Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File: a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier: QJuqu3aHQVc2k/qiEMvssUFoMfG8on/giovSCbmnvWE=
Subject key identifier: 84:12:A4:99:34:EB:49:19:67:F3:73:B2:E1:99:75:2D:A2:99:63:BD
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 019FA417AAD51238FB100CC07F0D84F5DD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 15:00:42 +0000
Manifest this update: Mon 27 Jul 2026 15:00:42 +0000
Manifest next update: Tue 28 Jul 2026 15:00:42 +0000
Files and hashes: 1: MuWBM4y_8sU7g6FEyEJdZpch7MA.roa (hash: polciHBhuEIudcpVsohkilsNPMnWK3IMSBDrJXYyToE=)
2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: x2sGt9uC2MgvqK8ytEDAWek3ilcT6DlTLp0aFb2Usu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:aa:d5:12:38:fb:10:0c:c0:7f:0d:84:f5:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Jul 27 15:00:42 2026 GMT
Not After : Jul 28 15:00:42 2026 GMT
Subject: CN=8412a49934eb491967f373b2e199752da29963bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:4a:03:38:ab:27:2e:9c:75:08:16:f2:57:
b3:5b:7d:83:59:f9:e4:54:2b:45:89:9b:0f:0e:0a:
3d:d7:a2:57:88:b5:15:2f:a4:61:d5:5c:e2:26:1c:
72:ca:ff:70:17:5d:a5:2e:32:87:22:b6:12:66:55:
bb:57:af:a6:c7:b1:13:b0:49:22:1c:e6:cc:77:22:
9d:d0:83:c2:c4:66:9c:3c:95:0e:88:45:40:e6:aa:
58:08:2d:6d:21:6c:fb:c5:e7:51:6e:ba:50:ad:64:
80:14:3e:90:45:96:67:97:e5:4e:c8:80:b8:d2:52:
66:38:8f:0f:76:a0:dc:c4:b8:95:92:60:24:19:01:
4a:8d:7e:9f:fa:0b:21:77:16:d7:b7:86:07:08:4a:
41:7f:7d:03:02:d2:ae:52:ad:5d:6e:8f:38:07:08:
4b:80:c7:4d:24:c3:1b:d5:c4:02:b2:1d:c2:33:00:
b9:f8:97:3d:ce:d8:1f:32:3a:cf:2c:d5:b5:5b:cf:
9e:a3:45:86:b1:ed:8d:0c:10:47:61:45:a4:15:13:
14:9b:e0:b2:d1:e8:aa:51:03:c4:52:86:9d:c9:98:
42:3b:1c:ed:9f:3a:47:03:c0:13:48:61:c9:54:ab:
98:04:be:9a:d6:f0:26:36:bd:c8:62:50:a1:ba:00:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:A4:99:34:EB:49:19:67:F3:73:B2:E1:99:75:2D:A2:99:63:BD
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:96:ec:75:f7:6a:b8:1e:f4:66:ec:3f:c0:59:e7:f6:25:67:
3d:30:47:eb:79:66:d7:15:5d:5b:db:3a:be:8a:d6:7b:cd:80:
05:d5:33:e1:b4:2b:d7:d1:51:b2:97:92:3e:ad:db:44:2b:f5:
fd:fe:70:79:66:6c:7d:82:5e:f2:80:62:46:4d:ec:d4:fc:0c:
f5:c4:54:9a:b9:a1:78:2d:65:7f:b7:aa:0a:20:c2:f6:dc:54:
e4:7a:1f:3e:37:7e:d1:7e:3b:7b:cc:49:94:b2:73:10:62:bf:
90:94:53:99:e3:3a:2e:f4:58:8d:1f:d7:2c:e2:c3:9a:e7:35:
54:33:4c:33:35:36:02:af:46:e3:08:cd:1e:7e:64:8f:d4:ef:
df:db:38:d6:94:94:e5:91:50:f6:f4:45:7d:4e:9c:91:79:1b:
6b:01:7c:10:13:c7:02:c8:45:09:3a:22:83:f0:c5:f0:28:3a:
88:57:3f:eb:a7:6b:3f:96:2c:5a:ab:83:79:47:cf:b9:e8:e1:
d3:22:d9:60:ca:19:a7:8b:fc:26:a6:82:b3:6a:66:dd:d2:14:
50:7d:c4:ed:9d:50:76:3c:d7:5b:a5:46:6a:14:b4:7f:4c:8c:
1d:8e:ad:d1:f7:4e:13:14:a2:d1:59:16:ec:6c:a1:f5:d8:72:
db:fc:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:24:28 2026 by rpki-client