
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
File: o-bULY3pgsA5-oG_CEuhYYM6zjA.mft (raw, json)
Hash identifier: 3wElxyTSJx7kPqd9ZSnlBVWIIBtnrz1StwQpkoG3obY=
Subject key identifier: 99:B2:E1:65:3A:C6:01:46:E2:5D:28:27:0F:4D:94:BA:7A:07:D9:62
Authority key identifier: A3:E6:D4:2D:8D:E9:82:C0:39:FA:81:BF:08:4B:A1:61:83:3A:CE:30
Certificate issuer: /CN=a3e6d42d8de982c039fa81bf084ba161833ace30
Certificate serial: 019F10E58E1129F978C27B73AEE29B743F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
Manifest number: 7B
Signing time: Mon 29 Jun 2026 01:01:47 +0000
Manifest this update: Mon 29 Jun 2026 01:01:47 +0000
Manifest next update: Tue 30 Jun 2026 01:01:47 +0000
Files and hashes: 1: 8OrZ-Y_HP7mNK0Wg5q6pTzrFWIY.asa (hash: Q/V+vcg97mJxJxbUvevFdo9sCyk5TMEA0ORHq1KOCLc=)
2: o-bULY3pgsA5-oG_CEuhYYM6zjA.crl (hash: BXPw4xvy3hKGeAkT1My4HM8DOh3ZHw6TpK4JnTD6yIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:8e:11:29:f9:78:c2:7b:73:ae:e2:9b:74:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6d42d8de982c039fa81bf084ba161833ace30
Validity
Not Before: Jun 29 01:01:47 2026 GMT
Not After : Jun 30 01:01:47 2026 GMT
Subject: CN=99b2e1653ac60146e25d28270f4d94ba7a07d962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:76:18:f3:48:08:92:21:85:f1:09:2d:6a:
89:d5:e5:6a:d3:79:0f:12:1f:c8:9e:0b:bc:2e:85:
71:0d:f6:a9:e6:4a:79:68:f3:66:d3:8e:ee:6b:fe:
fd:5c:ed:e2:d8:02:ae:55:6d:ab:38:90:97:5a:40:
5f:41:a1:f4:18:6d:40:68:c9:02:42:c8:ee:22:9f:
f6:ae:86:f2:1f:40:2c:67:28:fc:49:79:cb:8c:a7:
af:8c:9b:42:d5:51:e9:8a:7d:69:61:bc:c6:3f:8b:
7c:46:5d:8f:38:f1:46:78:1d:8f:b4:b6:ad:19:2a:
fc:95:2c:11:8d:91:ad:77:f1:46:9a:fb:1f:97:06:
98:a2:2f:74:3e:9a:9c:9f:f3:aa:14:51:56:82:a7:
a2:cd:e1:6c:2b:4d:d3:7d:5e:04:bd:36:ff:01:2f:
ab:09:bb:6a:19:ff:8f:c0:85:26:47:6d:a2:67:81:
14:8c:a4:58:55:16:93:0f:ba:46:b4:ec:48:00:40:
80:cf:bc:96:3d:1e:79:87:a0:4a:a5:d1:18:3d:0b:
8c:ad:d0:09:38:7d:01:07:33:9a:c0:c8:48:84:bc:
60:62:05:8c:dc:c7:e0:73:0b:c0:57:97:60:38:2a:
e5:91:c4:03:5a:c0:fe:5a:f6:99:65:56:dd:4e:f7:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:E1:65:3A:C6:01:46:E2:5D:28:27:0F:4D:94:BA:7A:07:D9:62
X509v3 Authority Key Identifier:
keyid:A3:E6:D4:2D:8D:E9:82:C0:39:FA:81:BF:08:4B:A1:61:83:3A:CE:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:35:88:db:b7:23:ce:81:fd:82:1e:97:4e:5e:e4:e8:a7:fd:
3c:25:01:b3:76:4f:31:d1:49:c6:be:66:fa:5d:3f:71:4f:e2:
72:3b:e3:c1:24:52:ae:1b:4c:3f:72:94:c8:cc:20:b9:2a:64:
0f:d3:5b:3c:e2:cb:a6:6e:22:eb:53:91:98:a7:67:c0:6c:7f:
41:5b:3b:58:95:74:ab:78:4d:95:7f:4b:7a:ae:96:45:70:00:
1a:f9:9b:03:18:16:5e:77:78:5c:84:12:fb:ec:32:20:79:ea:
21:d3:ec:d8:6e:0c:cd:fd:4f:28:2e:42:38:9d:94:34:00:22:
5d:50:d7:19:d3:14:9f:f4:ee:de:5b:46:1a:49:6d:9d:ba:87:
22:75:91:2e:c9:01:91:b4:f7:d1:7c:fd:60:95:1a:4f:a3:1d:
ab:bd:98:17:60:06:1f:1c:58:21:44:82:c7:5b:f2:d5:52:3b:
13:79:f3:cc:25:a6:3e:e8:cf:0a:53:f7:b8:a2:38:24:99:1c:
f1:99:86:ce:30:10:e0:23:9c:a5:9c:3c:96:04:9c:d5:6d:ea:
4c:ff:e4:22:10:27:46:6a:d5:19:d0:bd:01:51:12:16:84:7f:
25:8b:f2:26:9b:af:01:d9:b5:f3:55:e6:34:9e:a7:60:28:65:
c4:6e:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:12 2026 by rpki-client