Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: zViLcq7XkOs9U0M/KXFI/eATJz++y4gkIWEy6W53ZZA=
Subject key identifier: 2A:90:21:A1:9D:6A:CE:6D:31:59:4B:69:34:3B:04:77:02:D4:90:1E
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019F84FB26DF8889D05DE03CD5918CB59525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 14:01:19 +0000
Manifest this update: Tue 21 Jul 2026 14:01:19 +0000
Manifest next update: Wed 22 Jul 2026 14:01:19 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: SZXEvq9Iom1M9vjgv2Hj/4D+kKMHDpX+19a0sfFe/bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:26:df:88:89:d0:5d:e0:3c:d5:91:8c:b5:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jul 21 14:01:19 2026 GMT
Not After : Jul 22 14:01:19 2026 GMT
Subject: CN=2a9021a19d6ace6d31594b69343b047702d4901e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:4d:53:1b:33:62:82:03:63:4f:33:ed:59:
62:aa:cf:db:2f:92:c2:8f:57:ed:86:35:ef:77:67:
6a:0f:f4:5f:23:af:57:8e:8c:65:48:41:6e:a5:45:
c3:63:b1:42:93:d4:37:92:c6:89:b2:9a:b6:27:25:
c0:43:61:c5:f8:6e:5c:34:c8:e9:76:59:df:4a:34:
34:14:f6:0f:ff:7b:a5:89:33:85:f1:24:65:49:19:
35:cd:27:f0:78:1c:9b:47:ca:cd:52:82:db:81:d0:
f9:87:bf:d0:96:d5:17:40:ae:37:9a:ee:63:e9:30:
21:f2:68:22:2b:ee:ae:22:40:08:2b:45:41:6e:95:
10:df:2d:f9:67:a1:eb:6a:20:dc:59:54:5a:ad:02:
fc:5f:81:b2:66:a2:4b:a1:d6:9f:15:d2:63:33:25:
85:72:05:d4:78:e9:50:11:fe:ba:b2:4e:3c:7f:a1:
92:fe:3f:f8:e5:f5:cf:7e:00:48:3a:e7:e9:ae:65:
cd:e3:74:53:71:c2:77:fe:c9:f3:9a:4c:f5:81:04:
a9:93:4b:16:00:f9:9e:da:6a:1c:ae:8b:b7:bb:30:
bc:12:ae:66:3e:29:5b:12:17:f5:57:0d:e2:db:f0:
ea:40:6c:3a:65:d6:cc:68:fd:f2:e4:10:66:2f:60:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:21:A1:9D:6A:CE:6D:31:59:4B:69:34:3B:04:77:02:D4:90:1E
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:33:39:29:d9:42:6b:5e:74:52:24:02:74:4c:7c:c0:66:
56:b9:54:4b:cc:04:60:3d:63:68:54:49:f4:f8:43:2f:4a:c0:
d2:a2:6b:d7:35:6b:38:d4:5f:e0:95:90:25:52:dd:7c:ef:ba:
cd:10:83:2b:2b:14:7a:76:68:6d:ae:12:fa:44:e5:f2:c5:91:
5d:d5:4f:fc:e3:5a:84:17:7f:c7:4f:48:d1:18:01:38:5c:40:
fd:ee:2e:29:37:24:8c:60:7f:f5:42:33:21:01:b4:8f:ef:93:
cb:54:8d:f2:0b:93:e6:f9:d0:03:c5:77:1f:68:25:5c:ed:0b:
ab:18:66:97:45:5b:2e:39:c9:ea:a4:67:3d:28:d8:d4:f6:34:
39:ff:8d:2a:e2:41:61:75:36:6b:35:20:22:43:61:f7:43:d2:
f0:e6:58:31:ee:6c:16:85:d2:e7:95:14:b7:78:10:8e:b3:5a:
7b:37:39:f1:26:8d:f4:8e:b8:01:86:b2:79:bf:fb:b1:fd:58:
e9:7f:bd:cc:7a:fd:69:43:ca:ff:88:a0:2e:a5:69:12:7d:f9:
28:6e:e7:fd:4d:11:5d:65:14:98:a4:91:ff:52:84:40:1a:cb:
01:e2:7b:eb:65:7d:73:ad:ee:bc:9a:46:75:6b:7d:72:55:3e:
6f:0a:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:13:30 2026 by rpki-client