Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: wjKIIyAMXCK0y/aurzMbrtGpSO+6enK9oJ44LHVqAyE=
Subject key identifier: 1A:21:F8:46:F2:25:8F:F1:12:0A:00:B6:F4:DA:45:71:75:EF:F2:54
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019FAE2D8CA2C4BE95A51B11991C1DD322F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0878
Signing time: Wed 29 Jul 2026 14:00:48 +0000
Manifest this update: Wed 29 Jul 2026 14:00:48 +0000
Manifest next update: Thu 30 Jul 2026 14:00:48 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (hash: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: c7cr+cEssnhd4LyY4sulq+Pkm08NoJyoL8DG3fCgeQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:8c:a2:c4:be:95:a5:1b:11:99:1c:1d:d3:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jul 29 14:00:48 2026 GMT
Not After : Jul 30 14:00:48 2026 GMT
Subject: CN=1a21f846f2258ff1120a00b6f4da457175eff254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:c7:9f:b2:d7:01:09:e1:b3:21:cb:a1:ca:
d4:83:9b:56:4f:df:58:95:a6:52:14:ab:ea:5a:ae:
3e:26:ac:91:35:21:bc:e8:93:9f:07:92:0f:5a:2d:
72:40:98:c1:89:66:b1:65:74:17:26:ad:c9:ff:ff:
63:d0:42:d3:ed:0a:af:b5:78:58:5a:11:26:b1:68:
1e:d8:3c:3c:19:d0:72:dc:a4:8f:90:9d:14:57:d8:
db:07:24:34:1f:dd:2c:ae:6f:4d:fa:65:15:d1:90:
60:1a:54:58:86:61:f8:c6:6a:61:e7:4e:cd:f3:3d:
a8:73:55:27:46:27:fe:d6:d6:50:4e:f1:43:8c:22:
09:1c:5f:35:fb:19:08:69:d9:de:c8:cb:f0:c8:02:
87:71:bc:33:c7:ba:ad:5f:1d:88:c0:ba:5c:76:6c:
24:a7:08:28:e0:7c:22:7d:ef:81:8c:f3:76:85:b4:
d8:ed:ea:6e:57:ee:45:a4:a2:2d:c3:e7:9e:f7:49:
53:2e:05:8f:7f:a7:88:b1:2f:42:56:36:7f:05:5d:
1b:7b:fe:f6:18:d8:4f:22:5e:3a:32:0c:68:72:7a:
d4:ba:ec:ae:14:cc:f5:ea:2b:7c:34:69:7b:21:ec:
98:2a:e3:29:8f:7c:21:57:f1:bb:5d:30:2a:cb:15:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:F8:46:F2:25:8F:F1:12:0A:00:B6:F4:DA:45:71:75:EF:F2:54
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:a2:8d:3e:ef:c8:26:77:f3:0c:24:81:29:5b:52:30:0c:
89:9f:ff:d9:46:9a:29:4e:9e:1a:7c:04:f8:9d:95:59:58:0a:
63:ba:bf:5d:42:c6:58:d8:3b:6f:d7:0f:bd:f7:3f:22:17:ff:
24:fb:d8:71:42:d9:b7:9e:b4:f0:4a:e5:33:a1:ef:86:ec:08:
03:1b:87:2a:c8:7c:a9:30:d5:97:9e:74:41:d2:24:9d:47:88:
39:75:00:65:d8:17:85:b9:dc:ee:c9:fa:e1:a9:dc:c9:16:d4:
ad:59:15:47:1e:41:04:aa:12:4e:07:c3:5c:7f:0e:c1:9c:fe:
ed:46:e3:69:ba:87:30:95:e5:54:cf:a7:38:1d:f2:e4:30:a3:
ab:fd:cd:3f:c3:42:a0:df:ee:e2:c6:0b:3f:ee:08:29:b1:35:
0e:a9:45:da:e4:8e:2e:02:fe:d8:12:61:6b:5a:63:58:0c:27:
c9:02:6b:f4:01:07:bb:24:70:1e:16:25:56:49:dc:dd:b2:85:
89:64:97:97:0a:49:a5:1a:f3:42:6f:46:fb:89:77:73:80:d9:
b5:9f:24:36:2b:24:b3:57:b7:d0:bc:72:ad:6f:4c:68:9f:e8:
11:bb:1d:03:e3:8c:0a:cf:74:ab:84:48:33:74:89:fa:76:7c:
f9:e3:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:51:04 2026 by rpki-client