Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: tYdldB75EPoXWdaZqNVZHImwdsF5UcLZqkvlleNeRoY=
Subject key identifier: 20:52:CD:B7:3E:E4:94:62:AB:92:B3:34:D9:99:BC:D1:C7:3D:0F:B2
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019F5AED3812FCD0CE078629D1E2B4283CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0FCB
Signing time: Mon 13 Jul 2026 10:02:03 +0000
Manifest this update: Mon 13 Jul 2026 10:02:03 +0000
Manifest next update: Tue 14 Jul 2026 10:02:03 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: amKpZa52AogZHoZZXUpULhQZFDemnXbWOWCyZZVeKnc=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:ed:38:12:fc:d0:ce:07:86:29:d1:e2:b4:28:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jul 13 10:02:03 2026 GMT
Not After : Jul 14 10:02:03 2026 GMT
Subject: CN=2052cdb73ee49462ab92b334d999bcd1c73d0fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:55:90:a8:41:ae:ec:93:77:8a:5f:28:6e:
a6:80:b8:18:32:c9:c1:4b:ac:eb:e2:9c:3f:56:2a:
d6:90:9c:92:6f:00:c7:cb:a8:df:9a:8c:79:59:67:
54:08:88:b3:d4:ce:ce:04:c9:c2:42:1c:d9:6a:42:
5e:73:f6:e1:e0:33:e0:74:0b:97:99:1a:11:53:87:
64:89:01:d1:8b:73:32:0d:9f:aa:db:0b:7a:3b:b8:
0e:29:c3:ce:f7:f3:b3:86:e3:21:e5:3d:63:f9:ba:
6b:64:47:73:5f:c8:a5:33:eb:03:27:ad:22:97:cc:
2d:bd:76:20:dd:87:62:84:57:2c:04:11:52:ed:54:
ff:4d:83:69:c9:de:b6:f7:18:72:9a:18:3b:00:6a:
bc:6d:02:83:b6:9f:cc:0a:f0:23:b2:05:61:19:e0:
c7:4e:45:c8:5d:ac:c4:75:99:3b:17:cc:e3:a3:32:
64:44:b9:59:3b:e1:52:22:a2:2d:f8:08:7e:3e:f9:
fc:9c:fa:45:46:37:8f:6f:1e:59:c4:7d:13:b3:2e:
ec:63:5d:b9:c9:14:59:09:d1:b2:e2:53:22:f1:19:
f0:82:b5:23:2b:1a:7a:73:a2:8a:b1:e3:e4:10:7b:
fd:5c:b3:09:47:5e:9a:32:83:30:15:f1:6e:50:e4:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:CD:B7:3E:E4:94:62:AB:92:B3:34:D9:99:BC:D1:C7:3D:0F:B2
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0c:54:2f:a4:bd:80:78:ed:9f:9f:07:61:3a:e1:8e:3d:88:
dd:ca:bc:ec:aa:c5:1a:6b:42:b0:3f:9f:e7:a2:2e:56:97:df:
87:ba:4e:72:83:f5:6c:1a:01:ec:96:8f:36:8a:f3:cc:bd:12:
de:b1:80:7e:d8:df:01:8b:37:a3:9b:a2:d2:98:db:55:90:01:
61:39:95:61:9f:c8:91:a3:fe:83:22:0a:c8:fc:88:bd:c3:50:
87:b4:43:d4:d1:72:8e:41:88:de:45:67:c3:1a:3f:b1:f7:e8:
0f:73:f1:e5:f6:6c:bb:42:c6:2f:33:ab:09:6b:37:0f:72:20:
c9:ce:7d:10:fb:db:23:71:a2:ff:76:ce:35:85:ee:5e:96:5a:
45:db:c8:d1:16:3d:90:d1:2b:de:da:3c:b7:a8:9b:6a:36:5c:
54:db:fa:96:b7:ed:a9:89:c2:9b:23:4f:f7:c1:41:d3:eb:0d:
60:7a:ba:fd:87:ef:c4:65:8e:63:30:9b:67:f9:1d:62:74:43:
e9:39:de:4d:b8:d3:f5:72:0e:ee:a9:09:07:81:39:45:8c:cc:
98:b8:d8:ef:60:fd:66:5e:ad:bb:c4:b8:49:d2:be:07:de:56:
ae:58:ed:77:4c:84:8e:32:22:bc:a7:37:cf:4b:7a:f5:29:6f:
20:4d:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:02:53 2026 by rpki-client