Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: t8pnPh0CDGiSMpZfCc/z7PRRALTbmdtWCKb/lMav7i0=
Subject key identifier: 68:7C:40:57:DD:0B:3E:48:24:18:EA:47:BD:FC:D4:86:F3:B0:EE:4F
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019FFA242ADCF5F8668D410EA1EE913AE2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 1921
Signing time: Thu 13 Aug 2026 08:01:41 +0000
Manifest this update: Thu 13 Aug 2026 08:01:41 +0000
Manifest next update: Fri 14 Aug 2026 08:01:41 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: PTY8yReDvup1G3st+jBXyZeU0Q0N2G0zE4F910NmyQE=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:24:2a:dc:f5:f8:66:8d:41:0e:a1:ee:91:3a:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Aug 13 08:01:41 2026 GMT
Not After : Aug 14 08:01:41 2026 GMT
Subject: CN=687c4057dd0b3e482418ea47bdfcd486f3b0ee4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:72:92:66:b2:09:d1:44:3c:cd:72:8f:f2:
c3:74:8e:66:77:40:db:f3:5d:8f:01:19:73:b3:c9:
e8:4e:95:15:8c:ee:9f:85:a2:3a:5e:0e:17:83:b3:
92:6d:cd:4a:5a:d3:5a:20:e3:8e:7e:eb:47:76:7f:
b7:91:d4:4b:ef:9f:ca:bb:86:d5:3c:f3:19:bc:f5:
95:76:29:f0:3e:12:8f:4f:7d:7e:b9:98:ff:26:96:
5b:d2:8b:5a:24:84:7a:1c:e9:22:f8:10:4b:28:fd:
88:9f:5d:96:13:68:cd:1d:d8:9d:f5:e4:a4:47:81:
a0:1a:99:d5:d6:67:1f:b6:dd:89:bf:4d:50:13:a2:
ef:d3:20:47:38:a6:8e:f4:7b:1e:07:a1:97:7a:83:
7f:b9:71:85:28:b6:27:1d:9e:c8:01:71:fd:0c:b3:
49:b0:a7:76:d0:89:b3:30:6d:59:f0:90:75:bb:2a:
88:ef:e7:27:fa:31:16:9a:7b:5a:c2:07:85:0a:7a:
31:a4:53:e6:fc:33:7d:3d:b8:d6:0d:68:aa:22:e7:
a8:46:bb:87:e2:99:c6:5e:2e:74:d6:39:a9:48:b2:
c3:a3:b4:f6:e6:ef:d2:cf:7c:1b:92:92:d2:3e:28:
e0:2c:7a:f1:cf:dd:c4:39:59:73:2d:85:79:33:ce:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7C:40:57:DD:0B:3E:48:24:18:EA:47:BD:FC:D4:86:F3:B0:EE:4F
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:80:e0:8e:5a:79:00:eb:d4:2c:4b:c1:d1:3d:66:a6:91:55:
d8:da:46:af:c6:8e:ef:eb:15:75:45:7c:a5:87:45:cc:7d:44:
59:9d:80:2f:36:b3:bf:52:15:66:ba:e2:4d:b7:58:52:4b:86:
a4:23:6e:c6:fc:e3:b8:91:42:3d:b3:74:92:fc:79:8b:a2:0c:
07:89:54:c9:d0:9a:fc:b6:13:f4:cb:00:77:15:e0:f8:d0:3c:
8c:aa:26:74:c5:57:65:d8:c4:8f:22:ec:b6:1a:3f:8a:1d:26:
d7:dd:5b:e7:18:4a:a7:37:d9:f7:f4:53:e2:36:88:6b:00:77:
96:9a:13:37:22:f7:be:ea:da:ba:e6:7a:2c:d2:c1:fe:21:57:
99:16:d6:db:50:5e:ee:a8:3d:ff:24:ce:b2:d1:ba:cf:0e:dc:
0d:30:61:ae:a3:e9:dc:c6:08:c8:a0:8a:5a:21:1e:b1:f9:b9:
df:1c:2d:6c:96:5e:99:77:6d:2d:64:9a:d8:6e:68:66:5a:c8:
30:44:fe:f3:68:0f:a8:d7:46:33:08:78:ba:e7:4f:8e:4c:e6:
1e:53:9e:94:df:18:2e:fd:b2:02:e6:d3:e0:83:41:36:be:a1:
5d:ee:75:c7:99:f0:a2:35:e1:88:26:48:4a:4d:6a:df:b6:1a:
c8:9f:4f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6JCrc9fhmjUEOoe6ROuK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNTZiNDIzODNhZDg2MmNlNmEzNzRhZDJjYTZkMzZjMjU0
ZGM3YjEwHhcNMjYwODEzMDgwMTQxWhcNMjYwODE0MDgwMTQxWjAzMTEwLwYDVQQD
Eyg2ODdjNDA1N2RkMGIzZTQ4MjQxOGVhNDdiZGZjZDQ4NmYzYjBlZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV1ykmayCdFEPM1yj/LDdI5md0Db
812PARlzs8noTpUVjO6fhaI6Xg4Xg7OSbc1KWtNaIOOOfutHdn+3kdRL75/Ku4bV
PPMZvPWVdinwPhKPT31+uZj/JpZb0otaJIR6HOki+BBLKP2In12WE2jNHdid9eSk
R4GgGpnV1mcftt2Jv01QE6Lv0yBHOKaO9HseB6GXeoN/uXGFKLYnHZ7IAXH9DLNJ
sKd20ImzMG1Z8JB1uyqI7+cn+jEWmntawgeFCnoxpFPm/DN9PbjWDWiqIueoRruH
4pnGXi501jmpSLLDo7T25u/Sz3wbkpLSPijgLHrxz93EOVlzLYV5M84g+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh8QFfdCz5IJBjqR7381IbzsO5PMB8GA1UdIwQY
MBaAFKBWtCODrYYs5qN0rSym02wlTcexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDct
OWIzZGQ0MTdjMzA4LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDctOWIzZGQ0MTdjMzA4
LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4Dgjlp5
AOvULEvB0T1mppFV2NpGr8aO7+sVdUV8pYdFzH1EWZ2ALzazv1IVZrriTbdYUkuG
pCNuxvzjuJFCPbN0kvx5i6IMB4lUydCa/LYT9MsAdxXg+NA8jKomdMVXZdjEjyLs
tho/ih0m191b5xhKpzfZ9/RT4jaIawB3lpoTNyL3vurauuZ6LNLB/iFXmRbW21Be
7qg9/yTOstG6zw7cDTBhrqPp3MYIyKCKWiEesfm53xwtbJZemXdtLWSa2G5oZlrI
MET+82gPqNdGMwh4uudPjkzmHlOelN8YLv2yAubT4INBNr6hXe51x5nwojXhiCZI
Sk1q37YayJ9Pqw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:12 2026 by rpki-client