Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: 0kLeXeT0+05ga5E0bOyLKJMTogdciVr3kut7rD4yHx8=
Subject key identifier: E6:E4:E9:D7:62:CA:BD:E9:82:10:4F:2D:D7:43:7B:8E:5F:EE:F0:E6
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019F85D68E6B5A3B61F570C72798BD46891F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1582
Signing time: Tue 21 Jul 2026 18:00:58 +0000
Manifest this update: Tue 21 Jul 2026 18:00:58 +0000
Manifest next update: Wed 22 Jul 2026 18:00:58 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: hFeF+u1ZNZFFrF65Q8HPgtlNGxDLdEw0ZsNX7rAbpy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:8e:6b:5a:3b:61:f5:70:c7:27:98:bd:46:89:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jul 21 18:00:58 2026 GMT
Not After : Jul 22 18:00:58 2026 GMT
Subject: CN=e6e4e9d762cabde982104f2dd7437b8e5feef0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:4b:cf:79:02:e5:5d:b6:66:67:8f:d6:55:
1b:32:6d:4e:74:0b:0e:9a:0c:35:a5:6d:34:46:b5:
97:da:f2:7d:0f:26:d1:dc:0e:0e:d3:06:ec:e9:e4:
47:7d:b7:33:5d:06:e4:a1:f6:6b:e1:50:1c:9c:3f:
61:bc:ce:96:19:34:fd:41:98:6e:ef:85:cc:60:7d:
11:f6:cc:34:65:25:48:c1:d2:79:03:c8:ec:5c:fe:
07:02:24:09:97:23:70:0b:3d:18:0b:30:c3:56:61:
34:b1:5f:e5:06:e9:97:f0:94:09:67:40:56:59:ca:
7c:29:07:e6:6c:2f:05:fe:ff:e0:08:98:18:18:21:
e0:25:af:6e:aa:ce:ea:16:45:f3:55:7d:e2:96:96:
17:96:70:68:6e:3c:94:54:f1:0e:ec:3a:a9:80:b6:
ba:1f:87:86:a1:cf:d9:68:dc:2d:e3:ba:32:ea:b3:
b5:4d:69:41:a3:d5:2e:59:75:94:5f:a7:0b:3e:70:
15:6c:a5:7c:b8:ec:94:fb:57:47:a0:06:07:eb:f0:
f4:ae:ea:d6:40:ec:8f:60:d5:52:75:7d:18:0a:be:
e2:de:4a:10:d4:ce:02:b9:52:98:99:9f:ec:49:c0:
94:09:74:aa:a6:65:88:d3:e5:ec:5c:3a:d8:03:5e:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:E9:D7:62:CA:BD:E9:82:10:4F:2D:D7:43:7B:8E:5F:EE:F0:E6
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0d:2e:20:d6:01:a5:ea:13:65:a9:3b:5b:ee:e9:e4:7b:33:
2f:ac:f9:f7:99:8a:8a:7a:56:db:60:9f:e6:f5:0a:5a:cf:04:
13:9a:08:f1:00:e8:ac:e9:8a:57:41:e2:40:35:44:2b:93:fc:
9f:25:ab:a5:97:c0:d0:30:6b:bd:16:2f:7a:aa:e5:5e:2d:e7:
a8:61:e5:36:ed:9c:eb:9c:e6:79:a9:b2:a6:bc:89:7a:e8:66:
37:82:7b:e9:3d:55:72:8e:4a:04:46:e4:67:57:c1:75:1a:92:
f2:b6:aa:7e:65:45:fc:a0:41:42:66:23:f9:f0:1d:f2:0f:15:
51:0a:f4:f3:c5:f8:b0:88:82:c6:75:1f:e2:79:9c:a5:c0:c3:
71:65:27:b3:0e:09:fb:7f:2d:5d:3d:68:0a:bb:99:7c:f0:10:
19:a8:e3:d3:ea:62:38:23:e3:35:3a:58:e4:07:ef:71:8a:e5:
b8:ed:5a:ad:3e:2b:a8:a7:dc:68:69:7c:e7:35:be:96:62:af:
31:58:23:e7:23:5f:e6:d1:6c:7d:d9:b5:a0:f9:4f:ab:30:0f:
a9:16:e3:05:a7:46:f1:3d:77:68:71:04:b8:5b:01:8e:e1:00:
28:42:34:43:78:8d:09:a6:53:6c:d4:6d:d8:b0:1e:7c:93:2a:
21:ac:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:24:26 2026 by rpki-client