Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: GErH+luK2RlsROTo/N7EntFS6ysEJbA1Nqc65IAaJKI=
Subject key identifier: 55:3B:B6:1A:F1:19:7B:EA:DE:12:C2:58:A1:E3:4D:1C:5D:0E:93:AB
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 019F9625609F1A9C1911F4F59A61C9E63ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 22:00:59 +0000
Manifest this update: Fri 24 Jul 2026 22:00:59 +0000
Manifest next update: Sat 25 Jul 2026 22:00:59 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: otzZu7vVYTTeQNm8+K2O8dMcpLM3P1iP5KOm5UvUOvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:60:9f:1a:9c:19:11:f4:f5:9a:61:c9:e6:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Jul 24 22:00:59 2026 GMT
Not After : Jul 25 22:00:59 2026 GMT
Subject: CN=553bb61af1197beade12c258a1e34d1c5d0e93ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:8e:dd:87:ab:96:ee:62:f9:78:aa:4a:c7:
ad:44:b0:3e:e8:60:c2:1d:f1:24:9d:7a:f3:c2:95:
ef:4a:98:69:98:0d:8b:85:1b:1c:c4:41:cc:20:e1:
8f:04:70:da:a9:4a:7d:ed:81:f5:f2:25:d2:39:1b:
bd:c2:6a:53:f8:7f:37:e1:92:55:c8:97:c2:69:d0:
7b:74:11:b6:6d:e6:18:99:a3:bb:0a:3d:9b:c3:1c:
ec:f3:25:8a:12:18:4f:39:fc:e1:b4:47:29:3e:54:
ed:1b:1b:55:b1:54:18:4d:89:f0:be:27:e8:4f:af:
9a:fc:c7:c6:a0:9a:1e:f8:33:eb:a1:eb:b3:0a:8c:
61:38:f8:d9:14:37:e7:b9:57:d6:3f:2a:e1:e7:af:
65:16:7e:ec:d5:32:d3:59:36:64:49:ae:56:c7:a9:
92:c7:ab:04:2b:70:6d:98:da:eb:ec:e6:de:a8:91:
f3:ea:37:a2:83:40:eb:18:94:b8:99:7a:17:ce:27:
b6:9e:37:1c:a5:32:d9:58:80:a9:c7:0f:d6:fb:b6:
50:ba:f3:a1:8e:51:c2:88:e8:83:3d:79:f3:ea:dc:
49:62:50:a4:dc:12:e3:b1:4a:6a:c6:db:dc:e4:bd:
8d:e7:62:db:80:91:2d:5b:d3:ba:89:5b:43:10:d3:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:B6:1A:F1:19:7B:EA:DE:12:C2:58:A1:E3:4D:1C:5D:0E:93:AB
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b5:00:13:b7:a6:a9:ac:34:39:cc:1d:83:53:ad:22:18:bf:
0d:78:08:f7:16:b2:9c:4a:1e:37:b4:76:3e:e1:81:3e:e7:cc:
10:c1:bc:4e:3d:de:22:2c:fa:ca:e2:74:bb:a8:4a:f1:95:58:
53:4f:67:b3:99:eb:a1:87:6c:e2:6b:71:ea:68:06:70:0c:6e:
81:f4:08:e5:2b:97:94:69:74:40:92:2b:f0:e5:94:a6:df:9a:
5c:3e:5f:16:18:cc:67:f7:3d:e9:3c:16:67:ce:d0:24:8a:5f:
d3:db:a4:2e:ba:fe:80:e8:05:5c:0e:7b:46:92:b4:fa:34:1c:
20:04:98:2f:28:78:d9:b1:de:62:40:33:09:ec:86:78:04:8f:
ed:dd:f4:ec:26:c0:d7:cd:6f:35:dc:a0:a1:87:13:5e:16:65:
bd:03:4c:0a:e4:96:02:a1:12:dc:fd:5b:ec:c0:dc:b1:d4:08:
1d:88:36:10:39:8c:98:c3:08:5e:9a:b4:80:09:1f:c1:39:33:
6c:07:d5:76:67:58:9d:1b:54:7a:c8:f1:74:7e:6e:0f:48:b2:
4c:a5:6c:2f:c4:53:a2:dd:ab:e4:21:cb:f7:dd:6d:81:77:ab:
bc:20:96:28:a4:6b:f3:08:0e:7b:33:95:67:74:43:ad:49:32:
20:c4:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:15:18 2026 by rpki-client