Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: 9UvdEgAccLNt9h+LvUZxbQM/Ncf9WZHod3s+8fdW3dk=
Subject key identifier: 5F:4E:32:E3:ED:5E:61:86:77:8C:C8:E1:77:3E:55:36:6C:A4:31:6D
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019EC06DE5F44CA6D39002DF5C65DE2739DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0F7B
Signing time: Sat 13 Jun 2026 10:01:28 +0000
Manifest this update: Sat 13 Jun 2026 10:01:28 +0000
Manifest next update: Sun 14 Jun 2026 10:01:28 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: XH4Z19/RfPW5Xu1UIOHSoyEclxcdf8dQtWuYWEteFZA=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:e5:f4:4c:a6:d3:90:02:df:5c:65:de:27:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jun 13 10:01:28 2026 GMT
Not After : Jun 14 10:01:28 2026 GMT
Subject: CN=5f4e32e3ed5e6186778cc8e1773e55366ca4316d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:4a:ce:a7:c6:dd:4b:b2:e8:fd:46:af:6f:
b3:c8:4f:16:bb:2e:11:3d:45:e9:7f:dd:50:46:dd:
10:e8:a5:0e:28:f6:f0:d4:1f:60:ac:7a:ea:41:d7:
c9:c7:3e:73:96:fe:e6:ef:9b:7f:75:fc:1f:09:be:
cd:c6:26:22:0c:a3:43:94:85:01:33:d7:51:43:78:
98:ba:ce:c2:0c:ce:fa:30:ae:f4:d7:6b:68:64:05:
bd:ff:f8:e2:22:5e:e7:46:40:76:9a:d7:af:18:d6:
2c:73:e9:13:58:0f:da:32:af:90:97:5f:c1:6c:d4:
83:a4:77:63:29:02:1a:07:a8:c2:c9:8d:79:15:33:
26:b3:0b:24:fb:ca:a3:dd:85:9a:fa:ef:22:ed:96:
60:d6:71:cf:46:17:3f:c1:60:f2:f9:6e:0f:e3:b7:
a7:dd:7f:2f:8c:bd:c1:d4:bc:d6:8e:9a:96:56:f4:
19:03:8a:96:7e:1b:72:40:66:52:85:ee:04:69:01:
44:f5:79:1e:e4:11:a3:ea:35:ef:77:1e:41:13:f0:
c8:d4:66:f3:19:aa:1a:25:76:c4:32:a2:ec:6f:fa:
53:a3:d4:2e:6b:db:57:fd:3d:e9:a7:23:b4:88:83:
a0:15:6f:df:10:8f:9e:8e:d7:c8:05:08:29:22:fd:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:32:E3:ED:5E:61:86:77:8C:C8:E1:77:3E:55:36:6C:A4:31:6D
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:51:a0:aa:2f:57:78:e0:d5:ce:e7:12:16:dd:b7:f6:24:
a6:de:55:c8:fe:77:61:8c:e4:cd:eb:62:cf:d6:3b:13:65:7c:
82:2c:eb:b0:1c:34:98:ad:f1:dc:29:31:42:04:49:af:eb:21:
f7:9f:12:d0:0e:de:53:9e:4b:38:d7:38:94:16:b3:c6:ff:fd:
69:28:21:b7:e8:63:b9:42:6b:ac:b1:77:53:d6:9f:82:e0:0d:
36:49:e2:9a:72:5e:eb:2b:c2:ee:8c:d3:2f:1a:66:09:9f:99:
67:b8:1d:83:0f:76:29:ac:31:ce:b5:bd:73:22:f6:55:80:15:
96:bc:63:61:1b:60:c3:c5:d9:70:5d:ca:05:fd:4b:e3:69:8c:
ab:e2:79:06:50:b2:86:7c:e9:21:31:b7:ea:c7:b6:56:07:d6:
73:c4:b3:77:fd:cf:25:cf:0d:f0:3a:a8:d1:a0:0e:14:32:0e:
99:5d:f7:5d:b6:ae:0c:c5:eb:0b:1f:ed:05:5f:4c:86:1c:e3:
28:49:94:e6:9a:d4:b5:6e:ec:e9:54:82:13:08:53:7d:36:ac:
09:21:22:de:2a:79:80:15:ef:36:ac:8d:41:be:e9:04:5d:3e:
cc:13:b1:74:52:6a:78:28:8f:f9:64:11:b6:30:62:12:60:27:
cb:6d:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:32 2026 by rpki-client