Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: wSTxwIs8cEEv8nJl0YUyE2ZyB+T/HUKsz8lOFh9gZtY=
Subject key identifier: 34:85:19:9C:D5:B8:E8:B0:F3:7F:83:4E:87:94:EB:69:BE:3A:86:D0
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 019FA03B43A46DE5541BA339F14D4EE6CBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 010E
Signing time: Sun 26 Jul 2026 21:01:06 +0000
Manifest this update: Sun 26 Jul 2026 21:01:06 +0000
Manifest next update: Mon 27 Jul 2026 21:01:06 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: bcewMyeSpr8SehMliInVaBBngAgXVc8oMjB5OIltFNI=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:43:a4:6d:e5:54:1b:a3:39:f1:4d:4e:e6:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Jul 26 21:01:06 2026 GMT
Not After : Jul 27 21:01:06 2026 GMT
Subject: CN=3485199cd5b8e8b0f37f834e8794eb69be3a86d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:8f:d0:3a:96:46:10:21:19:d3:ca:fd:9a:
72:34:71:b8:16:62:49:e3:48:8f:89:fb:36:4c:40:
7c:79:d9:47:2b:a7:e8:d1:cd:f3:a2:89:8a:5d:54:
59:85:04:6a:91:39:94:e0:db:bc:f5:e1:49:91:90:
12:06:46:29:49:f0:42:62:45:48:4d:fe:cf:32:d2:
3a:ca:19:16:83:66:8b:cd:59:9a:0f:bb:11:65:35:
82:42:5d:40:5a:bc:19:6c:9b:7a:98:43:60:98:2a:
48:db:02:5f:a8:8a:1f:79:d4:cf:d3:61:fd:79:50:
77:29:c7:3d:2c:27:8e:da:d8:7e:59:fb:5d:a9:f4:
ed:79:38:d4:40:0c:b5:96:65:85:30:18:62:51:64:
32:4a:44:6f:7a:e7:d9:0b:cd:c5:ed:91:be:3f:dc:
60:55:1e:6d:f1:35:86:84:65:cb:63:ce:ff:9c:c7:
1c:02:79:26:9b:a4:13:a8:bb:fb:b0:06:bb:8d:e6:
68:41:a6:89:a9:b6:8d:8f:c7:65:ac:4e:c3:60:63:
96:e1:c2:c6:fa:5c:84:d5:00:9d:e4:24:2d:fc:ac:
0a:b6:b9:07:91:19:39:95:10:e1:84:fe:2d:6f:30:
a8:51:ea:e0:99:4d:83:f3:20:69:ed:e0:01:a5:22:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:19:9C:D5:B8:E8:B0:F3:7F:83:4E:87:94:EB:69:BE:3A:86:D0
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:f6:c8:ce:f0:44:76:ee:25:91:d5:e8:98:b6:00:9a:2b:
08:b2:3f:f1:80:dc:72:67:b0:aa:fb:82:33:34:f0:32:db:af:
af:27:0e:c2:e7:e4:a8:0b:d3:06:cb:96:1f:0d:97:fc:8b:95:
29:da:3d:70:3b:3e:77:05:68:0c:45:b9:63:70:79:51:df:7f:
b2:25:40:0f:4d:e4:5e:81:14:2f:87:a9:16:13:0b:2e:97:3e:
63:8e:2e:78:50:b6:0b:6d:05:b1:4d:7e:30:39:17:7c:ef:3f:
2a:f4:36:35:2a:69:79:c4:6d:ac:b6:a7:0a:2a:b1:a9:49:5e:
47:45:d2:26:77:ce:e1:9b:7c:4d:3f:b4:f4:9e:0f:eb:1a:ae:
fc:a4:73:21:13:b3:37:d5:25:4c:fa:b5:3e:bf:bb:fd:0a:99:
ef:d6:2b:45:aa:51:c0:46:44:cf:0c:27:a4:1c:5e:60:c5:55:
ad:e2:ab:82:e5:22:21:67:bc:a3:31:00:64:fc:94:0d:29:d5:
33:c2:f6:ad:00:a9:52:80:34:3c:c6:59:6c:14:65:c2:3f:22:
f8:3b:13:26:9b:a3:17:72:c9:6b:b5:52:7a:31:2b:f4:ba:cc:
53:0b:34:3a:84:7e:ec:54:44:99:80:83:11:4c:88:f2:4a:ae:
d6:a7:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:37:48 2026 by rpki-client