Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: Z00BHeLVD6s/yG3UsqzFGjgvZk+CdtAMBK8XCjLZPis=
Subject key identifier: 93:6E:3B:DB:2E:80:A9:B2:A6:8F:B2:93:D2:0C:20:61:98:B0:CD:E6
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019FA2293D16BFD646190BB82A74AAD0CF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 18A8
Signing time: Mon 27 Jul 2026 06:00:39 +0000
Manifest this update: Mon 27 Jul 2026 06:00:39 +0000
Manifest next update: Tue 28 Jul 2026 06:00:39 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: HrqCVZfJ8+JUnbF+hXPlrJisewMbAb2to3gqamQN6OI=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:3d:16:bf:d6:46:19:0b:b8:2a:74:aa:d0:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jul 27 06:00:39 2026 GMT
Not After : Jul 28 06:00:39 2026 GMT
Subject: CN=936e3bdb2e80a9b2a68fb293d20c206198b0cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:11:99:3e:e5:71:5d:bd:78:c5:35:9d:b2:
6f:7f:29:19:2e:8b:7a:0e:24:40:a5:b1:00:77:c3:
00:25:cd:39:4a:26:82:5b:4a:7b:9f:22:12:be:48:
39:2b:7b:86:9b:5b:ea:b1:45:7d:61:17:e5:8f:c3:
85:c6:b7:62:3f:fe:20:3c:03:9b:3c:66:a7:8b:e5:
77:23:a0:02:73:55:af:bd:88:dd:f2:57:8a:bf:85:
39:2a:f9:e7:20:a3:5b:e4:72:c5:8b:27:06:81:af:
bc:dc:d3:1d:09:5a:14:f9:a5:0a:43:56:20:7b:8f:
8b:6f:0e:73:bb:15:3b:71:fd:0b:8b:e1:5f:2d:6b:
93:7f:f0:69:52:6e:86:2a:05:73:92:eb:f2:57:40:
a0:9e:f4:13:6c:66:ae:ec:85:ca:60:9a:41:05:09:
0e:c0:ea:e7:90:89:6c:88:91:f3:46:e8:6b:05:42:
f6:9d:a9:db:52:eb:01:99:1f:16:ed:12:74:1f:ee:
61:0c:c8:32:79:a5:17:6a:cc:43:8c:6c:1f:c9:03:
15:5d:4c:02:e4:dc:33:96:46:a5:f8:14:22:f6:67:
40:ab:78:e3:4a:4e:95:03:cd:a3:c4:93:ae:b4:e1:
6d:63:dc:18:fe:8e:af:46:1e:84:2d:7f:bc:5a:04:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:3B:DB:2E:80:A9:B2:A6:8F:B2:93:D2:0C:20:61:98:B0:CD:E6
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:48:23:b9:85:41:6c:5e:53:70:1d:db:5b:e4:a6:c5:f6:89:
ba:39:31:f9:b7:a3:09:a5:f4:1a:11:49:be:da:06:14:f6:9e:
19:d8:f4:7d:35:b6:3c:fd:3b:c8:c7:e1:e8:59:1c:2e:1b:92:
d8:1b:78:cd:e3:6d:9d:5b:96:32:56:64:15:d1:3f:e5:af:76:
4a:84:52:80:cd:77:dd:b0:24:42:3d:85:39:1e:c2:b4:86:bd:
8f:39:75:ae:98:8c:91:55:70:cc:6c:81:f8:69:a2:69:3e:b6:
31:b4:b8:59:bc:3a:a4:07:ca:5c:80:84:5e:d4:59:a5:b9:8e:
2d:7a:7c:84:b4:d3:ef:cd:db:78:27:49:f7:0b:cd:f8:22:37:
64:07:ff:b5:e2:19:f9:47:08:0c:24:24:59:74:75:c0:5f:5c:
be:67:93:ec:28:ab:9b:2e:7b:d5:6b:f8:d7:c4:7d:62:3d:f7:
4e:07:f7:0d:2c:04:b5:14:fb:4c:82:7f:c2:d0:a9:b2:f1:b0:
fc:e4:97:38:bd:81:5c:51:93:a9:d4:fd:58:fc:d3:3e:38:84:
7d:9d:85:6e:56:34:b9:d3:c8:8d:75:79:12:c2:30:4b:9c:e3:
93:fd:bd:5f:39:27:1c:17:05:3c:95:aa:90:c4:d7:47:5a:42:
0d:4a:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:39:56 2026 by rpki-client