Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: G8OesKJJWqeAsJINpIz1s8p/L+c0Zl6Kg4ZWNCRJlEw=
Subject key identifier: 25:7F:C8:34:AD:E0:85:A1:DC:80:78:B0:FF:52:A5:E2:D1:F0:34:78
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 019F84FA2E99E7B13FA1ABF28F7D4D6CA02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 1712
Signing time: Tue 21 Jul 2026 14:00:15 +0000
Manifest this update: Tue 21 Jul 2026 14:00:15 +0000
Manifest next update: Wed 22 Jul 2026 14:00:15 +0000
Files and hashes: 1: g0-HGh4bznaFgiFX5KCpF3Q8z70.roa (hash: kuqsXcay0qN76iKLs/AKqPrHvwfsG46t73MVLxZfYe0=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: F+75nSm5SC4EAjE3/DqLF6ySQY4dJB0pC9k51lhybe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:2e:99:e7:b1:3f:a1:ab:f2:8f:7d:4d:6c:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Jul 21 14:00:15 2026 GMT
Not After : Jul 22 14:00:15 2026 GMT
Subject: CN=257fc834ade085a1dc8078b0ff52a5e2d1f03478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:98:ee:fb:ea:06:ee:0b:45:ea:3c:6b:70:
24:2b:2e:d6:1b:64:73:ee:47:be:62:e5:1e:0e:6d:
fa:cc:23:36:a3:01:7a:b2:c0:3b:2c:50:6b:1c:00:
dc:a3:ab:a5:2c:2e:69:29:b1:4e:98:e8:a0:99:6a:
c1:19:72:f2:f6:af:c1:a0:d6:3d:39:1a:88:a1:ec:
38:af:04:d7:b9:77:62:1c:ad:55:1a:37:b2:cb:70:
11:dd:6c:da:a4:4c:a7:3e:af:7b:64:d5:66:eb:74:
a1:cd:4d:af:06:be:39:01:97:71:b7:2d:52:42:78:
8e:32:80:03:60:12:48:03:2d:b6:97:f9:64:11:9c:
07:93:38:92:e6:cf:6a:5b:c9:78:1f:c9:07:2d:c5:
8a:6f:bb:31:98:05:63:a3:a5:09:2c:07:6a:67:ce:
49:98:f6:a7:5a:32:3c:67:9d:95:d3:66:2f:63:39:
8c:5d:31:cc:cc:d5:4a:0f:37:e7:13:e9:09:64:64:
d8:0a:b2:f8:4c:e3:20:9e:69:6d:92:94:3f:0c:36:
cd:68:6e:5c:4a:d9:bd:bb:f2:4e:6c:df:13:3f:37:
62:66:78:7b:fb:eb:c8:0b:c0:27:54:07:23:ec:c8:
2c:05:00:87:fb:e3:b3:c7:9c:2c:20:e6:3b:6d:21:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:C8:34:AD:E0:85:A1:DC:80:78:B0:FF:52:A5:E2:D1:F0:34:78
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:c5:42:40:b2:f0:51:a1:ae:b4:75:af:59:b1:ed:d1:a7:
54:27:81:41:c1:e3:c5:0e:82:97:0a:e0:c9:aa:e5:6a:be:c1:
66:c3:f4:43:cb:ce:3b:f3:e5:1a:9e:1f:88:7e:24:13:18:e0:
b4:2d:2d:3b:dd:a2:a2:fc:c6:72:b8:f4:78:d7:43:f7:b7:b5:
cd:10:17:b8:b2:3c:80:e5:33:d7:50:1c:8f:45:38:2d:e0:03:
74:50:64:2e:ed:10:af:04:49:b5:5f:c4:ae:d9:3a:6a:26:86:
a3:c0:0d:bc:f9:d6:5b:6b:5f:29:14:4c:42:dd:0c:f1:cd:d3:
21:21:e8:71:f7:f3:dc:3f:69:05:61:2e:31:c5:8c:af:25:25:
a6:0b:dc:b0:a1:72:ff:c4:63:66:07:65:30:73:79:b4:54:1c:
71:63:95:3d:01:45:95:67:dd:c5:78:3f:7a:c1:2f:7d:16:7d:
ed:11:90:37:48:b4:5b:6a:8c:95:48:13:55:99:29:7a:60:ed:
02:e0:31:fa:43:0a:45:1f:4d:38:d9:5e:08:4b:2d:5d:48:11:
bd:3d:f0:e9:23:49:1f:0c:fe:c9:9a:c4:32:fc:eb:98:76:91:
f1:e9:43:91:b7:49:9b:9f:42:0b:f1:3a:21:47:5b:d1:d9:8e:
2a:fb:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:46:33 2026 by rpki-client