
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: Gvp5b5b7OXie97BNif0sCTjaSFDRxFJ2zC2C4irVaao=
Subject key identifier: 87:9B:1F:60:7E:B5:B5:30:B5:94:33:6C:71:EF:14:17:7A:EB:E4:9B
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019FA14D37EB02BDD2BE2ED85D56615F45B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 02:00:20 +0000
Manifest this update: Mon 27 Jul 2026 02:00:20 +0000
Manifest next update: Tue 28 Jul 2026 02:00:20 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: 1P66lxXYLe9ZoAMBkhs2+UgIp5+c2eIYwBNzYjGP4ds=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:37:eb:02:bd:d2:be:2e:d8:5d:56:61:5f:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jul 27 02:00:20 2026 GMT
Not After : Jul 28 02:00:20 2026 GMT
Subject: CN=879b1f607eb5b530b594336c71ef14177aebe49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:7e:f8:50:39:cc:b9:e6:c5:8b:af:f8:11:
21:5d:42:6f:d2:1d:78:72:24:9d:c8:e5:b5:f2:48:
85:ba:3d:95:0f:e6:08:50:4d:8b:85:ba:39:d2:02:
40:5d:d6:d7:32:6f:37:de:00:b6:65:75:5b:dd:a1:
83:29:8b:f1:4a:ec:4a:40:11:2c:cc:82:85:ea:c6:
b5:88:9d:61:d9:af:e9:51:6d:e5:49:cd:5e:52:6f:
6e:29:0e:ce:a7:a2:c3:52:1e:da:c8:24:a2:12:c5:
e9:38:97:1b:d6:7b:e5:46:39:15:39:3d:00:84:a2:
42:8a:90:6c:64:95:96:67:ee:86:9c:e9:76:69:66:
11:18:90:72:47:94:ee:92:22:33:37:d9:43:69:66:
3d:cb:45:50:25:b2:cd:f0:54:4b:43:b2:e5:33:3a:
30:82:5a:55:65:3a:f4:fc:32:00:4c:d7:0c:52:0f:
03:29:54:f0:94:85:32:89:e9:bb:c3:c2:bf:4d:90:
17:cb:cd:09:2b:f2:0f:18:b8:f7:13:13:57:7b:d5:
be:e2:59:18:58:c2:bd:0f:42:22:5f:f2:5c:b6:f3:
f7:32:9e:14:e3:29:3a:f8:04:95:73:da:87:40:ef:
7d:d7:7c:3b:17:87:90:34:7f:76:e6:fe:9e:db:01:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:1F:60:7E:B5:B5:30:B5:94:33:6C:71:EF:14:17:7A:EB:E4:9B
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:18:ec:41:c8:af:1d:5a:46:2a:cf:1b:08:00:4b:c7:f9:e0:
2d:a1:d3:e6:cc:34:aa:b5:09:07:c0:47:5a:c0:44:0f:be:72:
fc:fb:50:a2:14:74:28:05:35:a4:2d:d6:42:60:e6:ae:b3:6e:
5f:8a:a6:b4:c5:c3:ab:7b:92:9b:ca:21:dd:1e:e1:06:fd:d3:
c3:9b:bb:ca:6f:5c:4c:ba:68:ab:79:7a:bd:80:f5:29:d1:cd:
44:01:6f:02:a9:d3:36:0b:44:29:8e:30:d2:ae:e2:12:bd:08:
49:4b:97:8f:a3:cd:bb:67:15:e5:85:ce:d7:0d:64:b4:d4:c7:
ff:c4:6c:30:ac:ef:bf:29:89:bd:ab:e1:31:1a:05:92:55:2b:
48:0e:db:f8:14:4a:23:c0:c2:22:82:a7:56:4b:37:3b:4f:2a:
f6:4e:be:c5:77:4c:b0:00:3a:07:a2:6b:ba:37:64:c0:00:bb:
3b:e3:1b:fe:43:c7:04:cd:58:7b:18:1f:d3:34:d5:10:8a:e1:
19:8f:ec:dd:c7:3f:b7:0b:4f:98:68:3d:14:88:d6:84:6c:a6:
20:22:77:d2:40:1f:56:c9:d6:f4:ba:7c:4f:3a:86:fb:49:12:
31:1f:a9:d1:85:03:ed:07:7a:c3:79:6f:00:44:f4:f7:fd:92:
c1:af:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:16 2026 by rpki-client