Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: mAZit9bFPBF6apwNim1Sk09SLriMbaMmrhntyFpzrzo=
Subject key identifier: 64:C5:76:B2:A9:8B:0F:7D:16:5D:5D:BF:F1:B3:4C:96:49:02:50:C3
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 019F9F5FA8FAB17D5EE30959FCA1CC99DEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 1955
Signing time: Sun 26 Jul 2026 17:01:14 +0000
Manifest this update: Sun 26 Jul 2026 17:01:14 +0000
Manifest next update: Mon 27 Jul 2026 17:01:14 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: WKm+vRy3qflICqifI7AMU6fltIcOt68nuoOn6bL1itw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:a8:fa:b1:7d:5e:e3:09:59:fc:a1:cc:99:de:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Jul 26 17:01:14 2026 GMT
Not After : Jul 27 17:01:14 2026 GMT
Subject: CN=64c576b2a98b0f7d165d5dbff1b34c96490250c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:85:f6:69:4a:e1:56:07:74:44:23:d4:a5:
bb:37:d2:d1:f2:78:3f:ec:c0:11:3f:16:6a:8f:51:
5e:f8:00:ff:c8:7c:4a:5a:c9:c4:d6:fa:1e:3a:00:
ef:2c:89:77:1a:38:58:13:74:1e:cc:12:fa:19:6e:
8f:42:39:fa:1c:d0:8d:69:17:93:06:1d:a9:51:59:
8c:23:82:33:2c:24:cc:fc:95:f7:49:ef:f0:b8:80:
0f:56:4c:f0:92:9e:14:78:cd:84:46:31:1c:29:68:
99:68:44:bc:33:5f:cf:2a:86:95:12:68:06:0c:aa:
2d:8a:02:f2:f7:1d:15:48:c5:30:18:e9:e9:84:ed:
84:2b:a3:78:6e:c1:ea:6f:a6:a4:5a:fb:66:76:fe:
3b:b1:9c:1c:65:6f:f0:87:0f:c5:29:41:59:28:ba:
8e:1b:bd:25:e4:31:a4:92:f2:47:e1:47:24:44:58:
ab:06:b6:8c:59:12:bf:f1:13:53:80:9f:60:8a:5e:
b7:ec:0b:34:c2:1e:f4:eb:43:10:ac:4a:d9:c9:75:
24:11:20:36:57:34:91:75:5d:9c:7e:4e:2e:a5:d9:
6d:30:cc:84:47:81:d8:e3:14:4a:21:ac:ce:8a:45:
9d:70:84:df:86:2d:b6:08:ff:d8:e0:bc:e1:f8:20:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C5:76:B2:A9:8B:0F:7D:16:5D:5D:BF:F1:B3:4C:96:49:02:50:C3
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:23:5e:94:b3:9b:5d:b4:09:1c:ba:9d:42:7c:16:cb:bd:32:
9a:04:7b:37:31:8e:08:dc:41:80:ab:12:af:dd:0c:65:37:8e:
17:29:ce:15:2c:50:69:e9:50:82:3d:39:cb:e9:a5:65:ed:47:
cd:26:27:6f:0b:70:cc:28:82:37:14:47:84:9a:fa:40:e1:81:
64:a2:1f:d5:75:17:9d:1d:a1:68:ad:aa:ce:9d:b1:4a:8c:7a:
49:93:5d:b7:b2:6a:2c:c5:4c:d8:bf:4b:d5:88:f8:ed:e3:c4:
d8:e9:aa:1b:d9:a0:4a:89:f7:11:d8:50:c1:38:30:02:f0:44:
e9:78:8a:50:e1:d4:d6:e4:f3:c4:a7:05:69:54:6c:d7:71:97:
6b:b0:5f:8c:c9:35:36:5c:e9:3c:de:15:d2:06:8a:07:b2:f0:
c2:7b:14:e0:cf:ce:c7:bf:74:6f:ef:e5:bc:8d:b8:e0:cc:b7:
a4:00:77:bd:f4:a5:67:c2:07:ec:ee:17:96:16:67:b0:1c:81:
e5:e9:97:66:79:0f:ee:f1:30:c6:c3:b5:14:39:a6:d7:87:b9:
e1:5b:c7:9b:b1:e1:0a:3c:9a:32:61:da:0b:0a:7d:da:44:7e:
a1:49:01:a3:be:41:4f:fe:25:9d:d7:f1:6c:97:8f:af:0a:e5:
e7:a5:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:27 2026 by rpki-client