Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: 3psKAb8HAA2r/tDCGttK6+/ERgap1Z6sRinVsUTN8pU=
Subject key identifier: F3:B3:D3:A1:85:28:23:DF:51:3E:90:FC:C8:5D:84:30:6F:74:BF:4F
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 019FA1F23E8292B50611C39E8FEB7A7EB0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 14CF
Signing time: Mon 27 Jul 2026 05:00:35 +0000
Manifest this update: Mon 27 Jul 2026 05:00:35 +0000
Manifest next update: Tue 28 Jul 2026 05:00:35 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: EV6Im0Kf+GLE61KIgW2SK3aQlfI4wNaASwPbJGZ+pl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:3e:82:92:b5:06:11:c3:9e:8f:eb:7a:7e:b0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jul 27 05:00:35 2026 GMT
Not After : Jul 28 05:00:35 2026 GMT
Subject: CN=f3b3d3a1852823df513e90fcc85d84306f74bf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:c3:aa:bd:f7:ba:d0:3d:14:ab:3e:4f:67:
76:10:87:fa:9e:d3:9b:86:84:de:4f:24:ab:16:b1:
2f:b5:87:1d:67:db:e9:8f:4e:2e:ba:76:bb:f7:cc:
f5:fb:5d:06:43:83:ad:e0:2d:67:a9:a8:07:94:a8:
c8:34:da:72:61:b7:ec:d1:28:2f:9a:a8:97:33:28:
be:b9:3f:79:6f:7b:b2:9a:05:12:fc:75:a7:3b:f2:
16:c4:24:a0:c6:74:c3:d5:2d:36:a6:52:7e:c9:71:
bf:46:de:57:ba:5d:32:5a:a4:58:3c:fd:59:9f:08:
f2:7a:74:06:d1:ae:cf:f2:44:7a:4d:12:ad:67:0e:
11:41:a5:21:10:c2:ee:5e:0e:d6:4d:e2:88:f3:73:
12:2d:61:54:67:55:55:04:55:ef:8f:d6:a1:df:5b:
35:fb:cd:1a:4e:25:e2:73:32:50:3b:3b:fd:aa:34:
67:e4:23:c8:23:a0:64:ec:a0:bb:75:ce:48:7f:be:
c9:6e:8c:4b:ac:cc:b0:a3:e2:17:dc:23:78:92:0d:
29:3f:ee:6b:33:f0:4e:74:f5:c4:2f:43:55:9d:12:
dd:ef:63:4b:6b:4d:2b:89:c9:f6:47:f4:c8:12:27:
66:9d:da:e7:f9:cf:f8:10:54:c9:15:05:95:c3:44:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:D3:A1:85:28:23:DF:51:3E:90:FC:C8:5D:84:30:6F:74:BF:4F
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:45:f7:d9:d4:ae:90:1d:fa:04:ac:b0:db:d2:40:fe:47:
13:76:f6:e3:29:68:34:3f:f5:95:ab:fc:67:43:29:e9:41:5e:
14:49:34:9b:fe:85:11:cb:54:ca:e2:ed:73:28:dc:5b:b9:f9:
69:0c:a2:af:00:e1:ba:c9:47:ff:af:c8:a5:b3:89:e7:49:d9:
87:05:c5:11:d7:e8:9b:64:8e:a5:ea:46:e2:4e:9e:a0:da:51:
e8:80:70:7e:01:da:d8:a9:00:e6:52:4b:e5:0e:49:1f:25:f0:
77:59:10:60:ae:4d:08:ff:2c:fb:74:db:d8:6f:2d:9e:86:48:
96:c7:3a:50:41:ae:2f:19:10:0d:6b:ad:e0:c5:fe:c8:e5:28:
38:f4:dc:a2:4c:f6:5d:1c:98:8d:d0:c0:10:e6:49:b1:d8:42:
b0:43:2b:5b:00:45:9b:13:46:a6:db:42:91:d5:c0:a4:1f:67:
18:63:38:8c:d4:dd:46:51:d8:8d:a5:49:72:f9:0c:77:0d:2f:
91:f7:a1:13:85:76:47:dd:4a:ab:89:a6:87:9c:d4:a0:9a:be:
ac:73:68:31:62:b7:79:6a:a5:41:26:ca:d6:4f:d6:a6:d5:18:
63:f0:fd:74:97:38:91:69:64:71:f4:b9:e5:3c:ed:7e:ef:56:
e6:64:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:11:18 2026 by rpki-client