Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: Wlw2kItY8t8EhkNA5EKOPVKHA3wYbC49RTylrwmeBoA=
Subject key identifier: AE:A2:69:7D:8F:24:CD:8E:78:8D:01:58:5C:3E:B4:A9:8B:98:88:42
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 019F86446542B3D25351975F6708567FC4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 198A
Signing time: Tue 21 Jul 2026 20:00:57 +0000
Manifest this update: Tue 21 Jul 2026 20:00:57 +0000
Manifest next update: Wed 22 Jul 2026 20:00:57 +0000
Files and hashes: 1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: E3WCUiO+zQO9ksa54q3okPmAqw9Cbpof7YKQxcHI/X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:65:42:b3:d2:53:51:97:5f:67:08:56:7f:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Jul 21 20:00:57 2026 GMT
Not After : Jul 22 20:00:57 2026 GMT
Subject: CN=aea2697d8f24cd8e788d01585c3eb4a98b988842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:e3:d8:05:98:1e:a2:a0:5b:91:48:11:68:
10:ff:4c:80:53:3f:9f:19:f1:83:3f:8c:85:33:8a:
0e:8d:a9:88:59:c5:dd:1d:82:c4:80:c8:5c:bd:94:
c2:f2:20:25:06:e1:cf:ed:26:2b:7b:02:59:18:0a:
6c:5c:2d:22:d5:b8:bf:79:ff:5d:d9:11:19:92:60:
cc:28:6d:ef:aa:d5:92:bc:1a:4e:5e:7b:f0:bd:32:
55:d5:03:4a:ac:8b:ad:16:85:dc:05:e9:06:0f:d0:
8a:c8:dc:ac:b9:1a:74:31:a7:c2:2c:57:28:fc:96:
2b:4d:5c:a1:2d:d7:2f:c4:c7:8e:7c:f6:a8:f1:13:
9c:cd:51:00:fb:3b:4e:70:14:89:e2:39:27:88:8a:
5f:58:07:39:99:d7:12:f4:1c:87:85:c5:42:69:fb:
3c:ec:bd:71:cf:84:80:a9:7e:6b:19:37:9a:15:f2:
3c:95:c6:cd:e7:62:16:b2:52:73:bc:db:19:17:d2:
8a:7c:20:d1:d4:00:5c:a7:7e:46:52:e4:1f:0e:ac:
8b:da:3a:8e:cc:d6:7f:4d:5c:e0:47:f2:ed:55:e4:
77:c5:25:89:d4:1f:f5:b7:6f:10:e8:d9:bc:6d:bb:
e4:25:5b:69:10:04:b6:ae:92:1e:ac:79:b3:73:bf:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:69:7D:8F:24:CD:8E:78:8D:01:58:5C:3E:B4:A9:8B:98:88:42
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3e:60:57:ea:16:78:95:4b:f2:fc:64:52:7a:54:42:51:c1:
4a:0c:be:6c:b7:84:35:b8:22:73:92:f5:6b:3f:17:53:31:fd:
80:17:bd:de:b8:f6:b4:7f:69:1d:2f:f2:41:83:5a:bf:7b:28:
88:07:3b:69:d9:86:62:d4:b2:c2:39:42:c3:88:31:1f:54:6f:
d6:ac:d1:82:7a:1e:47:0e:eb:ad:d5:9d:d0:bb:b1:23:73:34:
ab:58:87:23:8d:c7:db:26:b4:63:dc:df:1e:d2:1b:22:a8:83:
a2:f6:f3:6b:6c:4b:3e:5a:e6:c0:48:18:97:94:c7:f3:9f:1d:
72:94:0e:f6:b2:8b:a3:88:bb:de:ff:9a:b3:33:b0:7f:d6:ae:
50:f3:a5:8e:11:ca:11:cd:81:1c:f6:f0:e3:61:0e:12:38:15:
ba:e3:06:ca:80:b9:74:cd:30:10:e0:be:6c:9a:aa:d6:2a:3a:
eb:1a:a5:19:01:af:13:bd:07:d9:fb:99:54:57:b7:be:76:33:
f2:29:c9:5e:68:69:36:3f:cf:92:bd:d7:dd:c3:fb:f1:65:3c:
c8:34:f4:7a:5c:c1:5e:db:dc:90:2a:47:01:dd:4c:2d:ec:bc:
19:76:45:8d:39:57:a1:72:3d:94:cc:69:11:1e:a5:cc:04:63:
6c:d4:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:13:05 2026 by rpki-client