Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: bg6yehpt0tzpLRD7b3wxYoPM6y9L4dagJyxbp5SwDAA=
Subject key identifier: DB:1C:DD:7A:BB:85:1D:8E:1B:DB:CE:67:50:96:7A:BD:1E:51:CD:8E
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019F11F8557C2F4049E714F8065369B95959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 01E8
Signing time: Mon 29 Jun 2026 06:01:55 +0000
Manifest this update: Mon 29 Jun 2026 06:01:55 +0000
Manifest next update: Tue 30 Jun 2026 06:01:55 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: OXm4/GsgrQhuKZqrdQY97zXsZQZiBM78RN8ahqtXh4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:55:7c:2f:40:49:e7:14:f8:06:53:69:b9:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Jun 29 06:01:55 2026 GMT
Not After : Jun 30 06:01:55 2026 GMT
Subject: CN=db1cdd7abb851d8e1bdbce6750967abd1e51cd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:bb:41:2f:c1:03:78:fb:5d:36:e9:c0:80:
42:ea:04:9a:16:4a:e9:74:c6:6f:ec:cc:33:9d:25:
62:14:18:6f:c2:c5:cc:16:40:82:f7:52:48:4c:05:
e4:06:f5:c6:62:05:d1:cd:20:e4:f7:08:15:fb:e2:
b5:57:0b:36:35:58:3d:34:74:2e:1c:a2:37:61:49:
52:3b:8c:01:08:08:be:6c:e3:92:d5:c7:61:32:93:
63:97:d4:cb:6b:70:4e:5e:4f:08:5a:ea:d2:a1:af:
f2:02:e5:a4:ec:9a:25:eb:ac:90:3f:51:57:e6:6b:
b3:5a:96:99:fd:60:57:75:5f:c3:70:1f:72:72:b9:
bb:32:08:a4:e8:98:05:24:69:85:c2:07:85:8f:a9:
27:a1:85:f5:f7:88:a6:ed:91:45:18:cf:3e:75:29:
a3:f7:8c:81:cb:1e:39:6d:f8:3f:9f:07:03:9f:6e:
c2:2c:c7:b8:49:0e:36:b7:51:87:82:ff:eb:00:6d:
37:93:bc:0e:43:8e:df:55:7b:bf:2c:7b:08:30:8d:
90:45:9e:cc:5b:c7:48:3e:5a:92:6e:a3:f0:f5:97:
96:b9:23:5d:8a:52:31:62:cd:be:2e:65:0d:7e:b2:
d9:49:fa:a6:b7:63:c1:c9:3a:c9:be:0c:09:72:90:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1C:DD:7A:BB:85:1D:8E:1B:DB:CE:67:50:96:7A:BD:1E:51:CD:8E
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:95:82:c9:03:f2:f4:40:e4:53:a2:fe:99:a0:43:9f:a0:94:
15:62:22:bb:48:91:fd:92:6b:12:4c:a3:ff:6b:01:7b:37:6f:
17:93:2b:bd:66:3b:b6:33:fb:a6:2f:8a:df:2f:1e:a0:a7:58:
31:f3:50:47:31:26:4f:56:1e:71:d7:0a:1e:3c:c1:90:61:ee:
0d:1e:65:67:35:3d:6f:a1:cd:7f:b6:df:7f:91:21:4b:73:69:
12:93:ae:3e:0e:c0:71:e6:6a:6e:e1:f5:dc:ec:03:f9:dc:45:
26:79:62:4d:ff:a5:43:4d:ad:96:0f:fb:92:5b:5c:c0:55:cc:
39:cd:e7:51:68:eb:96:8e:90:0e:0e:9b:a8:f6:c9:29:52:e9:
b7:f0:ba:80:18:98:83:53:44:87:df:7d:37:e7:fd:f1:b9:07:
36:bb:4f:b0:c5:68:7e:45:77:ae:af:d5:64:fa:12:25:8f:47:
34:60:be:4a:0c:0e:bf:a8:8c:63:97:3c:8c:b4:7c:40:bb:6e:
6e:19:32:4b:8b:57:ac:0c:64:4a:d6:97:58:ba:52:b3:0a:32:
3b:4d:4c:b8:da:b6:a9:57:27:a3:76:7a:23:a2:fa:57:b6:15:
7e:e3:ab:b6:59:96:de:19:98:aa:0f:c7:c4:2d:b8:72:56:b2:
34:0a:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:05 2026 by rpki-client