Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: FPIs8LfVdo3jOMhwYKipuENeYZ7nuWqdjLxaA2KchuM=
Subject key identifier: 06:3A:7C:AB:A8:4D:31:F9:F1:2E:5A:85:78:7A:6D:9C:34:9B:A3:3A
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019EF91481A706F6B01B644867C28F94A751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0629
Signing time: Wed 24 Jun 2026 10:02:11 +0000
Manifest this update: Wed 24 Jun 2026 10:02:11 +0000
Manifest next update: Thu 25 Jun 2026 10:02:11 +0000
Files and hashes: 1: 38pGZs7H26DrGSXKpy7NGMGvyNg.asa (hash: ZxC1UU+w8hDxkvYvkuN6y+g+zQIOTKFm51EQ8DphQn4=)
2: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=)
3: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: VkqgPOJXoNZ6Hx/AnNmWBo4fIRLNkBXZl9stRx6QGGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:14:81:a7:06:f6:b0:1b:64:48:67:c2:8f:94:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Jun 24 10:02:11 2026 GMT
Not After : Jun 25 10:02:11 2026 GMT
Subject: CN=063a7caba84d31f9f12e5a85787a6d9c349ba33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:52:0b:9b:72:4c:da:f2:e4:83:c4:a2:9e:
8c:5c:35:cf:85:ee:1b:94:73:e1:b6:ea:d9:dc:dc:
97:60:74:b8:93:0f:a9:b4:51:6d:59:a8:1d:83:73:
42:25:6f:77:a3:2d:20:13:a7:af:8a:d2:ba:d3:41:
23:75:f7:c8:16:c5:83:66:80:8e:a1:a3:72:a5:f3:
d0:b2:98:1b:ca:70:76:04:96:64:1e:e2:a4:af:22:
a8:18:90:86:ad:9a:53:5e:88:c1:3c:b0:53:27:be:
95:15:a1:00:7c:eb:63:ea:cd:64:38:22:83:0c:85:
37:cb:f5:bd:cf:f3:e0:d4:39:24:39:bf:ff:79:a1:
fa:3c:38:17:eb:44:dd:53:96:d7:8b:f1:25:1d:d8:
0f:f1:da:3c:0f:9f:9e:61:7d:b5:cc:0a:61:fe:1d:
c6:8b:bc:1e:3e:12:fc:ed:41:f0:90:9e:38:26:7e:
59:94:84:31:f7:ce:a4:b1:d3:e7:00:cf:37:6b:78:
e1:32:40:32:c7:51:1b:f3:f9:d7:04:f8:73:a9:21:
a1:59:0b:24:05:88:48:f2:7e:1c:57:bb:e7:7d:f9:
d5:d5:fe:05:9f:d9:bf:cd:87:ce:1c:3e:91:a5:12:
27:1d:cc:79:ce:34:c2:b7:27:16:ae:82:b3:45:d4:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:7C:AB:A8:4D:31:F9:F1:2E:5A:85:78:7A:6D:9C:34:9B:A3:3A
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:e2:8e:89:97:7c:2b:e1:77:91:94:c7:3c:64:9c:86:4a:
69:5e:d1:78:cc:42:ac:88:37:f0:57:c7:4d:51:40:ac:64:44:
5b:7d:b6:98:b7:ba:3f:c2:f4:be:fd:ff:dd:60:99:36:c7:23:
b5:22:4a:80:ab:ec:fc:6d:78:bf:dc:71:b3:a9:d0:e7:07:92:
71:f9:89:17:fd:a2:86:29:75:47:40:c1:aa:4d:49:fd:75:7c:
b4:57:a6:a7:e9:8a:ee:f5:97:9f:88:1e:be:ed:a0:2c:ee:0b:
f9:1f:fe:18:03:54:81:a8:cd:3a:d5:f8:23:bc:d1:41:f0:9e:
39:12:af:e6:7c:a1:dd:53:b7:90:f7:ea:28:50:20:74:4c:b8:
0c:43:04:f1:c7:16:6f:f3:6b:d3:22:1c:86:bb:b4:6e:be:c0:
81:37:fa:9d:d3:5c:73:06:22:47:13:e2:32:24:b8:1a:10:c6:
78:7c:32:d9:dc:d4:1c:a1:c1:94:74:da:6d:cc:cc:16:23:61:
35:f3:07:a5:19:0b:27:b8:f0:f6:7d:c6:a9:fa:5d:b2:c5:2c:
90:4b:21:3c:25:74:9c:b2:df:45:db:d3:88:80:dd:3c:cc:57:
f8:aa:74:b6:54:b7:d5:1a:1a:24:a5:bd:df:ee:15:56:64:ec:
9e:47:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:04:37 2026 by rpki-client