Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: wdEu01ZBYUTyAS9oUE6KGBIOKKomksNQMUwvfV2WiYU=
Subject key identifier: 69:58:7C:1A:19:F9:05:56:90:DB:22:B1:C2:DB:9F:FE:34:EA:CB:04
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019FA03B299E43DA335EDE1384EB113EE782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 194D
Signing time: Sun 26 Jul 2026 21:00:59 +0000
Manifest this update: Sun 26 Jul 2026 21:00:59 +0000
Manifest next update: Mon 27 Jul 2026 21:00:59 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: yVNwirSHjjf8AnHds8ue+IdSKCEGdkq6jFB5ztYa0sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:29:9e:43:da:33:5e:de:13:84:eb:11:3e:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jul 26 21:00:59 2026 GMT
Not After : Jul 27 21:00:59 2026 GMT
Subject: CN=69587c1a19f9055690db22b1c2db9ffe34eacb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:7a:ca:3c:83:49:d7:65:e6:60:35:17:fa:
b8:d3:09:9f:16:37:94:28:af:60:84:57:b2:a0:7b:
94:d3:e4:f7:f0:b9:44:d5:f1:26:76:62:86:90:74:
34:a1:0b:ff:2e:e0:45:e8:0f:3e:37:db:f7:16:51:
69:4f:f7:49:a0:b8:87:fb:54:e2:a6:2a:aa:a7:97:
89:64:1b:5c:aa:17:5b:81:b2:e1:06:a0:79:52:49:
37:a6:6d:ad:3a:15:36:29:40:99:f0:89:c2:53:8c:
9a:51:9e:b2:75:cb:51:14:1c:5a:2c:2a:e7:ec:7a:
1b:f8:fc:6e:4a:4e:76:c7:d2:1b:36:1a:2d:88:67:
4d:69:8c:f3:85:96:45:d7:cf:a3:2c:0e:2b:60:8a:
1a:7a:5e:5c:ab:7d:af:58:3e:c8:14:fb:a2:54:29:
96:4a:4f:06:48:da:4a:7b:b9:0d:d0:14:7b:de:0a:
a4:03:56:8c:dd:0a:7c:be:7d:83:c5:a9:0e:50:d7:
48:7f:a6:ed:1a:57:31:a6:43:11:94:9a:8a:ad:75:
3d:08:0d:81:5d:a1:62:8c:a5:4d:81:a7:a6:c9:b0:
10:c5:28:b3:2c:c2:ba:0d:ea:0f:0e:03:ef:80:5b:
65:8f:b9:fd:2a:cf:99:1a:00:56:8b:f4:a5:47:bd:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:7C:1A:19:F9:05:56:90:DB:22:B1:C2:DB:9F:FE:34:EA:CB:04
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:77:8d:2a:41:26:bf:be:85:0a:3e:e9:36:11:05:d7:5a:72:
50:c8:86:9d:7f:54:cb:b4:da:d4:5a:d5:94:76:d0:18:05:de:
4c:d0:fa:9c:fe:c5:f5:6b:8b:8d:19:53:33:85:9f:97:3c:8c:
a2:b3:57:b0:2c:32:34:32:0f:27:e1:3c:03:ca:41:2a:6d:d5:
a0:8d:3e:07:93:ca:79:48:c2:c5:35:2a:23:09:84:3f:7c:cb:
39:55:c6:96:bf:1f:42:5f:27:ca:e7:5e:65:e1:64:cc:bb:9b:
80:a9:41:b1:16:93:63:cd:84:a2:19:a4:3a:67:65:b8:8a:26:
31:b0:3b:8f:3a:ba:c2:58:2c:60:22:15:94:6d:b5:40:ec:65:
05:fa:a5:bd:23:79:50:73:4b:3d:bf:76:e4:4b:3f:66:f1:8e:
cb:cc:71:58:0f:94:74:17:aa:ba:d8:66:ee:25:25:31:78:07:
cd:95:a3:4d:94:a1:ef:d5:ad:46:e3:84:40:48:86:e8:7f:c7:
f7:68:38:85:73:36:20:34:fe:e3:cc:6f:43:09:17:c5:ca:34:
20:4a:55:e7:72:80:fe:d7:dc:5e:2c:5a:13:c4:5d:34:58:db:
09:a4:4d:d7:07:58:a8:81:a1:2b:5c:4e:98:eb:25:c1:ae:86:
7c:82:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:50:23 2026 by rpki-client