Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: 4r6ePohHbWuSsXrEKJYIVFQKcQXxccmryZSvAoWdPN0=
Subject key identifier: 6F:05:EA:34:B5:E3:F9:EC:23:0F:95:6F:0F:01:44:27:E4:78:28:5B
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 019F9EF2B9F079AA07CD11AB7FAE4A12D775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:02:15 +0000
Manifest this update: Sun 26 Jul 2026 15:02:15 +0000
Manifest next update: Mon 27 Jul 2026 15:02:15 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: Pr2AHYT2anPDJnMchCwKj5VlYo7Np0kLUjPXo6zeg1E=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:b9:f0:79:aa:07:cd:11:ab:7f:ae:4a:12:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Jul 26 15:02:15 2026 GMT
Not After : Jul 27 15:02:15 2026 GMT
Subject: CN=6f05ea34b5e3f9ec230f956f0f014427e478285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:b7:55:c5:e6:15:11:5f:d4:dd:ca:cb:f9:
aa:d1:e1:4a:ea:2b:bf:f2:27:3e:af:de:46:e6:79:
a7:69:e8:27:6e:c7:2d:30:84:81:8d:61:6c:28:18:
51:91:23:07:eb:ed:ea:29:5f:9c:1e:4b:18:fb:dd:
f0:dd:0b:44:61:a7:43:d4:65:22:d7:43:bc:95:d5:
c9:67:6b:6a:0f:d1:61:19:47:75:9f:9f:d5:f4:ba:
10:0f:18:1e:b9:97:2d:b0:0e:55:2b:13:fa:98:4d:
5e:e5:d5:df:5e:79:36:01:7c:5c:38:ec:eb:26:c1:
95:06:5a:91:3c:2c:4b:f0:5e:ce:a5:fc:8b:6a:11:
8d:f5:2f:3f:e6:6b:57:51:82:5f:31:1d:62:73:8f:
ca:86:1c:15:3b:fe:59:bf:2b:94:ed:5d:f3:46:d6:
62:eb:75:d3:73:7b:21:48:81:b0:f9:e4:8c:a7:4c:
5a:99:d6:16:ea:fb:de:d2:e6:92:df:35:98:a0:50:
9e:80:4e:30:54:7e:b5:b5:5e:d5:3d:dc:aa:20:01:
79:c2:04:c6:5c:7b:80:74:d1:29:9e:4a:b3:b7:59:
08:20:b2:94:1b:6a:e2:b7:c8:d1:62:22:d3:ab:ba:
44:b4:91:b9:91:15:3e:6c:e4:0e:91:e4:25:a4:41:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:05:EA:34:B5:E3:F9:EC:23:0F:95:6F:0F:01:44:27:E4:78:28:5B
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:01:b3:a7:68:da:72:ca:36:ab:52:0f:54:07:39:3a:a7:
54:c8:d1:a3:82:a8:52:50:e0:5f:a4:9f:ed:6c:86:62:f2:b4:
a9:0d:45:57:ff:ef:e7:a8:98:06:f8:06:17:71:92:0c:82:05:
bb:06:04:58:2d:57:42:a5:84:40:a8:da:59:15:7e:9a:d9:8b:
be:f6:00:2b:85:97:32:2d:1d:ea:6d:b5:dc:06:95:0f:7e:a0:
d6:5d:86:cb:54:11:f9:e5:dd:d8:c5:9d:2f:8f:ac:ae:15:8b:
7e:c6:d9:03:fc:3e:6a:f8:23:cf:95:3e:a6:49:8f:8f:fc:fa:
7f:52:a5:89:2a:1c:74:6c:e9:a7:39:c6:a4:29:68:2a:ad:65:
11:64:20:ac:59:1c:59:8d:2b:de:85:62:0b:89:2d:08:57:9e:
42:1e:a3:45:dc:e5:b2:5d:99:ec:cb:69:a4:95:72:47:da:b3:
78:03:09:b4:61:38:0c:92:0d:41:10:55:3a:38:1e:d2:40:a9:
67:21:7c:bf:c0:48:7c:72:40:65:3d:0a:37:6f:72:eb:18:d0:
69:7b:29:c7:76:7a:51:64:b9:82:53:71:f0:1d:35:10:f9:64:
fb:60:96:0a:11:d8:3f:1f:47:f5:d7:61:c6:b8:c9:1c:a2:22:
19:b5:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:51:22 2026 by rpki-client