Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: 1TouqrK5t9pcFSxorutfYdWp4R1XeXc9eEvS/6rG1SA=
Subject key identifier: 21:C8:82:62:F0:F5:F6:D5:4F:86:11:DB:EC:F4:66:D0:F9:E1:F8:2C
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019FAA19EA3919503286747F8A833A070FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0FF4
Signing time: Tue 28 Jul 2026 19:00:52 +0000
Manifest this update: Tue 28 Jul 2026 19:00:52 +0000
Manifest next update: Wed 29 Jul 2026 19:00:52 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: nsRACy9U3F7vH8O+UrgtcEuidq8Ccp5jsz3pjcL+Fj8=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ea:39:19:50:32:86:74:7f:8a:83:3a:07:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jul 28 19:00:52 2026 GMT
Not After : Jul 29 19:00:52 2026 GMT
Subject: CN=21c88262f0f5f6d54f8611dbecf466d0f9e1f82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:7c:48:e3:93:da:38:40:c2:5e:73:86:8a:
d7:d1:68:5d:82:ff:fc:52:9c:1a:c2:5a:91:36:36:
d5:ff:f1:cc:f7:0f:2d:8d:2b:cc:89:13:1d:14:08:
d0:80:de:5d:56:8c:1b:cb:93:3c:66:87:bf:e8:da:
e7:cd:b2:03:48:6b:ef:96:0e:77:89:27:e8:53:bd:
30:78:31:27:71:c7:27:bd:68:5f:f7:ae:94:bf:04:
8b:91:c5:b4:82:44:34:5e:69:30:5f:f8:42:6a:d4:
a4:1d:ac:66:aa:32:e5:61:5c:b5:86:89:7f:a8:c4:
d8:e7:14:14:7e:cf:38:1e:e5:13:06:f3:fe:d4:40:
de:32:d1:6b:8a:35:60:87:50:66:cf:9d:6a:e2:7d:
29:1c:5a:1a:39:f4:b0:ea:fb:58:ee:99:9e:0d:bc:
6e:47:0d:c6:e6:a0:3e:1a:69:8f:98:49:e0:fd:1c:
21:e8:f5:e3:fc:63:e4:67:c1:fb:5a:4e:50:a1:fa:
1c:75:38:b3:9a:53:e5:ce:d7:98:3e:27:a0:63:96:
8b:59:7a:62:45:de:3c:ac:a6:bd:d7:e1:25:5a:81:
45:cc:39:2e:cc:2f:ad:16:ab:e8:31:59:86:dc:c2:
57:aa:0c:50:3f:23:0f:b5:df:98:bc:46:19:ee:10:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:82:62:F0:F5:F6:D5:4F:86:11:DB:EC:F4:66:D0:F9:E1:F8:2C
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e4:d1:84:44:59:6b:a3:73:82:7d:30:c2:28:5f:70:ed:00:
51:03:7b:95:45:d2:c7:85:73:77:81:9d:7d:d2:51:50:d6:95:
ea:6c:0d:5e:77:51:0c:a6:32:89:33:f0:ad:df:3c:7c:02:e5:
f7:7a:9a:5b:81:8d:87:3e:a1:74:63:42:b5:a0:69:8d:db:26:
64:7f:d0:15:64:a4:c3:95:3d:e5:d8:ae:9a:e6:34:4d:ca:24:
29:78:ba:e3:97:66:9e:77:cf:da:98:41:9e:14:74:cc:10:f0:
4a:ea:ce:bd:83:2f:ec:ab:04:a4:e3:ff:d4:97:fb:39:39:c4:
54:97:f8:5d:c7:3c:44:1a:2f:bc:79:a7:d7:94:7b:33:0e:14:
0a:30:2d:3c:64:36:a0:a3:b8:55:e5:6f:2c:65:9e:8d:d6:08:
69:3e:35:88:10:04:49:ba:27:98:71:67:7b:72:8f:09:63:1d:
f4:55:15:f8:32:03:65:a8:96:a1:83:8a:7f:0c:e7:d7:7f:b9:
a6:78:1c:ad:3c:9a:eb:c8:9d:24:4a:ef:13:de:83:e5:2d:45:
fd:16:b9:dc:db:7e:26:9f:d9:02:73:0e:38:9d:c0:e8:92:aa:
bc:f8:4e:36:9d:53:0f:99:0f:bc:83:ca:c2:77:43:64:2c:3f:
64:73:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:00 2026 by rpki-client