Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: IGFFYAPnsMMi3wd8fORkclFszeCWdPOnR4EtPBUlPk0=
Subject key identifier: C5:C5:B3:F9:72:20:02:9F:C9:DE:B1:08:A6:A8:B7:B9:FF:8E:71:54
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019FA14E3B7A06ECA4E2568EB47A050C6CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 13AF
Signing time: Mon 27 Jul 2026 02:01:26 +0000
Manifest this update: Mon 27 Jul 2026 02:01:26 +0000
Manifest next update: Tue 28 Jul 2026 02:01:26 +0000
Files and hashes: 1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
2: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
3: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
4: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
5: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: Dr6RjWCpR1Jyt+7Q7cmzlQjhmZsgI/1amPE8AUtHcz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:3b:7a:06:ec:a4:e2:56:8e:b4:7a:05:0c:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Jul 27 02:01:26 2026 GMT
Not After : Jul 28 02:01:26 2026 GMT
Subject: CN=c5c5b3f97220029fc9deb108a6a8b7b9ff8e7154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:91:f5:7f:28:9a:79:4f:55:fe:3d:19:63:
cf:c0:73:28:66:30:a7:6d:21:d3:13:af:1e:c7:6d:
1b:01:77:70:de:d4:ac:34:77:86:85:9c:87:c7:11:
4e:8d:08:5e:3b:be:98:b4:dc:6b:fd:7e:cb:c2:de:
d4:5a:d6:80:15:5c:b4:d9:a7:80:23:e1:1b:bd:47:
b1:36:2b:2d:7c:fd:1b:98:3f:64:f8:08:3f:0c:cc:
c5:66:a8:57:db:ff:c2:29:aa:f9:b8:0a:fc:6d:08:
4f:6a:4d:88:42:e9:d4:84:fd:05:04:8f:d9:1a:ea:
b5:69:88:8a:41:78:3c:a8:b7:8e:45:61:2e:6e:e6:
67:6c:96:17:9d:69:27:84:ef:e7:cc:68:21:4c:1b:
8e:66:2c:2e:7f:fc:2c:2f:d8:8c:67:c4:00:4b:f9:
93:3f:5a:85:e6:70:4e:fc:63:0d:e2:ae:27:f4:6a:
27:e1:fd:da:31:50:50:d5:17:9e:15:ca:3e:aa:c2:
d6:b1:e1:2f:da:30:40:d4:a4:f0:71:3f:a2:88:45:
bd:4e:48:cf:0f:cc:fa:a6:e5:1e:0e:cb:b6:af:39:
20:7f:71:3c:72:7c:ae:c8:5b:12:f3:e4:cf:3c:1e:
2d:f0:fa:df:9c:14:7d:03:9a:3d:20:da:ae:a2:2a:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:B3:F9:72:20:02:9F:C9:DE:B1:08:A6:A8:B7:B9:FF:8E:71:54
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:01:54:76:03:e1:3f:fa:d5:ae:45:d7:c6:93:eb:1e:ba:c1:
27:30:a0:fd:c1:e6:2c:da:bd:09:44:c7:79:62:4f:c4:14:94:
4d:45:4d:54:67:67:fa:4f:b7:06:e5:99:b8:74:3e:e6:78:e2:
2d:ef:0c:86:97:db:c8:f9:a4:48:32:e4:7f:e1:69:76:5e:6a:
a6:06:04:26:5f:8d:46:b8:b2:74:65:af:85:d9:e9:b4:61:b8:
a6:73:6d:61:46:6c:ea:b0:f6:88:5c:bc:60:8c:c1:5e:8e:6a:
46:78:a3:0a:fb:b5:f5:1f:46:d7:ed:2b:a2:eb:7b:ee:11:d6:
db:40:93:fd:85:05:33:94:29:e5:1f:c8:b4:1f:f3:44:81:bc:
80:8e:9d:15:45:4d:ad:51:e3:c2:29:88:33:7e:c1:11:81:6c:
ec:73:5d:26:9c:68:d2:d8:06:04:f4:29:14:08:34:dc:ce:31:
43:5c:b5:86:ca:f7:47:01:fb:fc:05:13:35:9f:ea:5c:62:8b:
6b:dc:af:95:35:f7:1c:46:86:fc:de:bd:3a:1d:b3:31:92:95:
24:a6:3a:4b:21:a1:a3:6c:7a:f5:ad:a7:26:b7:4d:67:2c:bd:
85:c5:1c:8b:e1:8f:31:00:a6:93:75:fc:b1:dd:fb:e5:dd:a8:
7c:8e:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:39:22 2026 by rpki-client