Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: MjHKP7oOFfXDULDXVZhSNp+fzdx3EwE9C1Kae/C4YWQ=
Subject key identifier: EB:1D:99:01:62:23:2D:E3:FC:3C:46:94:1D:9E:6F:90:1E:22:78:77
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019FA260897F8AB74AB017B2ACE6D10844F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1718
Signing time: Mon 27 Jul 2026 07:01:03 +0000
Manifest this update: Mon 27 Jul 2026 07:01:03 +0000
Manifest next update: Tue 28 Jul 2026 07:01:03 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: xf9FPHeTCjSY2kQLo514RVR6WrO1WDDHCHJncYRCj+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:89:7f:8a:b7:4a:b0:17:b2:ac:e6:d1:08:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jul 27 07:01:03 2026 GMT
Not After : Jul 28 07:01:03 2026 GMT
Subject: CN=eb1d990162232de3fc3c46941d9e6f901e227877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:f4:3c:9e:50:72:29:31:8e:01:09:45:a0:
22:20:7d:f7:2d:77:1a:4d:06:c2:45:e3:60:a2:3c:
e6:e0:b8:c4:25:89:cd:b8:88:d0:83:e8:5a:8f:15:
e1:0e:cd:c2:d2:3b:f4:02:d9:0a:03:0d:f6:b9:59:
ac:81:8a:b3:9f:2d:81:57:9b:53:09:c1:ce:13:5c:
d2:8a:ea:9f:3c:db:32:49:f2:eb:36:27:a6:fb:a3:
9b:13:53:f2:98:c1:ad:26:77:95:0e:40:bb:44:52:
85:38:b4:11:1c:87:10:5d:65:6a:e7:b9:9d:ef:83:
83:41:60:c4:a8:43:28:e5:65:26:bf:3e:65:17:d2:
11:0f:ab:31:c1:9d:7c:e4:49:f1:1b:c2:10:65:3e:
76:95:9c:61:66:38:38:13:e2:10:a9:00:42:22:ef:
46:d4:d5:df:74:91:3b:cb:24:60:25:51:3f:d2:d8:
d2:58:19:30:73:41:6a:48:9d:b5:b0:86:4e:16:53:
48:f1:e5:e2:3d:d3:21:42:08:b1:f7:5e:98:30:49:
05:e8:f0:25:48:53:18:4c:7f:a7:fc:25:af:c8:0b:
4e:f1:14:e1:09:30:e8:12:71:d1:7d:9c:5e:7c:3c:
05:89:a1:2e:23:73:7a:ca:fa:85:90:37:8b:2b:a6:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1D:99:01:62:23:2D:E3:FC:3C:46:94:1D:9E:6F:90:1E:22:78:77
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:82:ba:df:2f:ed:c7:86:14:34:30:1e:99:db:1d:c4:f8:42:
c6:1d:7f:a5:54:3c:e8:7c:5c:9a:54:0c:59:76:17:1d:06:69:
76:41:55:1c:ac:6f:d3:da:74:7e:ff:58:96:17:55:19:d5:3a:
6d:1e:c4:66:4f:e2:b6:51:d7:22:0e:02:90:ac:6d:f2:5c:f2:
d0:fb:fb:86:27:cf:26:03:80:4b:2a:97:2e:d7:01:ac:74:29:
3b:85:68:95:92:fd:c4:a4:92:00:d8:85:9e:e9:23:c1:ed:c1:
0b:4c:ce:0e:7a:7d:46:da:61:c9:bb:06:ee:32:b0:9c:93:a1:
9f:30:2c:24:b3:8a:72:d7:7d:dd:4e:8c:00:cd:16:07:fd:a7:
b6:f4:c9:12:28:c2:e9:d3:1b:30:9d:bd:3b:98:67:68:d3:e9:
62:f3:7b:c7:2b:f2:2d:1b:90:2f:98:3e:49:eb:90:25:b0:e8:
42:a2:d4:72:a4:a4:1c:b9:eb:84:51:e8:3c:ba:b4:29:dc:c6:
98:0e:f1:d4:0f:33:e6:7c:41:9d:68:59:5d:63:38:87:60:4a:
f6:9d:09:d4:53:0e:70:05:ee:55:14:99:c7:44:37:ee:fc:71:
df:a2:de:35:3c:36:6b:6a:23:06:6d:67:7d:b2:0b:69:a4:e5:
b6:0d:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:04 2026 by rpki-client