Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: DMfNijl8nH/87gwBiPu50GyuvpkNal9Ap8SKhOZ3Jbk=
Subject key identifier: 91:A0:95:EC:91:B9:65:E4:BA:56:0E:A3:A4:3B:05:CE:C5:BA:DC:16
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019FC2C76B01DC045268BCC02CCFD73E2825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 19EA
Signing time: Sun 02 Aug 2026 14:01:16 +0000
Manifest this update: Sun 02 Aug 2026 14:01:16 +0000
Manifest next update: Mon 03 Aug 2026 14:01:16 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: 077x2uJv/OoIqkaGL8AY4wPZuxOofXGHLI5NzBBHCFM=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:c7:6b:01:dc:04:52:68:bc:c0:2c:cf:d7:3e:28:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Aug 2 14:01:16 2026 GMT
Not After : Aug 3 14:01:16 2026 GMT
Subject: CN=91a095ec91b965e4ba560ea3a43b05cec5badc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:8c:11:d8:4a:dc:8f:27:eb:ea:7c:80:ee:
d2:56:57:37:7d:36:65:d6:3a:40:0e:62:13:6b:ec:
a4:aa:a8:62:71:5a:93:2c:82:1c:c8:a0:d0:8d:5a:
49:f1:24:59:a7:5c:42:38:4a:14:09:9a:78:f4:84:
37:29:38:4f:2e:c0:20:b5:e2:93:9c:38:c2:4b:a9:
8d:b6:33:c3:fe:40:01:1a:70:8e:d0:88:04:42:80:
99:20:29:94:a5:95:93:f6:e3:2b:7d:ad:f9:af:25:
fe:98:7f:02:8e:58:ce:4b:d6:0b:c1:6e:a2:3e:6e:
ed:16:aa:ac:91:71:20:0d:1a:73:51:60:65:ab:ef:
c0:66:81:67:84:cf:2b:54:20:9a:4e:ef:d3:f3:7c:
2f:c6:7c:98:f4:06:eb:3c:0b:8c:bf:53:16:70:5e:
e4:24:d7:c9:db:00:4b:40:50:0d:39:67:e3:69:d1:
fd:ae:13:71:9f:b5:11:56:94:72:11:16:a9:ef:ae:
68:8c:6b:e9:48:6c:04:ef:c7:bd:37:da:c7:3e:24:
f8:38:8f:3f:db:80:ca:df:94:86:3e:b3:a1:bb:7e:
65:9c:00:8e:26:c9:b5:66:91:e9:44:c4:27:58:d1:
c2:0b:36:9c:d4:bb:73:0d:13:6c:2f:72:ff:69:ed:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:95:EC:91:B9:65:E4:BA:56:0E:A3:A4:3B:05:CE:C5:BA:DC:16
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:69:fc:8a:a8:87:7f:66:7c:20:6d:05:16:19:2d:6a:44:
74:74:38:11:e8:58:cc:70:10:b5:41:83:eb:94:d2:0e:77:aa:
67:66:c0:b5:90:1f:76:16:3b:93:3b:72:fa:67:9f:15:bf:fa:
2f:f5:f3:a6:da:b0:04:49:82:7c:4c:f9:40:ba:18:1e:72:53:
8c:65:9d:dc:f7:e1:d9:9f:84:fa:e1:ad:e5:92:14:b1:e9:b9:
24:a3:0e:27:66:24:ac:f4:74:c9:1a:03:d0:70:e9:04:c7:07:
85:dd:a2:54:ab:b7:85:d7:98:77:75:2e:c1:5b:8e:04:ef:93:
c5:e2:ca:e7:c0:bf:67:aa:e6:54:37:a2:fc:01:38:92:4b:d0:
31:2a:08:ef:8f:05:44:0b:d3:ee:09:8f:41:f0:97:6d:63:dc:
c0:37:bc:df:48:1a:26:33:7b:67:57:86:05:da:85:88:4a:22:
19:4f:b2:44:46:07:fc:fc:33:c2:1a:3f:24:7e:c0:20:61:fd:
1c:f1:73:0c:a3:3e:ee:e9:49:0c:f0:42:d1:0a:1f:63:58:a1:
ab:b5:f5:68:27:f4:61:d0:24:3c:7b:e7:1e:05:bf:36:5c:41:
bc:fb:7c:46:d5:65:82:9f:d6:74:35:1d:9a:33:1d:0c:0c:0d:
58:ea:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:46:22 2026 by rpki-client