Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: ci1uUC9H++X93EYzNr/OJ1THVexUSmrEXLC03prOnmU=
Subject key identifier: C8:B0:86:DC:E4:9C:14:9D:A9:9A:C5:AD:22:98:96:08:99:A5:A0:CC
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 019FA26018110F370424782DE308ABFCF97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 01F9
Signing time: Mon 27 Jul 2026 07:00:34 +0000
Manifest this update: Mon 27 Jul 2026 07:00:34 +0000
Manifest next update: Tue 28 Jul 2026 07:00:34 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: khlgTKInSekQzNbcQ9z+yExRjLVysvJ4raIHAL+O7lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:18:11:0f:37:04:24:78:2d:e3:08:ab:fc:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Jul 27 07:00:34 2026 GMT
Not After : Jul 28 07:00:34 2026 GMT
Subject: CN=c8b086dce49c149da99ac5ad2298960899a5a0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:d1:41:61:d5:a0:ac:e0:aa:23:23:f4:c2:
17:0b:86:0d:41:48:0a:35:71:21:20:db:4b:0a:68:
63:86:5d:35:7f:1f:41:ed:ea:5f:2c:1c:37:f5:f4:
48:84:ac:2c:a2:24:4b:03:bf:7f:7c:96:c1:3e:11:
81:2d:c2:48:fb:82:10:e8:16:47:7e:45:30:50:a5:
06:5f:5b:e4:10:7d:73:a4:d1:a1:f5:83:c6:bc:da:
d5:5f:95:78:84:73:4a:5a:38:69:65:e8:b9:6d:92:
95:8f:f4:51:64:f3:b5:90:a6:c0:3f:78:57:6b:96:
8a:88:92:e5:53:43:05:d9:27:72:d4:d1:7c:7b:a1:
51:6c:67:a9:19:8e:5d:3d:d3:f6:50:ff:e3:1c:9b:
48:61:47:f3:af:23:1e:71:8c:73:d5:ac:a1:ea:cc:
01:ac:68:33:19:48:f9:17:04:ec:e0:6a:2c:43:7c:
71:de:ab:5c:c4:33:2f:a0:e9:44:06:2c:d2:6e:f7:
d3:59:7e:23:2a:b1:f5:a2:e6:d7:56:7f:ea:2d:0c:
70:7b:5c:45:5d:3f:93:76:45:5a:a0:0c:17:cf:c4:
b4:0b:93:9f:ec:78:0c:11:7a:48:d8:09:a8:1c:57:
30:e1:13:e8:d2:4f:55:26:23:56:b1:fb:c3:68:09:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B0:86:DC:E4:9C:14:9D:A9:9A:C5:AD:22:98:96:08:99:A5:A0:CC
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:02:4d:64:60:96:d1:f4:dd:bf:9a:c7:6b:0f:6c:e8:9f:97:
cf:55:f6:0b:d3:ff:4d:f2:16:56:c6:31:18:0a:64:8c:09:df:
7b:2c:72:78:80:8d:65:c1:58:b3:9c:f3:3e:90:7e:fd:57:cf:
60:d7:58:78:4d:9c:1e:e7:66:06:ce:0d:d4:82:7c:bc:00:a9:
72:1a:18:71:6c:0b:fb:ac:a5:de:61:ff:a8:79:c0:d6:41:a2:
6a:c0:e5:4a:8a:f4:46:b4:36:a6:ef:88:29:c2:89:3c:4f:ca:
0e:1f:9f:fa:d4:5f:31:11:9c:b6:89:af:30:79:e0:8a:99:e3:
41:ae:8d:f2:9e:80:38:8d:2c:19:dd:00:20:01:c0:34:54:14:
53:4c:5f:5b:c5:e7:15:7a:c7:f1:4c:1a:fb:8b:72:f4:8b:21:
0c:63:a3:79:02:9a:d4:d0:20:41:9d:4f:1b:2c:8e:e1:ea:78:
26:05:79:8d:1c:cf:29:d9:64:e2:14:5d:9d:f8:83:4d:2b:44:
28:8c:1f:34:9e:35:8e:fe:93:73:fa:94:62:ab:7b:7d:37:40:
c2:85:7e:e6:fc:63:3b:05:95:3d:4f:4b:59:7a:fc:c2:51:d4:
4c:cf:3a:1f:9b:d9:97:73:60:63:f1:d8:b4:60:0e:ad:bb:12:
0c:da:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:21 2026 by rpki-client