Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: plSjuXvopu3m9RHbfo51vWXKydVsEVHDg12bXBnX0lk=
Subject key identifier: 20:9F:F3:95:05:A1:F6:7D:2F:AD:8C:35:AA:9E:FB:EE:3B:DE:F9:72
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019FA44E65E8E50EC9875A3F1290D4A5DC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 19DE
Signing time: Mon 27 Jul 2026 16:00:28 +0000
Manifest this update: Mon 27 Jul 2026 16:00:28 +0000
Manifest next update: Tue 28 Jul 2026 16:00:28 +0000
Files and hashes: 1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
2: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: pQS27m3Q7yMqycqhORPkX2WTrTqeEcSp34cSQcsTUwY=)
3: rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa (hash: 6GGMw5jhv2E0iY7GXeItoH474mvVadIlFXmHfEnSu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:65:e8:e5:0e:c9:87:5a:3f:12:90:d4:a5:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Jul 27 16:00:28 2026 GMT
Not After : Jul 28 16:00:28 2026 GMT
Subject: CN=209ff39505a1f67d2fad8c35aa9efbee3bdef972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:5a:09:86:fe:bd:d5:48:8b:95:30:48:0b:
c1:47:db:99:b1:a0:fc:ad:5b:af:b1:06:0e:2b:19:
65:be:5d:ad:18:20:31:e9:99:b9:bc:5f:3a:47:be:
f2:05:7c:86:1a:52:09:03:cb:aa:7b:6f:70:e8:6f:
0c:c0:82:bd:f4:40:58:69:56:fc:e4:13:a2:f1:6c:
00:28:bb:6c:2a:df:bf:8b:70:70:89:9f:1d:3e:f0:
9e:a1:9e:dd:a6:53:c9:16:b2:8e:31:87:82:a6:6d:
ce:73:aa:18:e8:71:1a:72:36:d3:74:30:d9:7c:fa:
ac:dd:e7:35:07:07:2b:77:c3:b2:80:35:a0:81:81:
0f:3a:db:f5:fd:fc:d2:af:c1:4b:13:fb:06:c3:82:
a6:dd:4d:27:2e:9f:30:34:71:ed:fa:23:fe:79:dd:
c9:a8:56:73:c0:03:21:02:0f:8a:40:f5:6a:1a:9b:
41:0f:48:38:9e:8b:8f:c0:05:ae:64:5d:25:0c:72:
ab:9c:f6:43:b6:48:c8:cb:b3:23:c3:8b:aa:7c:26:
7f:e2:e2:87:19:f8:24:65:a2:fb:2d:86:d7:42:84:
cd:19:15:fc:5f:da:c8:a8:a2:9a:f4:01:1b:6b:a3:
ec:53:d3:49:87:fb:60:03:f4:aa:34:9d:81:c1:bc:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:F3:95:05:A1:F6:7D:2F:AD:8C:35:AA:9E:FB:EE:3B:DE:F9:72
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:53:24:92:98:21:1e:fd:a0:be:de:06:8c:10:c3:28:17:
5f:57:e8:30:48:67:1a:61:a4:fe:79:46:bb:8b:0a:1c:4b:01:
d7:c2:97:24:46:8e:28:0d:d5:8a:92:e3:40:c9:eb:bf:b4:28:
9d:61:94:70:2d:14:57:35:6a:cf:e9:b2:c2:0f:f3:50:81:bc:
a8:e1:09:4c:db:75:7c:48:d0:d2:18:60:5b:66:3d:da:26:36:
9a:d8:c1:90:73:6e:27:00:fe:f4:a7:95:a4:f8:58:40:46:6d:
30:33:5f:c1:24:63:e0:64:8f:e0:07:29:f5:62:88:b0:bf:fc:
5e:2e:43:73:36:61:43:65:4a:d9:aa:9a:ae:06:c9:d5:91:d4:
42:d6:5f:5c:4e:a0:77:fd:42:3f:82:9e:6e:6c:0e:7c:4c:d2:
5c:53:c7:bc:23:86:19:ab:ad:7c:9f:dc:f1:af:0b:93:b1:fa:
1e:60:fe:21:42:ad:88:72:3e:7f:e7:a3:ef:1a:cc:f1:b2:89:
b1:a5:28:a1:bd:d9:6a:bf:6c:a2:08:75:a2:12:f2:3a:5f:00:
58:59:0a:f0:ab:76:ed:7e:12:98:fa:86:4c:da:7b:2f:6b:31:
29:f1:25:6e:42:21:32:d6:05:73:a0:7d:02:0d:41:7e:7c:77:
cb:f1:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:29:21 2026 by rpki-client