Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: hNsyTtm5j/a9zkDYrKYgniV3mbZbypsRuIQY6rZVb+k=
Subject key identifier: 4D:9E:D2:BA:2B:C1:00:30:5B:F4:BE:F2:8A:7F:1C:B1:B7:D3:1D:2B
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019FCCA6158563B82EAF8758DAFEEB39841D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0F1A
Signing time: Tue 04 Aug 2026 12:01:04 +0000
Manifest this update: Tue 04 Aug 2026 12:01:04 +0000
Manifest next update: Wed 05 Aug 2026 12:01:04 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: Nx2LU2NLUFwibBfUMBok79brAKwQ+3ZhKYlsOazkbHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:a6:15:85:63:b8:2e:af:87:58:da:fe:eb:39:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Aug 4 12:01:04 2026 GMT
Not After : Aug 5 12:01:04 2026 GMT
Subject: CN=4d9ed2ba2bc100305bf4bef28a7f1cb1b7d31d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:3a:0d:7c:8e:99:fd:e4:c0:46:1a:b3:99:
52:6f:6c:1c:16:6f:ff:0d:83:77:1a:ed:bb:de:ce:
23:47:48:e6:83:bc:03:a9:21:d5:b7:6f:67:75:f1:
17:ae:a2:99:d9:73:ab:65:8a:6e:29:e5:71:c6:72:
8d:1f:4a:09:00:d8:20:80:57:4b:d4:9c:4d:df:6e:
6a:e4:5e:c2:b3:be:b8:5d:57:a4:80:70:74:36:bf:
c0:01:b8:62:67:a7:d6:ca:4c:c6:54:d9:63:3e:96:
f4:b8:06:a3:36:3f:df:fc:d3:04:fb:6f:7b:24:53:
64:b8:f2:d5:76:06:b1:64:10:9d:b9:4f:1c:28:bf:
a8:cb:a2:96:b6:48:6c:07:42:5d:81:2c:d1:65:42:
9b:35:21:32:5d:f0:13:2b:58:5c:3e:a5:0d:e3:65:
01:d4:c2:10:b8:85:df:d5:3c:ad:f6:f0:b6:7e:5d:
35:c4:90:42:18:2e:2b:3a:09:bd:71:45:2c:70:9b:
51:e0:9c:d9:51:9f:55:9f:fb:15:cf:5d:26:67:67:
ff:ae:c1:3f:9a:f8:c2:04:1b:b2:60:be:6c:67:00:
28:7c:eb:57:c3:9d:0d:33:37:f9:c6:61:92:77:7c:
61:3e:43:1c:da:f6:62:0c:d1:eb:b5:52:b3:60:7a:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:D2:BA:2B:C1:00:30:5B:F4:BE:F2:8A:7F:1C:B1:B7:D3:1D:2B
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:2a:29:2f:e9:53:e2:0d:f0:6c:ac:c4:3b:09:86:df:37:
32:4f:f9:ca:b8:36:b7:56:d5:c8:a5:09:77:81:76:df:5b:4e:
40:27:06:85:10:d7:7c:99:0f:e8:26:0d:5f:06:45:64:da:f5:
cc:25:5a:30:04:46:f8:d1:e9:7f:89:85:1d:b3:b6:27:21:83:
e3:40:b8:78:55:17:f0:93:50:b9:e2:e0:c0:b5:2a:e7:21:7d:
b0:91:b0:35:8a:31:fb:3d:bb:08:8b:91:f4:68:a0:ed:bf:a3:
57:6e:e7:34:d7:34:83:c4:05:6a:71:77:17:9f:fc:a4:b0:2b:
26:46:54:69:0e:04:4b:c3:e1:ac:fa:0a:29:31:76:e0:5b:4f:
ba:b2:27:24:8a:66:84:73:95:a6:40:b8:a3:8b:da:ca:2b:fc:
d0:8c:37:d2:af:71:80:2b:f6:69:c6:fa:8d:99:73:b1:96:b9:
5f:21:63:ad:cc:69:c7:f0:05:32:61:9f:f4:21:58:93:1e:ef:
50:72:ce:d2:4f:34:a7:0e:2a:cc:02:b1:d6:3a:d6:95:bd:43:
50:56:8e:6a:04:89:65:2d:d6:19:53:4e:3b:7c:c8:e6:75:41:
6a:80:44:79:2b:f2:a0:82:9c:50:d0:f9:1a:19:63:df:69:81:
eb:72:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 16:31:26 2026 by rpki-client