Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: rTOYZR6xhlt5eqim3+QOngJIled0hB5ejd/Xixnsz5Q=
Subject key identifier: 9F:85:21:28:27:0D:0F:71:17:89:27:DB:0D:21:E4:24:55:BE:77:07
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019FABD1974C70C04A78588C23683C7BE538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1953
Signing time: Wed 29 Jul 2026 03:01:07 +0000
Manifest this update: Wed 29 Jul 2026 03:01:07 +0000
Manifest next update: Thu 30 Jul 2026 03:01:07 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: CLe8XQejje1MEiF9K+WQI3BvqA6UeS2lqjjVg3tZhz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:97:4c:70:c0:4a:78:58:8c:23:68:3c:7b:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jul 29 03:01:07 2026 GMT
Not After : Jul 30 03:01:07 2026 GMT
Subject: CN=9f852128270d0f71178927db0d21e42455be7707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:0c:43:f4:97:05:3a:cc:50:8d:8d:f9:a0:
d1:f5:71:64:ff:f1:9c:ce:c0:5c:0c:6c:94:be:2a:
87:05:55:9c:44:6c:10:4e:69:7b:2e:ee:8c:1d:e3:
a7:cd:b4:ed:e8:8d:7a:8c:24:37:78:c5:59:6d:6e:
30:7b:74:a7:9e:43:e3:5e:db:4a:79:c9:39:c5:8c:
55:4e:60:61:7d:d0:67:0b:79:da:8c:20:1d:98:49:
2a:ec:a7:da:10:f6:9d:fa:51:b9:08:0c:6e:d9:34:
23:fc:5e:d3:cc:5b:03:c1:80:b3:09:e5:1f:d6:c5:
92:75:50:16:c9:0c:3a:30:5c:31:57:12:e6:ee:65:
cf:a0:56:95:3b:7b:b6:37:28:76:aa:e4:cc:b9:c0:
8d:71:be:a3:f0:28:18:33:1b:8b:e1:b7:84:84:ef:
23:49:cc:13:93:43:f3:9e:38:46:de:c2:7b:49:86:
52:17:57:aa:24:f4:25:83:40:08:98:35:83:a1:1c:
ca:17:c6:44:55:26:6b:e9:a5:c4:22:7f:be:23:2f:
4d:ed:fb:98:81:b0:1a:35:8f:07:ff:c4:f6:4e:d8:
8a:43:18:77:c8:b4:a0:b5:42:ab:b7:3f:e1:4e:fc:
97:04:1d:4b:63:4b:37:93:6f:c7:9b:7d:aa:d8:00:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:21:28:27:0D:0F:71:17:89:27:DB:0D:21:E4:24:55:BE:77:07
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:60:ee:0f:43:b9:4a:9a:d6:27:e8:c6:dc:9a:87:87:f2:f4:
88:ea:d1:1a:5c:40:18:67:ec:ab:cb:53:8a:17:2b:73:da:d6:
52:6b:23:1a:98:a4:03:06:fd:40:5d:05:07:86:62:13:17:7b:
6c:69:59:67:03:fa:95:53:cc:79:32:21:50:bf:5d:f5:36:17:
2c:5c:1b:3a:0d:23:68:d5:82:8b:68:f9:4d:99:9d:f7:32:3a:
5f:b3:13:b4:94:bf:55:7b:5b:97:df:bc:43:32:54:b1:ac:a9:
fe:25:dd:b3:cf:c5:ee:17:24:06:52:38:97:b7:c8:55:b1:1b:
66:4c:82:83:d9:1d:dd:16:67:b8:0e:26:09:46:e6:98:f9:bc:
4a:b8:f5:3e:8a:02:17:ab:f5:e6:6b:9f:40:3f:54:16:86:85:
98:be:18:cf:00:76:e6:b0:3d:ac:b2:03:22:80:8d:9d:18:15:
b4:10:a6:80:59:f2:d2:19:d9:ce:60:b4:e8:59:43:c0:10:90:
14:54:e5:ea:11:02:8e:9c:5f:a8:53:38:20:42:ea:ba:6b:a4:
a9:a3:54:e1:e6:9b:3e:1e:91:09:c5:d5:88:44:f6:0a:57:d6:
e6:be:de:cf:ea:ed:29:75:b7:cd:5b:9b:a1:45:ee:89:7a:da:
d9:5d:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:20 2026 by rpki-client