Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: 9uTmbGBlJ+whozNMTacaxkgNEweXodtEoUGJerl24zc=
Subject key identifier: 69:0D:BB:9F:A3:96:CE:40:C2:1A:4B:29:F3:B9:49:31:D8:ED:7F:E8
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 019EC3A5509819BEC0DF4CD4A71BBF602576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 1960
Signing time: Sun 14 Jun 2026 01:00:51 +0000
Manifest this update: Sun 14 Jun 2026 01:00:51 +0000
Manifest next update: Mon 15 Jun 2026 01:00:51 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: quyZwNtU1bEPdY3PFYp6zBLmKdbxKKXHD3Jn/xCH/Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:50:98:19:be:c0:df:4c:d4:a7:1b:bf:60:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Jun 14 01:00:51 2026 GMT
Not After : Jun 15 01:00:51 2026 GMT
Subject: CN=690dbb9fa396ce40c21a4b29f3b94931d8ed7fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:41:d7:dc:74:8c:0f:2c:3d:dc:ec:6f:47:
aa:38:07:e5:f8:27:e9:39:94:50:8a:60:a7:dc:ae:
9f:f7:d9:63:76:7a:23:54:74:2e:61:78:29:5e:74:
7a:ca:52:54:be:7e:7f:ed:7a:95:5f:84:91:5d:38:
41:28:c2:8c:0a:b8:dc:80:27:6b:ca:54:c1:e7:b7:
aa:ab:d4:a1:71:3a:53:86:76:02:bb:d4:c6:3e:7c:
a2:cf:1f:14:c1:a2:a1:a1:9c:b8:2e:32:a6:b6:98:
e5:e0:30:d8:01:ea:ff:9e:d8:7d:25:48:e0:54:e4:
23:ac:4a:d1:96:1a:f4:a8:b1:39:1a:5e:4b:cb:a6:
a2:18:d3:74:4e:18:33:b4:18:09:45:95:12:dc:25:
f5:bb:ed:75:e9:aa:d7:58:38:9e:50:90:2a:26:a8:
af:f2:e4:82:94:a0:89:55:2a:70:10:1f:1a:78:31:
8c:45:2e:00:3a:f7:10:84:f8:9c:11:83:3a:f7:c2:
76:bf:6a:a1:40:7f:f6:81:f1:95:54:8e:fd:5c:14:
dc:48:1a:99:35:c4:1a:f9:67:8d:05:4a:11:a0:85:
da:9e:77:b4:34:3d:5d:5d:68:ec:0d:39:94:7d:20:
6a:7a:bb:f3:7f:c9:8f:7e:6e:61:a0:68:4c:c2:6c:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:BB:9F:A3:96:CE:40:C2:1A:4B:29:F3:B9:49:31:D8:ED:7F:E8
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a0:a4:e9:58:ad:3e:d3:b5:85:51:14:40:ce:ff:ea:4f:b3:
44:cb:b5:4d:e5:d0:f7:96:5d:3e:ff:55:96:f4:28:f1:81:5c:
f7:8a:b8:f3:65:84:44:0f:4f:d1:82:8e:23:5d:e5:73:a1:28:
00:6e:5f:1c:85:0f:67:43:d2:de:3a:c0:7c:66:55:9b:99:8e:
7a:e5:2d:e6:a2:ea:1c:30:bc:c8:85:2f:9d:ae:f0:67:03:d1:
29:e0:3e:ae:1e:04:d8:cf:34:40:a9:51:b3:59:ce:71:d1:fe:
7c:24:bc:63:64:69:78:27:02:97:01:66:ed:19:c4:fd:97:37:
d1:ba:24:0a:58:c8:cb:20:79:e3:f3:a9:4b:2c:f0:c9:33:a7:
9f:c6:ee:b9:fc:90:fc:39:33:4f:f6:ad:64:14:78:f3:5f:60:
86:b3:fd:8b:21:a5:75:34:c1:29:a5:2f:ae:3f:ad:50:dc:d3:
43:b4:b2:65:2c:6b:58:00:1e:7d:7f:08:d1:1d:83:53:71:d1:
3d:2f:d3:d0:78:16:83:a8:80:b0:f8:43:04:93:d8:75:e7:95:
95:22:5b:9d:cd:9c:64:d0:50:9c:4f:ae:1a:6b:a2:b5:59:50:
23:28:07:49:16:79:36:3c:b6:55:23:67:1b:47:c3:e0:3d:fb:
7a:20:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:04 2026 by rpki-client