Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: ODQbiresDczy2tyTzUIwB2myBQUeo9d2ZT2ev4d/zHE=
Subject key identifier: 9C:9E:17:1E:7A:89:4F:A1:29:DC:D5:FC:41:A9:AF:03:91:C1:E3:6C
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019F86B201C63E3AD27DA0FD9A08158B3C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 1243
Signing time: Tue 21 Jul 2026 22:00:40 +0000
Manifest this update: Tue 21 Jul 2026 22:00:40 +0000
Manifest next update: Wed 22 Jul 2026 22:00:40 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: IgZ0gfPMqZidpLRWFPkZFt/tgx05N1nL7F3Y/rIAV30=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:01:c6:3e:3a:d2:7d:a0:fd:9a:08:15:8b:3c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Jul 21 22:00:40 2026 GMT
Not After : Jul 22 22:00:40 2026 GMT
Subject: CN=9c9e171e7a894fa129dcd5fc41a9af0391c1e36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:62:74:20:b8:72:01:ed:a2:e1:42:87:21:
c7:eb:ed:ce:d1:e6:98:40:00:0f:ee:97:a2:a4:5c:
20:6c:5f:95:85:ad:45:49:a5:85:f7:81:84:1a:59:
a0:2b:21:be:d9:28:0f:af:fd:ba:97:c7:eb:c8:60:
e0:2e:bf:32:7a:86:5b:1f:e9:41:41:d2:7c:3e:d0:
40:b4:d8:e9:1b:4e:a7:76:56:8b:2a:34:10:51:8b:
1b:35:d4:bd:6c:67:28:03:f6:10:d3:5a:9d:c9:13:
0b:2b:dc:c7:34:81:25:bc:15:48:6b:76:58:ec:93:
39:cd:b4:c2:f2:79:3c:8c:48:a9:0c:6f:76:5e:47:
53:68:80:c7:e9:02:c0:dc:68:3d:bf:26:b0:54:1e:
a9:bf:a5:36:6c:1b:ea:ee:aa:2f:a2:22:ad:86:65:
e1:41:ef:ab:47:0d:f8:3b:dd:2d:42:c1:32:c0:00:
57:42:e7:f7:b6:4b:5f:a2:70:0c:b3:ec:01:c5:54:
99:2b:87:f0:32:a5:9a:56:37:87:e7:b1:19:0a:33:
51:c6:13:f0:04:69:19:31:6f:6e:a5:b1:b1:72:a1:
a8:5e:6a:fc:25:f1:17:38:9a:e9:14:a8:26:bf:76:
a5:38:62:80:cf:27:5f:89:1e:70:71:7d:2e:9f:69:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9E:17:1E:7A:89:4F:A1:29:DC:D5:FC:41:A9:AF:03:91:C1:E3:6C
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9d:c6:8a:c2:da:99:3e:ce:4d:d8:f6:14:be:88:6f:16:af:
6b:dc:00:a5:b6:1a:61:60:c4:b9:7f:d9:13:fa:97:a3:e7:81:
de:fc:05:37:5e:9a:82:ff:93:46:29:9b:99:d9:48:85:c3:4a:
fb:76:ee:9d:2c:77:d2:da:8c:49:76:97:d5:17:05:a7:53:e4:
c3:aa:a8:d3:cf:94:58:ca:6c:8e:6c:43:34:5c:c8:00:30:eb:
80:e4:68:07:25:1e:b0:a0:be:0f:24:8c:e1:ce:39:72:fa:b3:
0a:e9:05:fc:5d:7c:f0:83:0b:3b:3c:35:55:15:b3:13:e2:1a:
3c:03:bf:42:0f:98:2b:78:43:a3:6e:79:95:e3:12:29:e9:97:
6b:e0:c0:42:7b:6e:fe:6c:b6:f8:2c:43:e6:4d:ef:76:9d:8f:
2d:75:5e:06:5d:c0:21:bc:8b:f6:14:a1:60:c4:6d:9f:31:2b:
59:3a:b6:85:20:88:dd:79:6d:0f:cc:8a:3f:a4:24:43:aa:3c:
62:81:08:57:97:b2:45:f1:a0:bd:02:9d:28:fd:4e:01:53:c2:
74:49:f2:f2:50:5d:d9:97:e0:f7:74:12:70:c6:c4:4c:c6:fd:
48:46:49:42:02:90:a7:22:3d:a9:90:5d:51:ca:63:23:2b:20:
69:0d:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:04:01 2026 by rpki-client