Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
File: OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft (raw, json)
Hash identifier: EoIGDtx0EsG7fnCclz+1iv7tnzoNLFulzaTq2Dd2jGc=
Subject key identifier: AC:F1:F4:1A:AF:06:63:69:1A:EF:F3:B0:4B:AD:5D:8B:28:7C:A6:20
Authority key identifier: 39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
Certificate issuer: /CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Certificate serial: 019FA2CF02D6D3286DDC4D5053231AC0F521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:43 +0000
Manifest this update: Mon 27 Jul 2026 09:01:43 +0000
Manifest next update: Tue 28 Jul 2026 09:01:43 +0000
Files and hashes: 1: OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl (hash: GWQOHVlInqnkEzNkULs/WxUDTpPlTexsc8aBTxyUNmk=)
2: RIl4fKhBjK-K5FgduYm10GA1QSQ.roa (hash: Ocyf7nYoVAbV1TQsJ/zEIif5q1NMRReT2mzgTvpzHMc=)
3: dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa (hash: 2uMrxTRrZKBm5w9QVdyqQ0PMfu0UrouZnk+izTYWJdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:02:d6:d3:28:6d:dc:4d:50:53:23:1a:c0:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Validity
Not Before: Jul 27 09:01:43 2026 GMT
Not After : Jul 28 09:01:43 2026 GMT
Subject: CN=acf1f41aaf0663691aeff3b04bad5d8b287ca620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:48:71:55:fc:be:66:fb:fc:e9:e0:d7:6e:
33:e9:99:80:66:93:56:c8:fd:d1:cc:88:1f:9e:67:
23:4d:80:3b:55:af:6a:67:f1:52:28:b3:ca:75:0d:
ff:09:87:71:7e:7f:64:d5:dd:fa:5d:43:17:3b:ed:
e8:45:3d:d0:7d:b7:66:77:41:44:03:43:4b:fc:02:
a0:b1:c8:4d:69:38:05:69:78:a6:c5:b2:d1:11:29:
d9:da:6c:d8:d5:ab:8e:2f:34:d0:b5:db:29:72:d6:
23:35:3b:f2:c5:b5:ab:c3:30:3e:04:1c:ad:fd:2b:
81:fb:9e:75:07:b3:0f:16:e2:08:ee:69:e6:8d:db:
40:d6:9c:43:b9:89:2c:c2:e4:43:1b:e2:3a:87:a8:
1c:60:1b:fb:33:54:3c:89:f3:a6:69:ab:b2:2f:e6:
99:ee:c5:e0:b1:e1:84:d5:97:6b:59:e5:50:3e:48:
bd:73:e8:99:5d:44:77:42:1e:9e:19:7e:61:7a:f1:
f4:71:ee:14:f9:9e:15:cc:f3:06:67:15:3e:f0:3f:
67:ee:ba:c3:d2:fb:a6:96:73:3d:5b:d8:c2:7b:93:
60:2e:f9:08:ab:c3:1b:64:dc:a1:3f:a1:22:fb:00:
eb:88:ec:4a:38:91:53:b5:9f:7d:dd:44:f3:90:49:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:F4:1A:AF:06:63:69:1A:EF:F3:B0:4B:AD:5D:8B:28:7C:A6:20
X509v3 Authority Key Identifier:
keyid:39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bc:b7:c2:87:a3:02:c8:55:f7:3b:74:e7:99:f9:dd:8e:00:
3e:da:f7:70:7d:b2:6c:91:07:f9:5e:ff:16:fb:d7:c0:5e:b6:
34:d5:7e:dd:a4:d1:c1:af:a6:81:86:ab:59:b6:c3:9d:ad:ce:
ad:52:dc:6e:05:70:d4:00:48:ef:8a:1b:ee:bb:d7:d3:4d:0c:
0b:39:ad:98:af:27:ea:5e:0e:67:85:48:f7:58:56:be:47:c9:
ed:dc:bf:0a:93:f8:0b:f2:9d:0a:82:5b:32:4d:83:57:8e:2b:
24:54:15:77:15:c3:2f:c7:f5:20:eb:0f:b9:37:fa:13:d6:fa:
32:e7:f4:96:7c:c7:4d:1f:31:a1:4b:4d:9b:6e:a5:56:6a:04:
d0:e5:17:2c:fd:b3:f2:16:b3:34:1d:4a:08:d0:e1:02:74:40:
28:80:8f:a9:9a:f6:f9:e6:7a:f7:a6:c8:75:34:a0:25:d4:c1:
19:10:0e:32:aa:55:ac:34:8a:58:ee:dc:11:32:4b:a7:7d:9d:
32:ad:b5:77:57:ab:5f:3a:a8:4e:af:c0:45:de:a3:84:04:1e:
f7:c2:db:15:3c:f0:af:a8:7b:f9:bb:14:11:ec:0b:d3:df:71:
c8:09:44:c6:87:5c:92:85:04:24:8c:98:16:77:cf:82:9b:9f:
47:7d:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:21:05 2026 by rpki-client