Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: mNsmWQqF9Zx8yyAcq2MxTBCBhe2QgqGVKIxywuQZb60=
Subject key identifier: B6:FF:6F:13:C4:3C:DA:37:D6:39:03:DA:A5:78:69:FC:42:81:BC:E4
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019F118A8099EC49A87279D0BFE23CA0B10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 191C
Signing time: Mon 29 Jun 2026 04:01:57 +0000
Manifest this update: Mon 29 Jun 2026 04:01:57 +0000
Manifest next update: Tue 30 Jun 2026 04:01:57 +0000
Files and hashes: 1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: JOoiUWSoPSAbc1OemZl1R9cFDXHWNwtL/SnWS2aIVaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:80:99:ec:49:a8:72:79:d0:bf:e2:3c:a0:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jun 29 04:01:57 2026 GMT
Not After : Jun 30 04:01:57 2026 GMT
Subject: CN=b6ff6f13c43cda37d63903daa57869fc4281bce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:67:70:e9:3e:98:19:ee:d0:a5:b6:60:a3:
7d:79:d1:a0:39:a5:9d:fe:7d:08:5a:32:e4:c4:7b:
58:c9:5a:a0:79:5e:43:3b:9f:2a:4a:cd:8a:70:2c:
9c:ed:26:2c:6c:44:56:e0:37:45:20:40:02:09:1d:
07:5b:14:32:33:c4:7b:cc:5d:35:38:b6:e0:2e:90:
e9:b7:33:d8:83:0b:15:46:d0:7d:0c:03:8e:e1:a6:
41:c1:58:ff:c1:7b:ca:ed:3e:7a:e1:e3:10:be:13:
62:a4:bd:b1:ee:5c:b4:b7:f9:63:8c:63:6c:1a:ad:
6f:1b:9e:a2:6d:fa:af:ca:60:a1:c7:31:70:08:7e:
51:12:64:b9:50:da:e9:4f:4a:dc:c9:3b:e0:4b:44:
89:3c:de:20:fd:ad:d4:58:66:98:bf:d5:26:bc:12:
8d:4d:6d:cc:0b:75:1e:53:72:ac:24:48:b9:fa:9e:
7b:f7:90:ae:4c:33:56:db:8a:58:e6:10:f6:c0:20:
1b:65:d9:5e:0b:bd:8e:8b:8d:c8:6c:57:d1:2f:87:
45:d4:fe:f7:01:c4:cd:50:2d:3a:cf:43:fa:54:bc:
68:22:d2:f8:13:aa:ef:45:c8:e4:d7:1c:08:5d:2d:
ec:3c:a7:7a:73:e1:cf:56:e7:df:d3:26:ba:d2:c3:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:6F:13:C4:3C:DA:37:D6:39:03:DA:A5:78:69:FC:42:81:BC:E4
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:26:a4:d0:21:9f:e7:0d:24:f1:1b:70:37:f5:d9:80:50:6c:
48:b2:e6:9d:22:b2:7c:68:b3:00:1e:08:01:37:67:13:0e:07:
cc:8e:2e:ad:07:5e:d7:25:37:08:9e:e2:7a:77:fc:fe:0c:9c:
4a:51:fd:46:66:0c:32:f1:6e:42:85:fb:15:fe:35:20:cb:95:
e0:13:67:23:bb:d8:f0:eb:1d:f3:c5:f3:26:7d:07:29:15:2e:
bb:bf:33:53:23:c8:85:3f:97:7f:08:f5:ff:07:bf:ce:09:37:
32:85:99:75:46:a8:9a:c1:5b:cc:eb:29:d0:85:d3:9a:8c:30:
45:db:66:a0:de:cb:d4:7f:7f:19:fc:3f:ba:46:b4:e3:4b:34:
ef:7a:31:95:ea:b7:df:e7:8c:01:bc:2c:97:87:7e:b4:b1:9f:
d8:1d:7b:b4:3d:08:a9:cf:c6:30:fe:51:17:c0:a9:7e:d4:6f:
a2:0a:0f:4b:c5:3f:b2:6e:77:33:58:26:9b:e2:e8:d9:82:a3:
ed:03:5e:ce:26:31:92:94:44:ec:64:56:68:30:44:77:d0:92:
d2:e8:06:23:6f:d2:51:0b:63:24:f7:63:d5:3e:cc:f9:34:15:
f2:e6:88:bc:01:06:0c:82:55:59:90:c1:f4:40:90:55:e1:47:
2c:14:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:47:14 2026 by rpki-client