Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: v+osH6h3uZBpRmyQ7ug3xH8KKUNn13Q6lx8EtZ0w+VA=
Subject key identifier: 27:83:AA:DC:A2:D7:0D:01:81:CB:95:DA:8E:90:94:52:40:13:87:5F
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019FA116843405CC25213E095955BA4A26AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0E5E
Signing time: Mon 27 Jul 2026 01:00:35 +0000
Manifest this update: Mon 27 Jul 2026 01:00:35 +0000
Manifest next update: Tue 28 Jul 2026 01:00:35 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: iboV4WQHUtvGVrcZsUO9D4qrglibzpJzkUYPojDNWjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:84:34:05:cc:25:21:3e:09:59:55:ba:4a:26:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jul 27 01:00:35 2026 GMT
Not After : Jul 28 01:00:35 2026 GMT
Subject: CN=2783aadca2d70d0181cb95da8e9094524013875f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:c1:fc:67:43:06:83:05:3b:29:d9:66:8e:
1a:fc:62:b9:0a:e5:82:80:6e:70:47:27:a3:a6:bf:
a8:32:c8:8e:d9:69:77:ad:71:5b:d3:3b:45:bb:32:
05:17:5b:bf:be:a5:20:2a:cc:f5:77:bc:8a:ec:d2:
da:c0:14:7a:38:c6:19:cf:88:79:65:fc:4b:b8:55:
3c:b8:a5:58:83:a6:eb:f3:38:ec:a6:94:5b:bd:ff:
42:71:4b:bc:6a:cc:f9:8b:bf:00:a0:c9:76:60:47:
d0:4e:4b:7f:c6:93:da:02:84:05:67:30:49:53:59:
57:a3:d6:f3:9a:b4:51:55:51:bf:0b:c4:77:de:58:
e2:cf:79:0b:b3:5e:1b:69:89:8d:5b:aa:8a:fc:74:
83:32:91:4e:ef:32:a7:c8:9d:67:c1:b6:84:5d:72:
fd:03:2a:62:40:12:5e:ed:a6:56:76:29:10:e5:08:
f4:cd:cf:15:2a:e4:44:bb:49:93:16:4d:84:7f:12:
cc:f4:74:ed:af:f0:86:23:c5:f2:73:f6:95:3e:9c:
73:d2:fc:e0:b2:48:28:5d:13:20:e5:8c:b0:e4:0d:
71:d3:ef:d6:89:f8:6f:f4:96:1d:e6:90:35:17:6d:
11:78:18:8e:02:e5:69:c8:ca:e5:2a:df:ce:87:1b:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:AA:DC:A2:D7:0D:01:81:CB:95:DA:8E:90:94:52:40:13:87:5F
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d3:ec:ce:68:88:da:b8:6b:ef:78:1a:83:16:2e:44:53:0e:
d6:d3:b7:8f:eb:1b:1f:74:8a:be:c9:b9:ca:aa:8d:7f:96:9d:
9b:ec:31:77:a8:7f:a1:1a:3d:67:5c:77:e1:ad:62:37:47:19:
e3:4a:cc:cb:f0:88:f7:34:80:38:d2:bb:6c:bc:8b:36:83:e0:
21:22:9c:d9:dc:4b:5b:55:64:4a:fa:b0:d7:ae:4f:a7:49:fb:
8c:3f:a6:5a:d0:70:ca:0d:6d:30:76:ad:98:ce:58:90:e1:80:
30:c3:2b:13:96:ed:22:a7:8e:be:33:05:2d:37:a9:83:59:c5:
90:95:58:c5:74:00:9a:ce:71:43:4c:f3:67:73:f9:0a:2d:96:
3a:27:3c:d6:61:4b:64:0b:98:63:db:71:3b:36:d4:6a:44:50:
95:75:4c:e8:1a:91:9c:f3:c1:04:c3:8b:58:1b:9f:a0:dd:3e:
f5:9a:33:4c:4f:64:d7:84:d8:d9:ce:1e:4e:c1:63:c6:e2:9b:
ae:27:d9:ec:6b:5d:1b:72:ad:a1:cb:8a:93:e0:06:c9:41:54:
15:bc:fe:cb:19:70:6b:1e:9a:ce:ac:1d:ac:48:b6:b5:ec:bd:
5c:ca:08:b2:18:06:93:7b:b7:6b:36:c4:cf:d6:ab:1d:41:c8:
af:bd:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:18 2026 by rpki-client