Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: ArUS+X4Vo9w6PZSAp+rlCWNiJiplboaka29ppQNyYrE=
Subject key identifier: E7:BD:B5:24:9D:92:12:55:EA:17:1B:0E:33:F7:34:D7:D7:11:36:4D
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019FA18449C894693EDE6ACDA220BD8AE962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 02FF
Signing time: Mon 27 Jul 2026 03:00:29 +0000
Manifest this update: Mon 27 Jul 2026 03:00:29 +0000
Manifest next update: Tue 28 Jul 2026 03:00:29 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: ZxqqQZvg2kjvHdxV9xw7nhN/fP+BD/E7p7JGlQlkqPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:49:c8:94:69:3e:de:6a:cd:a2:20:bd:8a:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Jul 27 03:00:29 2026 GMT
Not After : Jul 28 03:00:29 2026 GMT
Subject: CN=e7bdb5249d921255ea171b0e33f734d7d711364d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:f4:bf:b1:79:28:27:92:9f:e9:bd:60:41:
fb:c0:ef:f7:87:c7:ed:d7:a3:3a:16:ac:19:6b:ac:
be:cc:e1:16:45:9b:40:62:06:7b:0d:48:40:59:95:
be:4e:a5:88:ba:0b:8e:90:59:76:10:4f:f3:85:89:
73:9d:dd:5f:18:23:22:e7:89:e9:37:a7:25:00:c2:
b2:18:4f:59:14:53:b2:87:74:41:4d:17:ee:df:b5:
6e:d2:97:9b:80:22:14:07:06:c2:8f:68:03:3a:ef:
32:71:a7:b3:a5:01:41:e5:27:a8:3a:30:86:61:49:
04:b4:4b:89:6d:2a:29:af:b7:5d:6d:51:6a:95:b0:
bc:e7:34:34:6e:67:5e:c8:6c:fa:21:a3:3a:5b:47:
65:3c:6f:8b:b6:f5:b1:40:25:1a:8e:75:44:85:13:
26:ff:d5:92:4e:96:43:a5:d6:ad:2c:66:98:dc:af:
99:e6:3a:44:9d:ff:cc:e7:fe:ee:21:90:8c:77:eb:
73:9e:3c:88:b5:9f:56:c8:d3:6e:5f:9f:cb:81:b7:
0a:48:7d:59:2d:12:8a:b1:5d:4e:dc:a8:88:3e:89:
07:cf:5c:07:9d:bf:65:f0:b1:0f:af:b1:56:c7:5a:
5f:df:88:9f:d3:bf:70:06:d5:04:1d:b5:9e:64:92:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:B5:24:9D:92:12:55:EA:17:1B:0E:33:F7:34:D7:D7:11:36:4D
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:8c:c7:6f:44:e5:cb:ff:01:11:05:1a:63:1e:5c:bd:94:
0b:e3:d7:d6:92:6a:66:de:8b:18:b2:ed:2b:ad:e7:5e:7b:d0:
6b:14:29:d5:f3:81:f2:8a:0b:1d:84:a4:4e:05:5d:75:93:a5:
e1:0d:c3:c4:01:90:1a:4e:49:f3:86:10:bf:f0:3c:f5:71:ac:
d4:8c:5e:18:aa:a1:5d:f5:3b:fd:4d:ff:5b:fa:c3:e9:69:28:
ac:85:70:7c:0b:bb:51:64:20:93:9a:44:17:1a:ee:d4:27:a9:
87:f6:aa:d8:44:6a:09:b9:45:1d:eb:1b:20:32:3d:0a:3f:3a:
22:e7:a8:83:36:4e:88:1b:52:33:86:df:18:3b:1a:e7:c3:6f:
61:dd:58:85:69:ab:c9:46:ac:df:5a:27:f9:8a:a7:dc:b6:05:
90:f6:e7:88:48:a3:85:eb:42:4b:8e:77:a3:94:e8:c5:2e:21:
f4:04:04:68:37:d3:92:e1:aa:44:97:39:8b:ce:57:ec:e7:5f:
05:18:32:d4:38:a9:39:32:a0:2e:91:d0:e8:7a:cd:5a:be:46:
ff:2c:bd:7b:fb:ab:84:d6:eb:c2:4f:71:b6:22:64:ec:0f:58:
16:90:de:5c:46:76:d4:94:9d:2e:a9:32:e1:54:1f:7d:d8:16:
e3:a9:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:23 2026 by rpki-client