Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: YvGfVLCdix2bP5c8gfFv3Bc/nAiV0t+j02fheM/jrEk=
Subject key identifier: 8F:70:6D:45:1F:CC:A5:27:47:5B:52:90:75:BE:42:E2:9F:79:29:CB
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019FA0DFA5F9BE77BBB621D8BC8F5FA6DE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 0276
Signing time: Mon 27 Jul 2026 00:00:39 +0000
Manifest this update: Mon 27 Jul 2026 00:00:39 +0000
Manifest next update: Tue 28 Jul 2026 00:00:39 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: 1VcrZKmXRPukimEGyzGYfUudLVZgNlrKqZJ/3xnWQEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:a5:f9:be:77:bb:b6:21:d8:bc:8f:5f:a6:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Jul 27 00:00:39 2026 GMT
Not After : Jul 28 00:00:39 2026 GMT
Subject: CN=8f706d451fcca527475b529075be42e29f7929cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:6c:f3:a4:2a:73:a6:53:1c:87:e1:56:10:
21:27:eb:51:c2:d5:87:70:43:3e:07:89:58:1d:df:
b8:a8:71:ba:a1:3a:00:3f:d1:cf:1e:6d:a5:51:17:
75:06:a6:df:57:79:a1:70:48:f2:42:1e:db:37:52:
cb:ce:13:1a:e8:7c:0d:2a:65:91:b4:21:31:8c:e0:
8e:1c:7f:9f:76:78:81:7b:e1:1b:94:dd:ce:65:92:
ed:4e:8e:67:ca:04:10:02:b2:63:1e:97:52:05:5d:
3b:83:b5:26:8d:3e:ef:00:80:85:84:16:65:ee:be:
04:ba:f5:94:93:42:ae:aa:63:69:22:05:ba:9e:e6:
df:61:ad:a5:a4:77:25:8f:6b:1b:c3:35:ce:b8:49:
b6:34:a6:45:ca:84:3b:53:96:c2:7b:ba:24:fc:e6:
b5:da:5d:bd:da:7d:12:e0:19:4a:2d:d2:f1:f5:c8:
3c:f9:f4:0d:58:3b:1d:58:3b:30:fb:38:24:34:8c:
9a:ce:3e:79:4b:7f:0b:55:3e:a3:d5:58:18:48:8d:
87:c0:cd:58:06:f0:50:93:83:87:4b:80:ff:a8:c3:
fb:6b:19:4e:d5:1d:62:50:cd:52:90:bb:c7:50:6a:
d7:bf:01:a6:59:d4:d1:3a:67:21:c0:03:59:f1:9a:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:6D:45:1F:CC:A5:27:47:5B:52:90:75:BE:42:E2:9F:79:29:CB
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:56:d0:60:af:77:93:15:71:96:38:90:5c:6f:9b:37:70:88:
7d:32:ce:05:24:98:a4:c3:e6:5b:3b:ad:6b:b6:0a:e1:d8:b7:
73:2d:2b:00:63:f9:67:3f:bf:32:17:71:b2:f2:eb:37:8a:06:
db:45:6d:81:90:db:00:13:83:06:3b:47:c8:6d:69:6f:bd:1b:
89:c5:1e:bd:cf:d7:a1:ce:e4:cd:62:06:d7:52:01:d2:2f:52:
17:2a:58:81:54:fb:18:02:bc:1e:94:74:f2:a5:23:18:1a:79:
ef:0f:b6:30:e7:56:b9:06:30:cf:c8:9b:1a:cb:42:c2:b5:e8:
4b:e3:f1:25:c2:dd:93:2a:fd:5e:c2:55:42:30:b4:fc:52:58:
05:9a:25:72:99:93:de:7d:09:da:d8:ad:1d:13:18:de:c5:9b:
43:e7:25:33:fd:35:0c:d0:95:5b:17:e6:63:5c:09:35:f5:fe:
da:f5:52:7f:3b:b0:3e:fa:0b:46:75:08:b7:48:33:13:f7:f9:
88:4d:42:2c:6a:62:64:4c:59:84:f4:4a:66:2c:c3:5b:34:ec:
db:34:1d:dd:d0:f7:fd:93:27:dd:72:3e:a9:17:21:bd:c8:ee:
8d:9f:50:37:22:6b:d0:f4:91:11:bc:0c:83:78:10:9e:23:63:
71:de:48:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:29:21 2026 by rpki-client