Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: K6DhIyi1q4ILHTZqgx/6nQiwh5vRAl/EhYLEQ8TXSas=
Subject key identifier: 44:16:0F:34:86:CE:78:47:BB:DC:1E:9B:8C:65:CD:AD:CA:88:8F:BC
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 019F85D666EF95C7CA5550A7E79355D83D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 0188
Signing time: Tue 21 Jul 2026 18:00:48 +0000
Manifest this update: Tue 21 Jul 2026 18:00:48 +0000
Manifest next update: Wed 22 Jul 2026 18:00:48 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: coEpGRugwDMYxwpy0Xh+pEiyzSQBhn8arsVZ7XBSg/A=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:66:ef:95:c7:ca:55:50:a7:e7:93:55:d8:3d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Jul 21 18:00:48 2026 GMT
Not After : Jul 22 18:00:48 2026 GMT
Subject: CN=44160f3486ce7847bbdc1e9b8c65cdadca888fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:02:4d:4f:8b:4f:73:34:31:da:e7:a7:af:
23:75:46:1b:b5:e2:d0:ca:ba:76:ef:1f:8e:7d:de:
73:89:9e:2c:61:2a:9f:6f:f8:92:3b:92:52:2c:3a:
36:90:49:73:ff:53:02:f2:d2:4f:b4:34:7e:ac:cc:
ec:cd:0a:2b:f9:e7:9a:40:a9:70:c1:74:6d:5e:bc:
5c:57:01:aa:ba:0e:b1:0c:73:50:b4:d7:fd:34:92:
cd:d1:9d:44:50:c2:e5:85:4b:ee:b1:db:a5:c5:43:
47:f3:2c:95:99:65:1f:f4:f2:e0:ce:c9:fe:af:eb:
ab:ba:cc:a6:d1:b2:d7:ca:2b:3a:7e:a8:c8:f1:fe:
42:b1:52:d9:9e:5b:cc:f8:2e:42:e9:46:d9:15:47:
d7:5a:b7:be:ea:ee:f6:45:ea:68:31:55:8e:3b:ff:
e4:19:43:cc:df:b3:c9:2f:ca:12:03:5c:f4:11:cc:
7f:3c:8b:ca:f0:42:01:9b:9b:d2:cf:03:f8:81:5a:
4b:4d:e5:b9:97:2e:e1:7f:52:32:6e:cb:e4:67:99:
ac:89:bb:30:90:91:24:4f:ef:76:99:1b:bf:c1:a0:
c1:8e:34:bf:5a:83:a3:24:73:87:45:2f:86:f6:93:
0c:35:ea:54:54:5b:81:0f:f1:00:16:ae:dd:9e:2a:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:0F:34:86:CE:78:47:BB:DC:1E:9B:8C:65:CD:AD:CA:88:8F:BC
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8a:c4:48:93:a2:93:de:d1:db:1d:5b:0c:05:d3:7f:f2:79:
bb:3c:3a:39:c2:06:e2:f2:09:74:44:86:e4:c3:b1:9d:e5:b3:
79:9f:1f:5b:17:47:c7:73:58:68:71:99:90:01:da:04:48:cd:
57:0b:c2:ac:1b:ae:42:0a:7c:aa:ce:27:82:b2:14:ca:de:b4:
bc:96:bc:54:06:2c:17:9c:b8:c5:0d:43:93:7a:5e:32:8e:50:
26:ce:e9:9b:9a:ae:e6:c2:cd:ed:af:34:b5:c3:31:9d:b0:a7:
69:b6:ae:14:79:f2:be:c7:84:8d:c1:6d:c3:c5:9f:ad:d0:53:
02:1f:b9:86:05:7d:4c:ae:80:63:5c:bd:19:b1:dd:a3:a4:d7:
d8:81:31:1b:8e:40:26:93:44:be:c5:10:8d:86:71:62:9c:f0:
c0:75:51:a8:7a:f5:aa:09:e6:f2:65:f0:dc:d5:5d:f7:e0:23:
95:a6:86:e1:8e:c7:1f:a4:15:51:d7:06:0b:9b:8c:b9:08:d6:
97:e9:c5:f4:6a:83:9b:d0:a1:ba:82:cf:9a:e8:af:11:ca:75:
62:35:0b:1f:ca:89:15:56:8c:36:f2:e3:23:a3:79:54:72:65:
ca:53:b1:54:b9:39:b7:07:53:73:55:c4:dd:2a:bd:27:96:b3:
fd:30:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:37:17 2026 by rpki-client