Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: ZTEo2I+MsTwmWZWrzlMAS8qTIUgcpdTlPgy6Xtk1GNo=
Subject key identifier: 6D:A7:C4:20:06:01:31:52:88:7C:79:C3:7A:0B:D0:B1:9F:E5:61:49
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019F8A20B039BEB39D6A6FD3F39FE05A8989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 19C5
Signing time: Wed 22 Jul 2026 14:00:25 +0000
Manifest this update: Wed 22 Jul 2026 14:00:25 +0000
Manifest next update: Thu 23 Jul 2026 14:00:25 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: ZGuUD08VsGSq7zIm6nj+cbvQ6eainiH4qhGo9cMUEMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:20:b0:39:be:b3:9d:6a:6f:d3:f3:9f:e0:5a:89:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jul 22 14:00:25 2026 GMT
Not After : Jul 23 14:00:25 2026 GMT
Subject: CN=6da7c42006013152887c79c37a0bd0b19fe56149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:87:f5:0c:b7:39:8a:4f:43:88:43:b9:4a:
36:2c:30:69:35:d4:15:3b:38:93:de:31:ac:85:ea:
69:3c:3f:d0:1e:e0:bb:8a:1a:dd:9d:eb:5b:26:c3:
fc:ab:ac:50:29:46:2b:a5:ca:f3:fd:0e:03:e4:02:
65:79:c1:19:a8:0b:aa:cf:32:1b:a8:be:01:98:3e:
14:13:20:da:1e:3c:c8:9a:f5:9a:17:03:a6:74:e0:
cf:68:1a:dc:56:8c:5a:83:38:23:9c:7d:aa:d8:62:
ab:1d:19:37:af:46:12:3d:c4:64:1f:20:8b:94:2a:
97:3d:b8:fe:c5:ac:bf:bf:5a:49:a6:ac:b5:95:4a:
4f:dc:d7:f7:0a:34:2e:a7:59:cc:e4:c4:13:0b:92:
f4:23:0c:54:57:0a:43:6c:62:c2:8a:db:a4:85:1d:
56:bb:6a:01:a4:b0:9c:e6:81:31:2c:35:22:48:71:
f3:f3:64:5c:06:c0:6f:0a:e2:90:b2:0a:ef:68:d6:
5e:f7:42:e8:af:14:86:47:dc:d8:a6:19:20:18:b4:
00:0b:27:21:2f:2e:83:5d:ab:7e:57:e2:36:2e:76:
fd:0f:a7:ed:f8:84:4a:de:d7:90:1e:17:62:ee:a3:
1e:f8:b9:7c:a2:77:c7:eb:44:f9:15:a0:51:0a:39:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A7:C4:20:06:01:31:52:88:7C:79:C3:7A:0B:D0:B1:9F:E5:61:49
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:28:6c:d8:50:2d:9c:f6:3b:09:ec:07:81:0b:e8:a2:42:a6:
74:9e:2c:d1:23:b6:62:16:5c:48:f3:ea:3b:f6:31:5b:20:da:
83:1c:9d:39:d6:01:ab:ba:13:c6:ca:39:90:63:ae:92:9b:9e:
dc:17:f9:72:ed:f5:e7:bf:eb:02:5d:aa:23:e9:25:73:93:5d:
2e:61:80:f0:a9:20:b3:c7:98:c8:ce:d4:b0:21:87:ce:0f:3a:
87:27:90:75:d7:e9:34:ae:0e:53:a4:d8:cc:f1:d4:d2:78:ac:
86:9f:4d:86:42:98:3b:f8:38:57:b9:8f:1d:e2:fc:62:28:05:
96:50:94:a1:01:db:c8:1d:a6:b3:47:c8:b7:e0:56:6d:72:ef:
a0:0a:eb:fc:94:0d:4c:cd:e0:5a:ec:b9:0c:45:a9:8b:41:c7:
57:b0:d9:01:a4:df:84:66:71:72:6e:e7:ca:c3:82:12:71:6a:
02:79:90:b2:35:e7:a5:af:bc:a8:f3:b7:95:69:92:36:5b:af:
e5:46:51:b5:c1:ad:56:c4:03:e4:bb:5a:2b:b6:4f:fe:7e:95:
bc:58:7c:11:7a:e6:4e:c9:66:b9:b4:19:44:d8:88:e7:8a:7c:
3a:96:18:fb:d7:56:2b:a0:b9:b3:51:12:24:90:fa:23:f7:db:
04:d3:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:05:03 2026 by rpki-client