Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft (raw, json)
Hash identifier: UfUJekVmiRmcrXCfiOOASARxMw3dolWdn3aHi+titno=
Subject key identifier: 4F:E5:F9:CA:2B:7D:12:75:D5:79:04:CE:C0:3B:87:8B:ED:F3:5E:2A
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 01A0035E7B1A08A77798934F230CE71E4FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:58 +0000
Manifest this update: Sat 15 Aug 2026 03:01:58 +0000
Manifest next update: Sun 16 Aug 2026 03:01:58 +0000
Files and hashes: 1: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (hash: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=)
2: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl (hash: k7kxBMKXhxUeml/Tmugi43bUBw0kuvQI8W9a85ENrsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:7b:1a:08:a7:77:98:93:4f:23:0c:e7:1e:4f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Aug 15 03:01:58 2026 GMT
Not After : Aug 16 03:01:58 2026 GMT
Subject: CN=4fe5f9ca2b7d1275d57904cec03b878bedf35e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:bf:a2:e6:7b:a8:7e:2b:95:92:4c:4c:84:
d2:33:3c:ae:36:89:d7:56:fb:dd:11:26:42:a6:16:
42:e2:0e:d3:7f:1b:f6:2a:93:55:a5:ae:a4:92:a5:
b9:0d:91:20:44:e6:77:53:ee:f0:0a:09:25:26:0a:
4e:10:ef:b7:c0:ed:64:f3:d6:69:99:8d:c2:e5:52:
5b:16:a9:57:6c:9f:da:fd:82:ae:03:ad:0c:94:1e:
46:c3:59:cf:de:6e:c2:05:20:df:14:e5:9d:d0:b9:
29:87:2c:97:23:1c:66:b7:98:e4:c9:f4:9b:21:18:
67:ea:c7:32:89:e2:58:34:61:e6:97:b3:0d:1a:d0:
21:cb:44:b4:fa:51:3f:ce:d9:a1:a7:42:50:b3:d5:
eb:a8:0b:d5:c3:20:a8:64:1f:2e:58:27:23:17:a1:
96:c4:08:51:16:94:19:55:c7:48:6c:19:e3:9b:64:
65:68:92:1f:fb:56:64:50:80:82:c9:93:ef:4f:7e:
df:26:e6:2b:34:6a:78:be:d7:dd:e2:8e:b3:b7:03:
ee:6a:d3:35:f4:77:0a:7f:63:ee:b6:cf:6d:ac:75:
c1:b5:72:50:59:7f:85:be:35:2d:a9:98:31:d8:6b:
11:5e:5f:66:de:87:74:9a:55:f2:e7:f8:c0:ee:df:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:F9:CA:2B:7D:12:75:D5:79:04:CE:C0:3B:87:8B:ED:F3:5E:2A
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:c7:eb:28:7e:4e:ea:d8:c1:9e:32:3e:33:72:3c:b0:04:
3c:81:b4:36:7c:69:85:0a:6a:88:65:3f:67:1d:eb:6a:ce:00:
b2:87:a0:b9:99:6a:7b:34:62:e3:09:e4:8c:84:40:12:9a:e7:
5c:7c:26:a6:fe:5c:75:a9:67:32:83:f7:1c:a0:b9:16:8e:7d:
43:48:39:aa:6e:f9:4e:cc:f8:f2:76:5f:bb:1d:29:ea:0b:62:
86:a1:86:bf:02:82:77:5c:65:10:d6:6e:81:b1:7f:a1:2d:ea:
39:b3:88:5d:8c:cb:90:84:c3:8d:e2:7f:37:5e:7b:e9:8a:f0:
e5:00:2b:57:07:27:c5:e5:de:dd:ff:cc:40:1a:8a:b9:48:92:
f0:44:bd:05:37:88:f4:22:c0:54:c3:8a:90:3f:7b:89:e7:3a:
2d:21:20:80:8a:d1:0c:6d:57:14:7a:a9:c2:49:94:7f:bb:be:
6c:86:5b:c9:3b:58:e6:59:81:b6:6b:e2:63:89:12:0f:0f:52:
bf:a8:9f:fe:6a:bd:38:61:7b:03:c3:9e:2a:75:03:32:09:c4:
00:3e:42:56:28:14:9f:d9:d4:9d:b4:f3:bb:1b:76:ae:bd:01:
42:b2:47:a2:5e:a0:32:14:28:2b:de:fc:4c:b9:9f:7c:b2:2f:
77:4d:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:40:35 2026 by rpki-client