Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: 6xy+vvb4N+oRwhz3byEFLqP0Zjm0UlS6A+suSZGhv0I=
Subject key identifier: AB:CA:38:78:B2:EB:FA:43:7E:AB:C2:4E:3D:5B:23:91:FD:A3:52:C5
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019FA82BD3712CAB0345C02732D11DF27F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1621
Signing time: Tue 28 Jul 2026 10:01:12 +0000
Manifest this update: Tue 28 Jul 2026 10:01:12 +0000
Manifest next update: Wed 29 Jul 2026 10:01:12 +0000
Files and hashes: 1: OFa8deirJ8mX7gRn79xlLJ8oDFY.roa (hash: N+xsE/A93Q5FiilxuvU4PImtKOjqeD0giFP8OnmhGl0=)
2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: jW3xylqfnELLi5aA2elMDiIpIcvlg5Td9hg3mn75Hms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:d3:71:2c:ab:03:45:c0:27:32:d1:1d:f2:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Jul 28 10:01:12 2026 GMT
Not After : Jul 29 10:01:12 2026 GMT
Subject: CN=abca3878b2ebfa437eabc24e3d5b2391fda352c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:1b:b8:17:0c:94:1b:6f:df:c0:6c:30:bf:
76:42:1e:21:52:e2:92:d0:1a:03:18:cd:7b:77:c4:
34:de:bc:8e:9d:44:b6:1c:8e:76:f6:3b:5a:43:8e:
51:89:88:22:9d:4f:66:a1:7d:3a:bf:ae:c0:f6:0d:
c1:a0:c0:43:cb:8e:4a:ea:df:e1:d6:d5:cd:54:6f:
c7:29:e4:78:0b:9e:36:4f:c8:97:f2:51:65:d0:98:
2e:29:41:be:ee:5d:05:b8:8b:df:09:9a:ed:55:97:
2c:81:84:52:95:3c:5a:72:4a:39:25:80:18:43:cc:
e2:56:bc:b4:00:95:a5:69:90:9c:25:6f:53:cb:3d:
3e:8d:43:ad:d3:d0:bc:c5:94:b9:56:17:97:78:32:
ad:3b:b9:04:34:67:ac:59:ad:ec:4a:b9:64:46:09:
20:af:53:77:c6:d7:24:ee:b3:7c:22:c8:7f:86:6c:
31:3d:38:3b:8e:a2:1e:6d:1b:15:15:2b:00:08:f4:
0e:3a:ac:6d:26:d7:21:ea:d8:66:fd:28:58:f8:0c:
eb:04:24:d2:2b:51:63:fa:26:c0:2a:09:f6:89:d3:
93:97:93:d2:91:a7:f5:cf:7a:4a:74:8c:01:7c:9f:
82:0d:37:e4:39:eb:51:67:3f:0f:c9:71:42:b1:3c:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:38:78:B2:EB:FA:43:7E:AB:C2:4E:3D:5B:23:91:FD:A3:52:C5
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2a:b6:f6:dd:c4:60:a3:a2:02:8d:b3:a6:97:d3:5b:3d:64:
25:bf:2f:be:5a:43:e2:78:00:f5:57:15:4f:89:1c:e3:75:70:
49:a8:fa:37:3c:73:30:f8:16:6b:6f:07:03:0e:ca:2e:24:ae:
16:d4:7f:e3:9b:58:e6:aa:18:ea:e3:3e:94:d7:9a:57:58:55:
03:33:bc:1f:82:99:d5:45:9c:6b:bb:f8:7e:99:0a:f4:4c:3f:
c2:7f:05:a1:9b:c7:3d:2b:b5:6c:bd:6e:ee:15:ff:be:e7:76:
6d:b9:60:21:ca:b8:eb:96:3e:ec:3b:82:21:6b:de:ab:43:55:
3d:90:05:89:72:1c:d3:bd:c3:aa:1e:df:94:93:a5:b3:b9:6c:
37:60:14:15:84:51:c8:51:45:e8:76:16:4a:05:96:da:a6:cb:
c0:c5:b3:20:1c:86:29:ad:13:71:27:65:7f:78:4c:60:90:96:
27:59:27:7e:c7:c5:af:3e:9a:2a:b2:77:7b:38:69:85:81:bc:
79:b7:32:52:d4:07:9c:c1:39:57:5b:a1:d2:fa:20:93:bd:50:
d6:37:bb:06:77:a8:00:89:ff:0c:88:11:a1:2e:d1:ba:eb:1d:
24:46:74:cb:f9:7d:bb:41:1b:29:6d:35:ea:05:e2:2e:f4:f2:
ba:a1:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:08:20 2026 by rpki-client