Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: urdZxXGFTe3q5Nfc9C/VE+fGC1Iu9DLvixjzJ/v+ONc=
Subject key identifier: 1C:2D:F3:63:11:73:63:E8:8F:87:05:BE:43:33:2A:41:BB:23:C4:92
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019F19B104AEC0BD3E725EC2C375D7BEFFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0C9E
Signing time: Tue 30 Jun 2026 18:00:59 +0000
Manifest this update: Tue 30 Jun 2026 18:00:59 +0000
Manifest next update: Wed 01 Jul 2026 18:00:59 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: JJ7WkhPZTzidRAoPSuAB3H8MJyl2WOLu2WTYS/K1PhQ=)
3: ez4u_1j0_ojM3jorhMhPc8LRXyY.roa (hash: iklDjhEm/+o8jK0OCBuLkTDvKYqHZMgst24iVNDdcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:04:ae:c0:bd:3e:72:5e:c2:c3:75:d7:be:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Jun 30 18:00:59 2026 GMT
Not After : Jul 1 18:00:59 2026 GMT
Subject: CN=1c2df363117363e88f8705be43332a41bb23c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:ba:c2:5a:6c:5f:a5:2e:8e:6b:90:11:41:
3f:5c:a0:b6:7b:75:4d:01:c7:c0:58:17:7c:a3:90:
8d:73:1f:ef:e8:c2:26:ff:ba:51:f9:60:73:32:1f:
33:02:1c:b1:bb:7b:65:7f:be:61:e4:b1:a2:c5:26:
7c:9d:a3:38:6b:4a:22:5e:41:92:cd:7f:55:73:e3:
01:5f:1d:5f:17:b9:d8:6e:e7:cf:37:bd:dd:94:26:
87:b6:22:4a:22:4a:17:30:b4:6e:6f:2f:29:99:95:
f4:00:f7:d3:f7:89:38:99:e5:fa:f8:43:96:7d:5f:
8a:54:1b:20:a3:37:d0:37:55:d0:e9:74:92:26:9f:
a7:32:d6:15:25:0c:a8:45:48:17:59:bd:39:86:e5:
98:5c:67:46:22:39:7a:54:24:ff:84:52:8d:6c:f7:
8a:8b:3d:92:bd:bc:59:13:0a:5e:d9:3c:b7:af:f9:
de:47:1b:08:4d:ea:9a:52:ed:53:08:e9:63:11:3b:
de:06:01:9e:99:21:0c:8f:51:1f:b7:4c:b1:83:ba:
d0:8a:3e:9c:92:45:fb:bb:cc:0d:60:1b:53:12:48:
0d:6d:d8:e3:ee:1d:e5:0b:d0:86:90:dc:b9:ee:07:
dd:38:e0:69:bd:2c:ef:50:74:4d:fd:c0:4a:ba:be:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:F3:63:11:73:63:E8:8F:87:05:BE:43:33:2A:41:BB:23:C4:92
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:f6:15:ad:c6:e1:83:3b:7b:a3:aa:d8:fb:f1:12:94:06:
6a:f9:18:15:f9:8a:03:82:ed:29:49:d2:a9:58:1a:89:22:e9:
9e:41:e9:32:80:db:3b:15:cf:33:cb:b8:a1:51:05:aa:34:d6:
de:44:a9:d6:ec:ae:7a:8d:3f:ed:80:30:55:c2:ed:4f:e9:c6:
21:c9:d2:35:82:4f:57:07:0c:1a:ee:64:0a:18:37:33:a0:c1:
be:d0:60:ae:81:75:0f:df:84:5b:72:f3:53:4f:1d:46:4d:cf:
e3:44:84:d0:a1:84:3c:d1:7a:5d:27:aa:41:43:f9:68:98:1b:
0f:d9:4d:ab:4b:0c:87:e1:16:70:6d:39:fb:31:67:fe:25:ad:
f4:21:85:75:95:fe:3e:83:cc:11:62:fe:9d:00:f1:4e:a9:2a:
a0:5d:2e:5e:8d:d7:64:59:91:d1:4f:04:65:cf:02:9a:01:d4:
76:64:27:8b:d2:58:df:2b:84:13:91:65:6d:e1:0d:fe:e4:82:
2e:52:c7:75:f1:38:ad:f4:88:4d:cd:e0:56:37:ac:e9:eb:cd:
b0:81:b7:8a:ca:84:05:26:74:df:f0:22:c0:77:ea:d7:d0:9d:
04:9e:1d:e4:d7:c7:0f:92:a5:12:b3:e4:b9:fb:ee:f2:76:f4:
f1:fc:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:00 2026 by rpki-client