Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: UdWK+xxdFzrAyheJWjl8+FSxySxYBP24hmsocoer6/g=
Subject key identifier: F9:71:E3:43:8A:64:CA:57:3C:21:F8:2C:3C:9C:71:0B:BB:25:66:F3
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 019FA071C9475649DF06445251EAF287B905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 14BB
Signing time: Sun 26 Jul 2026 22:00:39 +0000
Manifest this update: Sun 26 Jul 2026 22:00:39 +0000
Manifest next update: Mon 27 Jul 2026 22:00:39 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: wWyyYBTpKGH0tAzcmfrkIk6fwd0T+0fI87GHyZYci6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:c9:47:56:49:df:06:44:52:51:ea:f2:87:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Jul 26 22:00:39 2026 GMT
Not After : Jul 27 22:00:39 2026 GMT
Subject: CN=f971e3438a64ca573c21f82c3c9c710bbb2566f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:49:e0:3d:2c:5b:ca:fc:af:3a:da:96:b3:
6d:ae:0d:f3:28:21:af:bc:e6:07:00:fb:17:13:5b:
07:39:87:e6:2e:3d:48:42:a7:1f:24:ca:12:79:b4:
06:c1:11:80:1f:cf:df:d5:9c:32:9c:ae:1b:a1:81:
ee:44:00:cf:fd:a6:df:0b:8d:a3:fc:d6:50:b3:7c:
75:fc:c3:d1:2b:4a:39:c3:90:ff:6f:65:6e:46:f0:
d7:d4:99:bb:08:99:48:71:b5:3a:8b:0e:60:af:49:
4f:b8:36:a7:0a:44:ec:32:68:14:96:e1:88:c5:cb:
ee:33:e0:6b:4a:f9:e4:ad:27:2d:dd:d3:35:e6:e3:
ac:54:81:c1:b0:d8:f0:49:fc:19:73:0e:c8:a9:dd:
72:3d:88:04:6b:1b:61:cb:70:11:dd:05:71:fe:c7:
2c:28:75:6b:81:3c:0f:cb:69:bd:0f:7a:09:2b:4e:
10:c7:8f:65:80:e5:40:d9:1e:da:9b:0f:b1:b0:0d:
9c:19:09:8f:99:f7:69:d2:e4:18:36:41:c4:3f:d2:
de:b3:83:f6:3f:50:ce:81:bd:70:df:31:56:bf:86:
f9:5a:13:5f:0b:b9:ce:f9:df:bb:70:37:b3:d6:20:
3d:74:3e:41:bb:51:d2:d7:a3:89:a6:ac:3a:06:ea:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:E3:43:8A:64:CA:57:3C:21:F8:2C:3C:9C:71:0B:BB:25:66:F3
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0d:62:9c:7a:5c:27:a5:a1:a8:ed:5d:17:b0:1f:1f:bf:dd:
c6:87:23:ea:35:81:68:aa:d6:45:d2:5e:3e:30:61:fb:d6:53:
2b:63:db:6f:86:7e:6b:13:a4:04:b3:af:91:1c:30:b0:7e:90:
61:5c:8c:13:bf:0f:1b:73:17:3b:e0:0f:e6:29:9f:05:9b:a3:
a2:dd:74:e6:95:dd:ca:ee:b0:64:2c:69:19:0f:dc:ad:90:da:
4b:51:c3:a9:e1:de:55:7a:e5:91:5b:41:35:87:44:10:d9:0d:
ae:84:09:3a:48:c9:b3:e6:fb:39:e6:80:c8:9a:ab:84:a8:be:
de:98:c9:4a:ae:39:1e:40:a3:85:73:b5:e8:6c:6f:69:d0:7f:
b6:12:33:64:fa:76:16:1b:b7:1d:b8:87:6b:0d:fa:43:f7:af:
74:9c:cd:e8:60:c0:06:8e:5f:97:d8:98:68:45:fc:32:76:ac:
a4:4d:7d:21:9f:0e:fb:75:7f:08:a8:d2:67:7e:3b:d0:dd:b2:
92:e8:5c:3e:38:c6:95:da:79:f1:6e:e7:22:ef:8f:d9:4b:1c:
f4:e2:9d:24:1c:62:48:b9:29:6a:f7:af:eb:49:ba:5a:68:ca:
5d:83:25:e3:61:0e:b5:8e:a7:f0:41:ab:38:bf:9b:79:e4:6d:
dc:37:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:28 2026 by rpki-client