Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: gH+GSbTpdfKYYm2wV1QE7ujso31wuOhv7bjkuxy6KN4=
Subject key identifier: C2:96:30:8E:EE:9B:82:8E:82:D4:59:D7:6D:87:98:D9:42:BF:83:95
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019F12D3C4CA8C627739EE35D74F17D2DF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 08E8
Signing time: Mon 29 Jun 2026 10:01:36 +0000
Manifest this update: Mon 29 Jun 2026 10:01:36 +0000
Manifest next update: Tue 30 Jun 2026 10:01:36 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: U580N4ptJBZACLXqiFf8DHL8K0RzmXVRJpAI25GYDH0=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:c4:ca:8c:62:77:39:ee:35:d7:4f:17:d2:df:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jun 29 10:01:36 2026 GMT
Not After : Jun 30 10:01:36 2026 GMT
Subject: CN=c296308eee9b828e82d459d76d8798d942bf8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:2b:47:99:96:fb:68:a5:58:99:74:3b:f4:
cf:79:02:48:32:8e:0b:68:d0:08:9d:97:04:1e:66:
6f:14:4a:a5:5c:6e:05:b9:af:6c:1d:ae:f5:1a:be:
b0:f7:d3:79:c3:8f:62:05:75:66:f6:55:a4:cf:a1:
9e:94:d4:06:94:b1:15:1b:87:e7:8d:ba:8d:e3:65:
af:2a:3e:72:ca:94:67:bd:35:37:49:cc:44:43:6a:
96:d1:26:2e:39:5f:d6:93:bd:b5:74:f4:5c:ef:90:
c3:d9:2b:5c:d8:46:fb:26:a1:96:97:50:cd:36:36:
79:d2:6e:69:66:62:6e:4f:55:60:5f:7b:4e:34:2a:
5c:27:0d:cf:6d:3e:cb:93:de:71:23:f5:c3:29:75:
35:df:0f:2b:10:7d:24:f6:c3:37:0c:72:61:45:62:
8b:be:bb:71:0f:bf:0d:98:df:3c:13:26:f1:da:e6:
72:e5:38:1c:ce:0c:05:83:2c:e6:c8:a2:5d:b9:0a:
8c:01:ec:e4:03:2c:49:cc:ea:69:cd:c8:bb:ae:88:
34:a1:27:40:b1:cf:2c:50:88:45:3b:46:bb:f2:9d:
b5:0b:37:ff:f7:7e:3e:5a:40:8f:b9:18:05:84:e0:
75:10:ee:ed:8f:2e:e6:84:3a:25:e1:44:dd:01:c1:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:30:8E:EE:9B:82:8E:82:D4:59:D7:6D:87:98:D9:42:BF:83:95
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b0:7b:c1:ab:4d:6d:69:6d:7a:dd:91:80:6f:c4:78:b9:5e:
a2:88:82:61:d9:87:c0:91:42:91:86:01:1e:9a:4b:64:14:17:
47:74:a1:47:a6:24:2b:03:82:45:4c:cd:b1:68:9a:e0:0e:50:
9a:11:cf:f3:9f:e0:2c:d9:8c:00:d2:7d:7c:c2:c8:05:17:bf:
29:59:a2:fe:5e:71:2a:a5:01:f2:ab:9c:75:bb:b2:7d:d9:57:
e8:a3:d4:a1:eb:1c:49:46:e6:35:aa:e7:77:77:b5:b2:3c:7a:
e8:c2:8e:a8:06:dc:f9:b8:30:74:18:75:2d:6c:fa:6e:e5:b6:
38:dd:4a:04:d0:df:9c:65:57:00:e3:5f:22:e0:93:38:c6:4c:
3f:b3:4b:b0:9f:28:87:ca:3f:bc:50:6e:8b:5c:20:49:e4:58:
77:1b:c6:7b:11:0f:1f:83:c7:d2:f0:2f:c7:3a:85:34:96:3a:
d3:fe:71:a5:61:2f:72:a9:ff:0d:14:ac:74:a6:29:3a:94:d6:
c3:69:46:98:ae:86:a8:06:3b:8d:37:82:83:d3:1b:54:30:6a:
80:cf:9f:04:66:e0:0a:35:de:4f:3b:5d:f2:97:63:0b:87:84:
99:71:48:c7:01:b1:f4:4a:fe:5f:70:7a:64:e2:20:d8:80:4d:
a3:68:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:47:59 2026 by rpki-client