Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: IQMXqljkC3F1FqjND8FCsHZBAqEaUFAiTFd9iJiiiqs=
Subject key identifier: 50:82:DC:9C:7F:D7:10:D6:A4:A3:1C:1F:6E:E6:7F:42:2B:F0:11:2C
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019FF4FDAD3E223494D30CA3096057AC7C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 021F
Signing time: Wed 12 Aug 2026 08:01:33 +0000
Manifest this update: Wed 12 Aug 2026 08:01:33 +0000
Manifest next update: Thu 13 Aug 2026 08:01:33 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: aa4z3T+pxzKfuUypFOkmomrG3VeP8B/GYdTS/g4BkeY=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:fd:ad:3e:22:34:94:d3:0c:a3:09:60:57:ac:7c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Aug 12 08:01:33 2026 GMT
Not After : Aug 13 08:01:33 2026 GMT
Subject: CN=5082dc9c7fd710d6a4a31c1f6ee67f422bf0112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:a0:c9:70:c9:53:f6:ea:9f:fd:7a:c2:95:
21:3b:e9:59:10:c4:cc:cd:79:aa:50:2c:da:aa:7a:
a7:5d:52:25:e8:56:c7:0f:48:10:36:f7:13:20:06:
49:38:4f:52:b1:e3:71:11:e9:97:1c:04:61:37:e6:
ef:9d:70:b1:8f:fb:23:97:f7:bc:83:fb:04:20:c6:
1d:99:30:cd:60:1f:01:ac:19:4a:33:25:71:c4:62:
eb:6d:24:b1:d2:f6:6c:c1:c5:61:6b:2b:8d:1a:b7:
eb:a2:f6:b7:f4:4b:d8:bd:dd:12:d5:ec:e1:1b:a5:
bd:d8:bd:c7:53:08:dc:61:b6:4d:2b:71:5a:e5:a9:
87:c5:33:cb:34:5f:4c:60:1a:96:78:e5:70:a1:8a:
1d:92:b2:87:9b:e5:b6:1c:bb:2b:c5:45:b8:56:71:
76:00:68:a3:93:d3:6d:bf:4a:ab:de:a5:fe:7f:86:
7c:d1:c4:6a:d7:ec:ab:65:21:e7:91:70:13:d9:31:
57:b7:b2:f0:66:1b:69:e2:8b:9e:0b:71:dc:34:c3:
b3:8e:2d:43:69:a2:24:71:ab:01:50:14:0d:2d:ee:
dc:f5:ca:79:ac:90:33:d1:63:10:77:ac:c6:9a:6d:
8a:81:36:5d:d1:a2:24:5b:a8:36:27:8f:9d:29:ff:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:DC:9C:7F:D7:10:D6:A4:A3:1C:1F:6E:E6:7F:42:2B:F0:11:2C
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:b9:b4:d5:bc:1e:70:57:0c:6f:7a:27:74:94:4a:cb:fb:
d9:bd:37:d1:4d:0d:ce:3c:07:7f:e3:dc:e7:5a:cf:31:aa:5d:
1c:a8:46:1c:05:70:40:8f:7d:b3:22:ca:d3:ee:0e:c4:c2:fe:
72:c9:b7:de:39:47:59:76:36:8a:a9:b5:ad:6d:47:d5:9b:66:
79:bf:7b:4c:f7:6b:0c:7a:ec:9c:c6:2b:e7:ed:d3:9f:84:ad:
74:5e:dd:9f:b4:95:b5:84:39:5c:38:af:79:73:49:7c:4f:77:
57:61:df:ca:f7:b8:d4:e3:f3:1f:78:84:f3:6e:5f:b1:a2:83:
54:9f:67:eb:bb:a6:f9:84:6e:08:5a:72:24:11:1b:06:94:b8:
ae:bd:00:80:3f:cd:51:ef:35:4e:02:df:7a:1a:19:32:9f:70:
57:09:a9:93:69:ab:37:43:35:a3:4b:f4:1a:f7:67:da:11:33:
c4:fe:bb:5b:1d:3f:5f:ef:19:9f:92:6f:a3:98:8c:4e:c0:31:
4e:89:0d:17:96:a2:4d:a7:0a:e0:bf:09:a7:dc:5d:eb:89:8b:
6b:87:82:55:47:af:52:cb:e1:12:ea:b8:67:38:02:8d:2a:14:
73:68:c0:50:0c:bd:26:6a:70:00:f2:51:68:13:f4:48:a5:55:
8d:a6:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:21:26 2026 by rpki-client