Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: euoHDM3XJVORUeb+S3wQoK8I9NNfph/Ra133POul1CE=
Subject key identifier: AC:BC:3E:20:CE:74:25:A6:93:26:4F:C5:56:4E:DC:FD:C6:B2:F6:E2
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019FA14DA647DB96C4D9D3B4BB83FC92FA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 19DF
Signing time: Mon 27 Jul 2026 02:00:48 +0000
Manifest this update: Mon 27 Jul 2026 02:00:48 +0000
Manifest next update: Tue 28 Jul 2026 02:00:48 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: 1NeEneZ7OJcGNrPxwaJudwJwEuU9JQsuyycPKEI1u3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:a6:47:db:96:c4:d9:d3:b4:bb:83:fc:92:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jul 27 02:00:48 2026 GMT
Not After : Jul 28 02:00:48 2026 GMT
Subject: CN=acbc3e20ce7425a693264fc5564edcfdc6b2f6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:f2:89:a0:ae:c7:58:3a:c2:ae:78:ad:7f:
7c:f1:9d:03:ab:96:6a:6b:2d:0c:fc:7d:31:e4:15:
c6:6e:d1:2d:c6:4a:c2:c2:e8:91:81:62:d2:46:f1:
f9:0c:88:3e:02:86:23:67:04:2a:59:96:27:76:69:
20:29:c4:ed:34:02:0d:0e:b0:a4:07:4d:e6:56:65:
8c:89:3c:43:98:80:46:c1:44:d9:02:5a:09:42:01:
9f:90:5f:96:df:67:65:4c:25:03:70:9c:8e:0a:59:
c0:e8:e3:d2:20:c1:48:03:d9:87:9a:e8:07:c7:ea:
ba:8b:45:7e:a7:9f:d1:fd:a1:43:ee:7a:27:57:3d:
b0:c3:46:96:0a:f2:75:27:19:fa:d9:29:bf:41:6f:
6e:b7:96:53:76:eb:b0:51:ac:65:2c:14:68:b8:ac:
48:50:d2:65:a5:67:f6:3d:fd:74:93:87:25:50:cc:
8e:95:30:85:10:7d:80:cc:8b:8a:58:c8:4b:5c:1c:
4f:84:85:dc:24:57:27:0f:0b:83:fa:ac:5e:b5:23:
5c:83:39:c3:1e:37:50:98:8c:ae:da:47:73:91:13:
26:46:3a:a5:9c:d6:52:ba:d4:b9:cd:8d:39:01:2a:
d0:07:7b:71:66:ca:f2:17:bd:0f:89:b4:13:27:d0:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BC:3E:20:CE:74:25:A6:93:26:4F:C5:56:4E:DC:FD:C6:B2:F6:E2
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:61:ee:f4:4b:50:39:ca:11:da:a4:e4:04:0f:93:52:01:
5c:09:42:81:09:6c:2b:45:68:19:af:e4:49:56:16:fa:33:16:
44:06:5d:6a:85:80:72:fe:59:2b:fe:e4:36:3f:1b:ef:c4:f4:
ea:2b:8c:76:51:5a:0d:46:fd:a4:82:d2:a5:bf:38:60:0a:fa:
b9:20:37:5f:40:4c:fa:8e:64:2b:e2:65:95:c5:c6:d3:2d:72:
8c:45:36:9d:80:8b:a2:d0:97:f3:22:c1:10:99:20:59:2d:85:
31:74:c6:ed:02:5f:75:e6:93:95:53:85:c1:24:58:ae:27:5b:
3e:c4:85:d4:5c:43:8c:4c:27:0e:0d:39:af:4a:83:d1:ea:ad:
16:74:7c:9c:c3:d0:ca:08:0c:2b:c4:09:33:06:0a:e3:ce:f0:
d5:22:a3:00:3a:ba:76:07:2a:4a:82:0c:30:19:8f:70:97:9c:
8b:fc:cd:f4:c2:f8:7e:20:25:40:3d:ec:ba:82:4e:d1:72:7b:
70:cd:30:d9:2d:8c:72:99:d6:a4:91:c9:66:19:3d:8a:b4:18:
72:e0:cf:31:fa:db:75:8e:c4:e0:29:33:37:a7:c3:3c:11:2f:
fe:5e:50:d0:b6:52:41:4f:e4:56:ef:bf:7f:0c:b1:c9:bf:89:
14:46:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:22:15 2026 by rpki-client