Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: wA6KBx1ZQKATplV/agLrdZDbYy5OpH5PnD8cezkwVYw=
Subject key identifier: 3C:8A:8B:DB:13:22:9A:CE:ED:B6:40:11:72:CE:A8:C4:47:EC:7A:AD
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019FB98E1E0440AB758FEFEC251495D856D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 19DA
Signing time: Fri 31 Jul 2026 19:02:06 +0000
Manifest this update: Fri 31 Jul 2026 19:02:06 +0000
Manifest next update: Sat 01 Aug 2026 19:02:06 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: K9lew5WmH7zBSxZwsCWGFyAQ4xBwapFtLKPhNTnl/pA=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:8e:1e:04:40:ab:75:8f:ef:ec:25:14:95:d8:56:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jul 31 19:02:06 2026 GMT
Not After : Aug 1 19:02:06 2026 GMT
Subject: CN=3c8a8bdb13229aceedb6401172cea8c447ec7aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:3f:2e:1c:48:e2:f3:dd:d0:f4:8d:75:a0:
4b:05:84:ad:44:c2:3f:93:8c:b3:93:d2:a9:6b:82:
49:93:7f:5e:07:a8:42:fa:6a:d7:a3:bd:84:9c:74:
e1:a8:01:60:bd:c1:2d:e5:55:d4:1d:58:37:76:2b:
cd:45:d8:08:bc:ff:55:f3:a1:3b:39:c5:fa:d4:7a:
c8:a3:9e:d6:15:ae:53:95:8b:89:56:56:84:08:dd:
e4:2e:f9:9e:45:e6:25:e1:fc:f1:a4:4c:0d:df:a6:
c4:e8:1d:a2:ce:d3:3a:af:e5:40:86:cf:55:35:d6:
58:b5:bd:57:72:66:53:21:6b:a3:91:d4:02:08:0f:
97:71:64:8f:de:3a:48:45:cc:dd:a1:26:8d:41:9e:
0e:86:8c:68:6b:7b:3d:e1:14:0c:c1:e8:ee:1e:f9:
a2:a9:a4:92:c5:19:99:ca:e6:48:bd:13:de:97:c6:
4b:fe:7e:75:5e:a9:e0:42:c9:78:86:97:67:44:7c:
ec:ad:70:f4:41:1b:77:7b:a9:05:2e:6c:1f:3b:85:
56:bc:84:e0:97:0b:ac:d7:f3:7e:f4:bd:ef:f8:f5:
1c:9e:1f:07:b0:7d:25:b2:51:53:ca:b4:ac:82:b8:
05:b7:81:a1:b4:21:84:0e:5a:74:5d:3c:53:f1:71:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:8B:DB:13:22:9A:CE:ED:B6:40:11:72:CE:A8:C4:47:EC:7A:AD
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:66:cf:d6:1f:7b:3a:4e:f8:fc:7a:8b:70:d6:20:49:7c:54:
88:b5:c1:b5:84:32:aa:e3:bc:4a:5d:8e:e7:0a:2e:32:97:34:
66:03:dc:8a:39:0a:f8:68:42:88:87:4b:25:fa:50:6e:ee:77:
29:58:92:f1:94:4a:99:ad:e3:f7:8f:19:19:52:26:d0:b5:c7:
d1:ab:8e:b0:47:6e:e5:a1:33:69:45:4c:a8:30:5e:f6:14:76:
4a:15:c4:65:f0:50:2a:88:67:4b:db:60:c9:81:c2:35:e9:d1:
4a:8c:0d:db:3e:c1:c1:c0:6d:9c:e7:62:98:71:0d:38:34:5c:
12:22:c4:c6:80:65:fa:f9:c0:43:2f:88:dc:93:84:19:b1:7b:
fc:35:b2:01:3a:b9:97:9d:e6:cd:e4:83:61:2a:ca:58:ef:ae:
bd:02:3d:a2:4e:5d:be:40:56:fc:0c:1f:08:83:7f:91:83:31:
c4:b4:81:c7:a7:cf:e9:dd:7f:2f:a9:3e:59:42:f8:89:d1:92:
5e:d0:ff:52:91:4a:7a:c0:69:d2:bb:89:db:1b:2f:ac:31:20:
39:0a:9e:79:5c:c1:f1:8e:9f:a0:00:16:8e:91:bf:94:81:73:
3a:dc:a1:b9:20:42:f1:27:36:c8:8b:be:b3:c8:38:a9:e5:cd:
e2:22:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 05:45:40 2026 by rpki-client