Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: Al/jBHW+MmYyCz29hk0s7Fw7WhF185BkoL7PNkwYATA=
Subject key identifier: 06:3C:92:29:99:06:C6:A2:DE:5E:B1:3E:96:5E:8B:BF:E0:31:DC:9B
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 019FD72A14D59419DE64D1A2D26191FD9B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 19F1
Signing time: Thu 06 Aug 2026 13:01:27 +0000
Manifest this update: Thu 06 Aug 2026 13:01:27 +0000
Manifest next update: Fri 07 Aug 2026 13:01:27 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa (hash: JS+2KcEt2B3UHtm7B1l/JkKD38qf54IF2F3MmmklzBA=)
3: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: bNm5ESqOTak6MKiPhRGneZE/mO5pZNEGZWn+JGRGEMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:2a:14:d5:94:19:de:64:d1:a2:d2:61:91:fd:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Aug 6 13:01:27 2026 GMT
Not After : Aug 7 13:01:27 2026 GMT
Subject: CN=063c92299906c6a2de5eb13e965e8bbfe031dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:09:1d:f5:eb:b5:39:fd:d6:e1:51:cc:96:
d7:79:45:9f:5e:d2:f5:85:3e:8b:c1:a2:7c:1a:e4:
fd:27:86:25:2c:cb:0d:a3:d7:c3:5f:01:87:c3:eb:
64:8c:bc:fd:b9:ca:c5:7d:9f:de:65:92:1f:ab:2b:
3b:70:05:19:4f:0f:cc:91:ac:6e:23:6d:c0:59:db:
80:11:0f:ab:ef:fd:5c:fd:29:ef:30:da:4b:08:5e:
a4:47:6c:1d:d9:63:57:bd:66:13:ce:b0:bc:2b:57:
8a:1d:e4:fb:a0:95:bd:bf:33:32:af:83:fd:9a:11:
4e:71:7a:06:be:c8:0a:4e:5f:e3:97:37:9a:69:c5:
8a:21:21:26:08:8d:7c:d1:34:cd:00:bd:6b:aa:f0:
0b:0f:4f:9e:98:24:1f:8c:c7:e4:c8:5b:0d:f2:f7:
89:80:41:c1:5d:37:1c:e2:e3:4d:0b:1f:63:8b:2c:
c6:19:72:8e:e8:f4:09:c3:07:4d:35:a1:2f:f3:94:
fb:37:df:8a:61:f4:4f:30:72:d3:83:40:1a:ca:59:
fe:64:a4:c7:ae:90:f8:1b:51:b8:33:8f:23:85:90:
93:5f:14:7e:5e:7e:10:7e:42:da:34:82:e5:43:e7:
04:83:14:c0:b1:59:f5:da:ad:5b:ac:56:e8:0b:d4:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:92:29:99:06:C6:A2:DE:5E:B1:3E:96:5E:8B:BF:E0:31:DC:9B
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2d:f8:bb:48:fa:1f:6b:84:b5:7b:93:e8:2d:b7:07:ec:72:
a2:ab:a3:07:e3:f9:3c:79:01:e1:ab:5d:96:2c:af:f1:34:de:
47:85:4a:d8:94:b0:5c:e1:4f:3e:12:24:3f:02:13:9d:44:d9:
0f:9b:0b:1b:19:af:0e:0c:6b:16:e1:fa:16:17:f0:91:4c:8a:
29:fc:89:5e:bc:f5:49:d4:55:95:6a:87:36:fb:f2:fa:6f:52:
7d:d0:8a:05:b4:96:c4:19:2a:99:a1:10:8b:d6:e5:ec:00:6c:
02:f3:e6:72:5d:0b:73:d3:53:90:4d:b7:0f:44:02:bd:c1:7d:
f5:a0:65:e5:98:e4:ef:9f:ae:38:65:ba:aa:e7:d0:b6:36:87:
6e:1f:02:0e:78:d3:d5:55:35:d8:cb:d4:db:58:0c:d8:49:3d:
1e:ba:0d:a5:77:51:16:88:0e:59:a2:68:6c:75:79:1f:cc:dd:
00:f6:9c:b4:d9:7c:c0:16:c0:02:a7:a0:e6:1a:e9:14:d3:ae:
11:ee:b4:c7:db:06:28:bc:18:da:42:77:ef:c8:4a:ef:55:93:
0c:44:21:19:b4:59:4c:0c:f5:d8:ca:d4:09:de:dc:9c:34:81:
98:d6:9f:3f:bc:f3:ec:1d:34:68:fa:44:0a:cf:95:e4:6d:41:
3d:0f:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:52:31 2026 by rpki-client