Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: gTPGQ9pGUSFZ6GeSfAJKqvcrFSAmmAgvTcGfRXB3gRs=
Subject key identifier: 8A:0F:54:87:E2:EC:7D:ED:D7:B8:40:EE:4F:21:D6:D7:71:18:3C:31
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 019FAA885354587019DBAC9F832BD2D5BBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:28 +0000
Manifest this update: Tue 28 Jul 2026 21:01:28 +0000
Manifest next update: Wed 29 Jul 2026 21:01:28 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: Q/CCpynKm/nvKPhhcQR/yw4rRtlDo0SWoExywCHmQGg=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:53:54:58:70:19:db:ac:9f:83:2b:d2:d5:bb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Jul 28 21:01:28 2026 GMT
Not After : Jul 29 21:01:28 2026 GMT
Subject: CN=8a0f5487e2ec7dedd7b840ee4f21d6d771183c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:45:e0:c4:71:5c:14:38:a5:64:b6:54:31:
7b:ed:10:f1:29:c1:d4:0c:5f:fe:e4:5d:2d:4c:5c:
4c:05:ac:9a:00:fb:37:55:9a:c8:34:3c:80:81:bd:
89:b1:cb:15:34:fb:7b:f1:9b:59:59:e3:0a:86:88:
7f:f2:cd:21:d6:40:5b:09:23:98:da:26:d3:1b:40:
26:7d:b3:5d:2d:12:7c:f9:00:2e:83:1a:4b:3b:1e:
84:ec:c6:2e:98:13:8a:99:47:a9:2b:60:1f:61:a4:
7b:be:52:e3:7e:c7:0f:2d:59:e5:85:ba:9c:88:7a:
f3:77:57:14:56:eb:5b:47:ff:a6:f0:8f:4c:cc:7c:
08:e0:65:27:f7:1a:a6:a6:15:a5:1f:1f:0a:7a:23:
76:ff:20:8b:d3:f8:78:d1:87:05:3b:58:ce:52:8f:
ee:6b:ef:26:9c:97:3f:4d:4f:a6:af:d0:e3:2d:b4:
93:8b:fd:e3:94:c1:6e:1a:da:54:b2:bc:8a:22:09:
04:12:8f:14:be:67:d3:7f:58:f8:d6:e9:51:0b:77:
dc:5f:38:41:e8:35:09:5c:a7:84:6f:15:8a:98:ee:
cd:82:10:7b:4a:9c:82:fd:86:7d:32:8e:6c:4e:d7:
b4:ce:0c:1a:d0:73:44:27:f9:29:be:93:40:e6:0a:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:54:87:E2:EC:7D:ED:D7:B8:40:EE:4F:21:D6:D7:71:18:3C:31
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:21:c2:c5:f8:fa:80:e3:e3:22:41:8d:1f:51:c5:c6:00:44:
44:ec:3e:e5:14:d8:ed:c5:40:b1:e7:ae:48:a0:5a:41:59:39:
5d:97:bc:66:dd:fe:09:1e:d1:da:e5:90:3e:97:99:df:ac:1f:
24:cf:a0:99:4d:c3:63:6d:29:8a:a7:89:0c:44:2f:c2:35:dd:
2e:a6:ef:0f:f7:1a:3b:dd:9a:c9:14:ce:a3:03:21:9e:9e:af:
17:c0:a6:1f:9a:8f:c4:3a:a8:e1:df:59:40:b1:4d:ca:7f:42:
2a:3c:5c:d9:ee:63:93:f5:87:bd:1e:44:5a:08:51:c1:d6:2a:
27:7a:8d:18:85:50:23:a5:d4:97:4f:25:e4:aa:c8:c9:48:c3:
0f:73:ed:1b:82:27:95:ed:76:d5:7c:0c:26:5e:cc:15:bb:95:
b5:b4:59:01:13:37:6e:eb:0e:e2:fb:47:d1:e0:a3:c0:ff:a8:
c6:d6:f2:3b:9a:d3:5e:60:2e:31:c6:84:e3:c5:d3:17:ed:85:
c8:d1:24:c3:f7:ad:69:b7:7f:63:1b:1f:fd:aa:c4:f6:83:34:
4f:6d:93:cc:c4:ec:0f:8a:65:9e:4b:8f:59:c2:4a:ce:fb:1f:
5f:62:75:38:51:43:12:2a:fb:3a:88:7b:9c:ad:9e:51:b1:cb:
44:64:7a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:39 2026 by rpki-client