Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: H/YPBCXPHRz94aXlMlHNiOuw2cCzx6+FEmUCOYdkvTw=
Subject key identifier: 83:7F:16:84:5C:72:5C:AB:B0:0B:2B:DA:5E:36:23:51:2B:AB:A0:EB
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 019F528E0808E0E99E32249F9DA2B39A4F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0E27
Signing time: Sat 11 Jul 2026 19:01:07 +0000
Manifest this update: Sat 11 Jul 2026 19:01:07 +0000
Manifest next update: Sun 12 Jul 2026 19:01:07 +0000
Files and hashes: 1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: ObTFFgDcVsz2o+UKWI77EOq46hUon94/oLyyhfOfQrU=)
2: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (hash: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:8e:08:08:e0:e9:9e:32:24:9f:9d:a2:b3:9a:4f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Jul 11 19:01:07 2026 GMT
Not After : Jul 12 19:01:07 2026 GMT
Subject: CN=837f16845c725cabb00b2bda5e3623512baba0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:4f:8f:2c:6b:99:d8:35:3a:d9:ee:99:26:
f1:f6:45:4a:5d:1d:14:69:19:8e:78:3f:d1:2b:5d:
c4:f4:44:e9:5d:1e:27:c2:09:ff:1b:e5:21:0a:cc:
40:b5:b3:44:25:58:bf:00:e6:37:b7:3d:96:b8:bc:
8a:6c:39:4d:ed:b0:00:66:f3:05:74:71:e6:43:d5:
26:4d:5c:16:29:cf:4e:d2:4d:b7:be:62:86:f6:2f:
c7:e5:a5:3f:ec:a9:7f:a3:70:6c:fa:f2:ef:8b:16:
01:bd:60:af:b5:ff:1a:ea:32:ae:a4:22:69:8e:72:
1e:6e:9e:99:de:4d:4c:54:4d:98:00:a5:f6:a9:02:
65:a8:4b:c3:a3:f2:5c:b1:3f:a5:dd:4e:b1:73:e7:
1e:38:b4:a3:3b:f5:20:11:ba:70:3f:94:4d:62:e4:
9c:2c:9a:48:70:93:18:1e:ca:9d:a0:ed:ae:e4:c6:
da:12:32:57:18:5e:41:2f:9a:1d:0a:f3:77:bc:37:
a5:88:64:40:bf:45:20:05:0b:5b:55:0a:d5:ec:61:
a6:2b:80:f8:51:ac:49:97:64:c8:8c:14:f4:48:aa:
bc:a3:96:5d:75:bd:c5:c4:e3:71:4a:31:7c:7b:b6:
ed:78:20:80:88:57:2e:c7:b0:c5:49:06:5e:87:8b:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:16:84:5C:72:5C:AB:B0:0B:2B:DA:5E:36:23:51:2B:AB:A0:EB
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:75:ba:b9:dc:c5:f8:1e:47:9c:f8:98:04:d7:c7:69:bd:93:
ef:76:49:d0:44:a1:39:65:07:b7:5e:2c:88:01:c1:38:d0:a5:
8f:fe:f1:0b:86:d4:48:99:48:95:e2:03:cd:61:71:15:f4:53:
a4:86:bd:87:bd:e7:1e:ad:21:71:85:e2:a6:38:3c:3e:6e:36:
e5:1c:8e:af:75:11:e6:10:4b:f8:c4:55:ee:f4:fe:83:b9:7e:
87:5f:85:e0:9a:61:7b:25:d4:10:96:44:f5:fb:67:00:3c:bc:
75:fa:78:00:70:4a:1d:1e:7e:c1:fb:62:14:33:6f:cb:19:03:
c7:58:f1:dd:93:5a:76:25:2a:bc:b9:9a:3e:83:d9:0d:39:a3:
29:83:0c:16:28:a7:6f:a9:bf:f2:5a:f4:5e:29:df:6c:a1:5c:
dd:a7:2d:e5:da:60:e3:86:7b:5a:5f:29:a3:f6:29:a4:93:af:
f7:03:b1:9a:9e:6c:f9:cd:63:e1:04:9f:c5:8b:30:60:8d:54:
b5:fd:a7:04:89:a6:57:31:b2:1d:69:80:fd:c5:1d:a7:2e:be:
86:21:b8:a5:2b:76:d1:f2:34:91:a7:32:80:f5:23:2f:97:cf:
90:e4:8f:c6:a9:c4:0a:3e:d8:d4:6a:b2:7f:14:1e:94:44:22:
c7:fc:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 05:24:14 2026 by rpki-client