:e3:
5f:30:3f:c4:05:43:8d:a4:87:e5:d7:64:8c:9e:cf:e9:b9:9c:
f3:bc:08:ad:19:ed:d2:f5:86:31:d0:fd:76:d2:8b:98:2d:ff:
b2:0b:84:08:f4:84:98:a3:5d:fb:70:2e:e7:f3:f8:bf:53:b7:
f8:95:3f:ed:f0:f0:80:1d:a6:a2:8f:e3:e3:c1:9d:ef:74:de:
5c:00:c0:62:63:b7:5b:27:23:de:ab:1f:91:05:af:d8:90:33:
33:e0:0c:48:65:ff:8f:c0:c3:d1:ec:e3:21:d3:40:7f:d8:00:
a8:0f:c6:a0:b3:cc:58:5d:56:3a:7a:bc:b0:b5:51:70:52:8a:
aa:fb:28:94:3c:11:70:37:c0:72:e1:8a:9b:6a:7f:e4:9c:da:
27:6a:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:59 2026 by rpki-client