Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: 0iawr2RLBrecIwfo4Mz8PCF87HlvkjYOlFyOafs+qqQ=
Subject key identifier: 49:DA:76:61:85:0E:6A:D8:0D:D3:F3:E5:8B:79:8B:A9:3B:43:E6:B4
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019FA2CF14548FAEB29E35D3215065848372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 03BE
Signing time: Mon 27 Jul 2026 09:01:47 +0000
Manifest this update: Mon 27 Jul 2026 09:01:47 +0000
Manifest next update: Tue 28 Jul 2026 09:01:47 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: AklnZAmJA9yu9gXT7qCZ/cEB9reZPGEcJ5U6wyu0J3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:14:54:8f:ae:b2:9e:35:d3:21:50:65:84:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Jul 27 09:01:47 2026 GMT
Not After : Jul 28 09:01:47 2026 GMT
Subject: CN=49da7661850e6ad80dd3f3e58b798ba93b43e6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:58:e6:64:be:e4:24:bf:b8:82:b7:b3:f6:
c2:c1:3a:35:e5:49:6c:ec:43:21:eb:44:ae:f1:10:
4f:b8:f9:4f:e1:27:5e:b6:6e:49:2c:06:a5:6c:4f:
ca:84:37:5c:cd:5b:02:60:c5:c8:bf:e2:59:46:fe:
b8:85:db:c6:0e:fa:8d:1b:24:cc:b5:1c:c2:1f:11:
8f:7b:3e:45:ee:14:f9:40:c8:12:13:71:7d:dd:9d:
a1:f5:6b:f6:b4:56:ce:ff:4d:82:5d:aa:5a:34:8e:
a6:cf:77:76:14:b9:7c:7b:00:16:bc:91:39:3b:f0:
84:ad:55:e9:39:e9:ce:d8:23:50:01:64:b6:ca:27:
b2:8a:ee:0a:00:f1:5e:cf:fe:ea:d7:c0:3a:9a:62:
cb:64:cf:70:3f:0a:11:b3:a0:e7:c1:2a:db:0a:32:
54:47:24:56:4b:37:bf:33:35:5a:89:1e:05:4c:c7:
e3:2d:96:a6:36:e6:ec:37:0a:b5:7e:db:57:d0:1f:
42:10:c3:b7:d9:fb:3e:f8:53:d0:13:bf:04:c7:d7:
3d:18:f7:0b:64:e7:97:9c:ef:81:4c:46:b1:86:1b:
58:3c:f0:21:82:80:39:38:62:72:70:14:fc:e3:cd:
14:9e:7f:b4:d9:47:b9:b5:ca:e6:04:b9:6d:5d:66:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:76:61:85:0E:6A:D8:0D:D3:F3:E5:8B:79:8B:A9:3B:43:E6:B4
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:97:3c:41:0c:e1:b0:67:90:8a:85:aa:a7:f9:91:21:a2:81:
a1:83:47:3b:15:c4:e2:01:a8:f7:0d:a2:74:1b:4a:c7:27:6f:
21:75:4a:c6:29:9b:2f:21:5c:c7:12:50:a7:1f:b7:9a:8c:30:
23:4f:28:50:58:c4:4f:5e:8f:f8:86:b9:f7:c9:da:19:33:0f:
09:9c:7f:bd:9e:3a:29:1d:39:0c:b5:ec:13:81:b7:44:d4:ce:
37:a7:2d:bd:cb:7a:61:d0:8b:a3:15:68:49:ec:5e:1a:91:2d:
83:2c:01:b1:63:63:fa:13:e7:4e:00:49:20:6a:5e:ac:d2:73:
b9:a8:e1:91:cb:10:9d:15:22:a5:bc:80:09:3f:f1:a2:cb:86:
ec:68:d4:44:93:f1:18:2d:cf:77:b4:59:c4:09:ae:f2:55:8d:
01:4d:1b:29:fa:1a:5b:7f:42:94:49:35:c4:3d:34:25:07:46:
9e:e4:e1:df:af:0d:fc:95:c7:dd:e1:d5:4d:56:6c:90:ac:27:
a7:cb:b3:10:a0:80:dc:a6:10:94:19:80:57:89:01:f4:31:ea:
43:80:41:b5:a4:bf:c4:58:3f:44:f6:1d:59:c7:03:86:db:1c:
a6:84:fa:a4:b7:a2:2d:46:39:e1:4d:ca:51:97:65:eb:c3:dd:
ca:52:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:22:00 2026 by rpki-client