Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
File: oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft (raw, json)
Hash identifier: jz6Wq1x8D39AktFnKq88ebz5F2bE4zMbeuI3fP7eWls=
Subject key identifier: 1C:5B:AF:BD:BE:7D:5C:74:05:B0:D6:9E:06:BF:4F:D4:9B:1B:2E:61
Authority key identifier: A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
Certificate issuer: /CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Certificate serial: 019F85D6494C25399690CD5F6614ACF6B121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:40 +0000
Manifest this update: Tue 21 Jul 2026 18:00:40 +0000
Manifest next update: Wed 22 Jul 2026 18:00:40 +0000
Files and hashes: 1: 3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa (hash: 9PxpYct4ZYiB2ZINKKmfgomCpciPW9Ne+TgfTCByrxM=)
2: oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl (hash: CWaTFidNmt78/IYmD/jOMy2Mjyo8kLUPX1hjHbf/qjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:49:4c:25:39:96:90:cd:5f:66:14:ac:f6:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Validity
Not Before: Jul 21 18:00:40 2026 GMT
Not After : Jul 22 18:00:40 2026 GMT
Subject: CN=1c5bafbdbe7d5c7405b0d69e06bf4fd49b1b2e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:7a:20:58:89:18:03:e4:20:fa:c9:5b:ee:
ff:c1:03:3b:2a:bc:3c:d1:88:69:48:8a:3e:46:03:
a1:3c:1d:34:4b:e6:89:95:cd:5c:64:ca:45:02:8d:
83:2b:2b:12:56:af:dc:ed:1d:cb:89:0c:c4:95:5b:
0e:85:4c:c2:3b:ab:76:9c:5c:d9:45:ba:10:d5:38:
ca:a4:68:e5:7d:43:40:ef:ee:2e:40:76:83:66:ce:
df:c9:c5:5e:09:99:48:da:8f:8e:d7:43:2f:df:ca:
1f:8a:5c:a7:bc:bf:09:59:b5:b4:1f:20:a3:f0:89:
c2:bf:ef:ce:a8:1b:2e:1d:03:68:d4:41:67:6f:11:
e6:0f:e8:ab:3c:f4:9b:7c:3e:e8:42:0b:49:16:c1:
0b:15:32:b5:07:fb:e1:e2:7d:43:23:42:84:0b:59:
b9:8d:b5:9f:bf:03:65:48:f6:33:5f:73:ee:a4:a6:
d7:47:17:10:90:79:7e:e7:d0:c6:5c:3f:25:e5:0f:
b2:fe:99:07:e1:d6:f2:6b:a2:1c:7b:71:96:42:e7:
c4:99:09:42:4c:df:4b:4a:7e:9d:c4:89:8a:9a:de:
96:b9:0d:5d:20:b8:74:f2:b0:c8:02:cb:3f:30:25:
10:41:76:1f:10:9c:44:a5:34:8a:66:b1:3a:4a:38:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:AF:BD:BE:7D:5C:74:05:B0:D6:9E:06:BF:4F:D4:9B:1B:2E:61
X509v3 Authority Key Identifier:
keyid:A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:de:eb:78:33:83:03:f3:54:ac:55:d1:cc:d9:3c:ee:c2:c0:
9c:5f:75:bc:07:29:22:06:89:d5:30:0b:f9:96:4a:48:36:62:
c3:3c:ef:f4:04:b3:e3:b0:60:5e:ab:5e:d6:e5:10:6d:2a:eb:
a6:f7:18:f0:98:3d:21:c4:82:f0:3f:b9:07:2f:d6:ce:6d:56:
3c:e4:53:a4:88:53:47:50:c9:5e:4e:98:b6:c8:ce:15:8b:d3:
11:49:df:e9:59:c5:1e:c0:22:91:f5:98:30:f6:51:5c:e9:6e:
da:ea:e7:5d:ff:98:0e:82:93:f1:23:6b:b7:b8:f9:66:a6:ea:
20:aa:ba:c7:31:42:93:e6:fa:de:0e:ce:26:4f:00:36:3e:8d:
f9:de:13:26:d4:74:3d:70:f1:f4:2f:0c:46:ca:c9:d9:b1:d6:
8a:f1:8e:88:a4:0b:ca:63:0c:1c:92:46:08:08:28:78:15:02:
b2:f7:dc:3c:27:f7:e8:3d:ec:61:f9:b1:22:0a:5e:70:33:78:
0b:7b:34:c4:af:be:01:a2:3b:47:df:8d:9b:42:f1:0b:b5:2f:
93:85:34:73:44:5d:a3:ab:6f:91:f4:bb:3c:c3:b8:6d:7f:f7:
85:42:f7:ab:d6:26:9d:df:ee:30:98:7e:0d:4e:ca:bd:7b:0a:
63:22:a7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:35 2026 by rpki-client