Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: YuFydq3Jx+m0wERxxJmCvnQGU25qVD3Lv8H1l5VP93A=
Subject key identifier: 36:2D:AD:6A:E5:55:FF:46:DB:82:E3:F8:0B:F5:03:18:98:58:E7:CC
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019FC9A525AF947C3E5F6A967214C61F0B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0DD6
Signing time: Mon 03 Aug 2026 22:01:11 +0000
Manifest this update: Mon 03 Aug 2026 22:01:11 +0000
Manifest next update: Tue 04 Aug 2026 22:01:11 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: 1XstyrU28tNut+KLzRU9sZKJtzj3zTVcjBeFHUMwMtc=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:a5:25:af:94:7c:3e:5f:6a:96:72:14:c6:1f:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Aug 3 22:01:11 2026 GMT
Not After : Aug 4 22:01:11 2026 GMT
Subject: CN=362dad6ae555ff46db82e3f80bf503189858e7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:d2:e6:52:81:23:1c:29:ab:1b:42:68:e3:
da:e3:37:01:ba:73:5d:34:53:8a:24:50:26:3c:9b:
26:1a:00:01:d8:8b:29:d1:29:18:a7:c5:5a:27:78:
34:6a:6c:89:f2:ae:a5:f1:99:1a:4a:e3:4f:5e:ab:
56:74:21:3b:02:e3:d1:60:2c:18:23:ce:12:e0:59:
9b:95:43:ba:4e:e8:e3:8d:67:d0:52:7a:9e:56:8f:
25:b6:1c:34:b2:33:6b:e6:1e:8d:9e:0b:60:62:ed:
0b:6c:94:e3:5f:bf:15:b2:1a:46:99:89:c3:0a:40:
ca:a0:a9:e0:52:ae:76:cb:5c:90:03:69:e3:27:df:
41:c1:33:90:4f:f1:4e:f0:24:94:2e:af:ff:b1:96:
a8:3a:17:5d:83:c7:26:e9:56:97:59:68:45:79:f1:
1a:e4:98:2b:7b:dd:c8:60:d5:96:16:03:17:ef:8e:
6d:5a:19:c1:30:95:d4:0e:06:a2:0b:92:d3:ce:1a:
5f:dd:14:aa:62:d0:37:df:d1:41:f2:25:c5:77:dd:
41:11:5f:10:42:49:9b:24:14:43:48:78:4e:a0:6d:
d3:c3:71:0c:07:52:62:dd:a3:0b:d4:97:c1:84:dc:
c9:25:ec:bf:38:23:76:d4:0c:20:2b:c1:b5:cd:37:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2D:AD:6A:E5:55:FF:46:DB:82:E3:F8:0B:F5:03:18:98:58:E7:CC
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9b:6e:26:33:63:e6:7c:d3:0a:30:fc:36:5e:0f:32:03:7d:
3a:23:0c:aa:7d:0d:53:29:05:8f:1a:72:d7:6e:71:eb:b3:94:
34:22:b9:0b:0b:2c:07:bb:eb:c4:9c:b5:1f:cf:ab:53:29:30:
f1:01:10:78:35:e5:42:4c:06:9a:e1:0e:27:2d:4c:6f:80:36:
c3:7e:9f:4c:5c:b1:57:01:b0:48:2d:45:f5:2c:ef:a2:f3:6d:
84:8a:7a:3b:bb:d1:23:60:ea:6e:dd:29:a8:98:69:71:b7:b6:
e8:bc:5e:23:2b:1c:56:6c:1a:28:74:ef:e6:80:d3:8f:30:54:
42:56:da:4e:d8:e5:52:e0:4d:5c:44:bc:ac:1c:b4:a9:f8:33:
7d:f1:ca:40:55:b4:f0:02:ad:13:05:f7:48:18:e3:05:e0:48:
03:2d:c3:62:8e:ad:a9:67:af:50:56:39:29:63:fb:97:e7:9f:
df:61:fd:07:46:fa:d7:e6:36:a7:0b:00:82:e4:fc:b6:23:c2:
0f:6c:db:78:c9:e6:60:95:63:7e:46:69:e3:f6:3e:49:e1:d8:
ed:1a:31:fc:ae:b9:da:7c:58:6f:ca:89:d6:22:32:68:04:58:
da:da:ec:f4:f7:e8:d5:2a:d8:dc:91:ae:21:d2:d3:e4:b7:87:
15:9b:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:55:54 2026 by rpki-client