Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
File: o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft (raw, json)
Hash identifier: N7sSqKXkahCzJh8+pPiN0H0tva7aXv75SH3mwTtqebQ=
Subject key identifier: CA:35:61:FC:31:2D:4C:4F:CC:1D:77:2E:1D:4F:76:40:CC:04:E6:C3
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 019FF9B60509F7DD522B3E8E0F31280FA255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:23 +0000
Manifest this update: Thu 13 Aug 2026 06:01:23 +0000
Manifest next update: Fri 14 Aug 2026 06:01:23 +0000
Files and hashes: 1: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (hash: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=)
2: o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl (hash: ItuBQcMA+96uwRxm9JTcFFRApBoeTPACqs5iIluE4p8=)
3: ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (hash: vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:05:09:f7:dd:52:2b:3e:8e:0f:31:28:0f:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Aug 13 06:01:23 2026 GMT
Not After : Aug 14 06:01:23 2026 GMT
Subject: CN=ca3561fc312d4c4fcc1d772e1d4f7640cc04e6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:db:38:98:37:b7:f1:aa:92:17:38:6e:1f:
c6:1d:11:f7:45:41:f4:92:9c:bc:13:d4:40:4c:05:
ba:b9:5b:68:c3:a7:61:93:5e:dd:90:51:53:78:19:
4c:70:cc:39:83:6c:e7:3f:3b:72:c3:06:af:50:29:
1b:e2:ef:72:d3:08:d9:82:b2:13:2d:52:e0:0b:f8:
cd:67:1d:0e:90:98:4e:51:25:13:70:68:1f:a4:85:
75:01:25:67:f5:f4:1f:68:0a:fa:3d:96:7d:14:fb:
67:da:2d:98:85:3e:f2:63:f5:da:e7:17:65:4c:57:
23:88:3e:29:2c:0e:28:69:a7:3d:c1:c6:98:77:3e:
d6:34:10:37:19:29:22:aa:7f:97:b3:21:dd:21:e4:
bb:7b:ba:a1:64:5c:10:f0:19:6e:6e:1e:67:da:7c:
fd:59:e7:55:a8:f2:36:77:85:a1:0d:22:c8:48:ff:
c0:22:15:b3:6d:c4:11:c5:5e:11:2b:4a:7e:f1:30:
92:bd:15:84:66:ad:31:66:47:e1:e6:13:1d:17:23:
ab:c8:a4:9a:6e:3c:0d:95:26:1f:2c:c9:8a:2b:e1:
e1:c5:b9:11:34:6c:a4:a1:f5:84:1e:4f:b0:f8:12:
1c:be:c8:5e:65:5a:a8:4c:13:91:af:dc:e7:ba:29:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:61:FC:31:2D:4C:4F:CC:1D:77:2E:1D:4F:76:40:CC:04:E6:C3
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7f:b8:e1:0b:cd:bf:53:27:89:72:26:95:d2:9c:b7:7d:3b:
92:66:d2:4b:4d:e4:c1:f6:fb:27:ad:d8:44:6d:2f:c3:fe:ee:
32:a0:0a:b8:14:f5:4b:02:ff:03:85:f3:ae:45:0f:b2:ba:7d:
2d:9c:03:a5:7c:cc:ed:84:88:91:8c:3c:9a:f2:7c:ab:ff:37:
bb:36:58:19:15:06:b6:ed:3e:03:ad:59:8a:7c:52:b5:70:5c:
88:6d:45:10:ab:e9:c6:c6:0b:35:a9:ee:e8:ba:f2:10:51:62:
7f:30:44:eb:56:9d:52:d1:e5:bd:97:d8:86:5b:71:83:62:97:
85:db:1f:1c:bd:f2:bd:05:ef:6a:0d:0b:9c:36:99:ec:d3:ea:
05:27:bf:2e:cf:2d:1b:e5:91:9f:55:7a:4b:7d:49:c9:31:a4:
c7:97:11:52:0e:89:f3:60:3e:71:3c:68:23:ef:bc:e3:68:69:
0c:f8:20:d0:f2:b9:79:a6:cf:6f:51:c1:fc:f3:1a:d1:81:8c:
48:df:93:d1:fc:de:1a:80:73:52:65:5c:32:ae:af:31:78:0f:
b4:ab:1d:82:2c:69:e8:72:0f:e7:6e:4e:61:21:63:4e:39:bf:
e1:05:e6:86:85:3e:ef:f5:61:5a:37:6e:f7:7b:25:e0:f5:73:
7d:27:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:22 2026 by rpki-client