Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: swW/FHfM9DM0HuTrld9x0Vf5bRFdxomajN2KaVptbqo=
Subject key identifier: 67:81:FE:CF:11:55:1A:69:F9:76:37:04:DC:43:F6:A7:BA:4F:06:F1
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 019F9F5F0ECAC0D43129A24C6484DB5357AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0DCD
Signing time: Sun 26 Jul 2026 17:00:34 +0000
Manifest this update: Sun 26 Jul 2026 17:00:34 +0000
Manifest next update: Mon 27 Jul 2026 17:00:34 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: v2vPCyCMP3SaNxtZ920zObPbXIphrO/ef8r+vrmZGdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:0e:ca:c0:d4:31:29:a2:4c:64:84:db:53:57:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Jul 26 17:00:34 2026 GMT
Not After : Jul 27 17:00:34 2026 GMT
Subject: CN=6781fecf11551a69f9763704dc43f6a7ba4f06f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:0c:cf:66:26:14:84:59:10:1b:a0:f0:db:
15:ab:f6:ac:d3:6c:b3:92:33:ec:bd:90:d3:61:b4:
22:9b:aa:16:a1:41:dc:9b:9c:84:f9:40:7a:27:4e:
03:a8:dc:c2:4d:42:78:90:36:c9:3f:9b:2e:f2:ee:
9f:bc:b9:d8:e6:10:9d:88:60:e2:33:b9:3a:94:93:
10:57:4f:6d:2e:58:32:1a:2f:9a:d4:32:ba:02:40:
3b:26:60:56:5e:52:f3:e3:89:40:0d:09:d2:6f:31:
24:5b:7f:76:39:21:5b:30:eb:a3:fc:bd:b5:db:30:
be:f9:ea:1b:06:d4:ac:70:19:09:6e:c7:3c:8c:10:
76:77:3a:52:6b:84:a4:51:0c:a0:56:97:34:7e:c5:
a2:77:25:fd:64:af:99:d9:c7:a5:61:45:db:e0:10:
0e:2c:31:04:7f:6b:8d:e1:c4:d9:9c:99:4f:ab:09:
a2:8e:0e:8f:09:b0:4b:88:fd:39:f1:e3:9c:ba:15:
0c:84:5d:e5:50:8d:c3:fd:5d:ca:88:43:21:50:7f:
7b:bf:59:22:e3:f0:5e:70:e3:93:09:11:c9:b9:1f:
2d:b0:4b:6a:7a:41:fe:a1:f7:c7:16:e0:be:ee:51:
11:8a:33:d8:f0:03:2b:76:46:22:da:75:ce:ec:98:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:81:FE:CF:11:55:1A:69:F9:76:37:04:DC:43:F6:A7:BA:4F:06:F1
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5f:d1:2e:88:63:d7:ef:7c:7c:57:16:4c:17:25:14:1c:14:
2a:c8:b6:11:2c:62:0f:04:10:67:06:1c:07:44:d2:39:5d:4d:
be:3a:07:a4:a7:63:35:28:c2:b7:d9:27:c2:f9:af:96:c0:52:
58:29:d4:ee:c2:8f:39:36:01:ed:e7:9f:78:7d:58:b9:73:67:
a1:1d:72:b0:e4:b5:ce:32:f4:ed:8f:4a:81:3d:ae:13:86:ea:
ca:61:af:d2:60:40:65:94:61:2e:55:f6:f0:1b:6b:fa:7e:ce:
81:b9:1e:00:b4:27:aa:0d:9d:f5:78:49:ac:58:6d:ed:19:b7:
6d:f0:27:4f:b7:7c:26:2e:9b:84:67:69:16:a6:49:54:f9:54:
88:96:0e:91:91:aa:90:ba:93:d9:75:37:86:b4:b3:ca:5c:ab:
5d:c7:f5:39:8c:23:ae:ee:55:93:77:50:ab:e5:7e:31:0b:1f:
a8:34:e3:49:c6:27:13:00:9c:6e:10:67:74:e6:a9:70:89:4b:
b9:de:4c:05:3a:48:84:19:d6:ef:53:08:1f:5f:25:da:77:f8:
45:a4:fa:cb:c4:f8:73:8d:40:4d:4e:98:46:7e:70:c0:4e:5a:
87:1d:16:44:98:ca:ab:40:83:72:e6:09:85:b7:a6:01:1a:a9:
82:71:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:27:10 2026 by rpki-client