Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: BCncKThjrlhDVBK7UdHIGsVogDCI6/P7EUj0u0tyjz8=
Subject key identifier: C8:19:3A:06:64:77:46:33:E5:5D:B0:58:08:EA:E5:3F:F7:CE:A1:72
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019F86447C729276D0C40BD81BAA60D44E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 1394
Signing time: Tue 21 Jul 2026 20:01:02 +0000
Manifest this update: Tue 21 Jul 2026 20:01:02 +0000
Manifest next update: Wed 22 Jul 2026 20:01:02 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: UY7wkorNH4RD3diyLWp+4wKLDWlanzCGl0XuxkH8ngc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:7c:72:92:76:d0:c4:0b:d8:1b:aa:60:d4:4e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jul 21 20:01:02 2026 GMT
Not After : Jul 22 20:01:02 2026 GMT
Subject: CN=c8193a0664774633e55db05808eae53ff7cea172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:06:2c:a6:a6:64:23:00:9d:c4:42:4c:b3:
73:d8:64:db:81:65:03:6b:a0:10:fd:aa:20:44:c9:
f1:f2:7f:b5:cd:65:2e:e3:c1:df:e4:9c:ff:b5:85:
dc:c2:7e:e1:24:ab:eb:08:50:61:23:64:84:fe:8a:
33:2b:9c:6d:49:74:54:8f:91:6f:ac:b3:ab:14:43:
d2:d1:f6:f6:6e:85:c5:47:23:51:e9:5b:3a:6c:4f:
0e:1c:48:89:37:05:59:f6:b5:1e:68:6c:23:4b:1c:
f7:3b:7d:61:ca:81:e6:46:2e:24:94:23:78:b8:b3:
b4:3a:ed:89:b8:0b:ad:5f:25:f8:b0:57:97:5f:61:
f1:14:59:9a:f4:99:b8:bd:4c:ed:37:9c:8a:c6:40:
b5:d4:0c:b0:cd:12:4b:67:36:d5:a5:f6:d4:6c:b3:
83:95:fc:5b:a2:75:6f:24:12:cb:9c:be:27:8e:70:
d0:f8:c6:29:3f:3a:4b:3e:a4:fe:a7:98:78:64:45:
fb:a0:bb:df:5b:ea:86:cf:4d:d2:1c:dc:44:b7:07:
4d:13:91:ce:8b:36:94:bb:c8:05:9a:a4:b6:88:f3:
ed:8c:cb:dc:d2:7a:48:b5:cc:c2:39:b9:93:1f:69:
1a:63:cd:d9:f9:ae:e3:47:a1:54:fe:4c:16:39:70:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:19:3A:06:64:77:46:33:E5:5D:B0:58:08:EA:E5:3F:F7:CE:A1:72
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:21:2a:e4:ba:1f:bc:3b:1e:ec:f5:00:7a:0c:73:ed:51:
00:a9:7e:c2:a6:c1:9e:3a:6c:b4:3e:73:1f:56:ed:9a:29:a3:
b5:21:92:f3:b7:87:c8:f6:59:4f:90:a5:cc:09:37:86:e8:96:
e9:e9:41:fc:5c:57:55:a0:e5:c5:ee:81:a1:2a:c1:a1:77:54:
c1:34:10:43:ac:7e:fd:31:e8:41:e7:ee:7e:da:47:35:02:1b:
38:3d:4c:f5:99:8d:80:79:a8:d9:7d:92:08:62:ea:1b:2f:28:
19:a9:ac:87:0d:be:88:9a:c7:f7:2d:86:2b:0d:f9:89:79:22:
1b:a3:d9:e0:4c:1e:a0:84:a4:26:e5:9c:91:97:83:bb:60:42:
0a:b2:64:03:86:54:4c:09:b0:a9:5e:80:85:b8:87:f6:54:96:
d3:5e:1f:32:6a:c6:67:14:34:ea:ba:32:ac:b4:83:77:1f:73:
cb:64:fe:08:72:51:39:7d:b5:c1:64:8e:d4:79:c9:1a:bd:71:
98:23:f2:b3:93:32:e2:7e:5d:e5:3f:ea:ee:53:d7:fd:11:20:
dc:a5:9e:19:04:78:39:16:41:92:43:52:ad:90:70:81:60:33:
6f:db:2b:9f:b4:fc:41:2e:5e:9c:f9:b9:3e:e4:33:9f:bb:92:
80:9f:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:42:10 2026 by rpki-client