Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: gsPgMukHGm2e6J59giRSYG67D3pQuS81G3kEw3j6DZg=
Subject key identifier: CC:AC:C3:E5:96:FF:42:46:A2:05:68:49:8E:12:F5:47:33:EF:11:94
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019FA2973E15BF32B76626CE28C16CF8AA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 019E
Signing time: Mon 27 Jul 2026 08:00:48 +0000
Manifest this update: Mon 27 Jul 2026 08:00:48 +0000
Manifest next update: Tue 28 Jul 2026 08:00:48 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: xnMT8/A5REO2WQXl9h1fKX4yiaLCNbk1W8KuhXCm/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:3e:15:bf:32:b7:66:26:ce:28:c1:6c:f8:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Jul 27 08:00:48 2026 GMT
Not After : Jul 28 08:00:48 2026 GMT
Subject: CN=ccacc3e596ff4246a20568498e12f54733ef1194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:7d:53:a9:34:46:f8:1f:10:4d:f3:43:26:
5a:1c:5f:b6:d0:ff:c6:3b:b7:ae:14:d9:52:90:da:
58:4c:df:d3:d5:40:15:85:ad:e2:82:33:78:9a:c3:
37:ec:c2:af:d1:02:c3:e1:bb:83:92:46:5d:6d:f1:
fa:dd:9c:af:b5:9d:f8:94:e9:4d:dd:36:e1:d6:0b:
01:a7:76:32:27:50:51:3b:5f:c2:9c:f8:00:42:50:
a7:34:f3:0f:73:d3:25:a4:f3:eb:70:cf:90:ca:9c:
56:ca:8c:4d:7f:6f:c6:02:f9:d4:1d:bf:6c:1f:08:
c5:3b:54:8f:cd:d0:35:b1:52:62:de:a6:2f:f2:12:
ff:a6:d7:86:cf:5c:ab:33:ce:50:d7:f9:22:c3:00:
23:52:27:40:50:a1:92:df:7f:c9:15:74:b0:7b:b2:
e4:9a:d6:f2:09:24:48:e7:f8:15:2e:ae:ba:cf:7b:
f3:e6:a0:2d:de:e9:75:44:6a:9f:6b:f3:01:72:36:
12:0a:fd:15:9c:dd:b1:fb:20:63:43:bb:53:18:90:
c9:22:a9:46:b5:88:78:76:61:7f:04:77:c3:bd:62:
3f:79:13:fd:74:ba:63:69:1e:a1:d6:20:d5:b8:59:
11:76:6d:1d:ae:e2:db:f0:22:d8:dc:7b:8e:5a:b6:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:C3:E5:96:FF:42:46:A2:05:68:49:8E:12:F5:47:33:EF:11:94
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7a:13:9c:5a:7a:f3:da:c4:eb:0d:83:61:1a:eb:87:09:60:
e0:98:f3:95:55:7e:7b:6c:45:49:06:00:e6:49:bb:52:98:d2:
df:0f:b8:be:3c:18:d9:48:b9:de:8c:7b:09:22:7b:ec:80:a6:
5e:65:35:09:9b:44:43:44:45:fa:14:3b:f8:92:8a:cf:c0:2c:
15:a4:ac:6c:19:e4:04:64:a8:ca:a6:57:bc:3a:8f:2a:f7:96:
16:af:4b:99:d9:d8:91:5b:96:32:0f:1d:cf:84:1f:29:35:76:
30:ed:d7:7d:22:f4:ca:df:50:7c:6d:4c:21:d0:d0:72:b2:24:
0c:be:31:c0:16:45:51:5d:d0:73:35:03:95:d6:a2:c5:8e:7a:
4e:8b:88:90:9a:d9:be:ec:86:3c:cc:0c:c7:43:15:8e:53:72:
da:fe:89:8b:b0:d1:5b:38:e7:fe:fa:6b:0e:31:35:bf:fa:e2:
ee:04:60:1a:a1:ce:fd:e6:91:7c:61:d1:73:bb:0a:b0:87:ff:
fa:bf:f9:15:de:63:5b:a3:0f:4c:82:c4:de:50:d4:9d:32:3e:
a9:65:a8:71:80:e0:39:f3:84:bc:5d:e2:b0:c0:ee:ab:fc:a3:
1b:81:0b:8a:5d:1c:13:ee:6e:8a:e0:a3:f4:af:c1:a4:77:f0:
d8:a8:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:21 2026 by rpki-client