Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
File: o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft (raw, json)
Hash identifier: TrA7rvCoiWa7pnvlP6uexjxYSrjDi+IDKoK5M6zZYNo=
Subject key identifier: E9:1F:7F:1F:BA:91:DC:D9:E9:08:DA:D4:CF:D3:3F:ED:19:24:EA:72
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 019FA8994DA8370EA43FB28DF7BB2F32809A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:46 +0000
Manifest this update: Tue 28 Jul 2026 12:00:46 +0000
Manifest next update: Wed 29 Jul 2026 12:00:46 +0000
Files and hashes: 1: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (hash: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=)
2: o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl (hash: r9U13Prx3JiKJhyKq8Lhk8YOUL+j10SuMGGu6Sl4eRA=)
3: ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (hash: vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:4d:a8:37:0e:a4:3f:b2:8d:f7:bb:2f:32:80:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Jul 28 12:00:46 2026 GMT
Not After : Jul 29 12:00:46 2026 GMT
Subject: CN=e91f7f1fba91dcd9e908dad4cfd33fed1924ea72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:bd:fb:ae:f2:35:e6:62:e0:eb:af:15:92:
87:72:b8:4f:c6:d0:49:19:59:69:1c:8e:64:29:b1:
91:45:53:19:ed:c5:07:1c:47:14:34:2f:2f:16:11:
f8:1f:2f:43:95:ab:43:ca:c9:54:01:6b:08:fb:a3:
06:a0:bf:70:69:25:28:7c:25:71:f1:c0:59:c7:bd:
ec:31:be:af:02:0e:ce:fc:fa:4a:bc:8e:bd:ea:59:
9c:b7:2a:5b:d4:4f:bb:31:fe:cc:20:5d:a9:ad:e8:
08:c7:68:99:87:f7:12:d9:2d:32:24:61:20:1c:44:
73:8f:20:59:31:b1:c8:e4:e4:23:79:52:8c:18:1a:
5b:01:a4:43:b3:be:00:02:03:35:1d:c4:50:54:3a:
b8:03:de:4d:4c:27:88:e2:03:1f:31:15:ef:2f:cc:
38:8c:0c:71:43:7f:e0:aa:59:1e:f0:19:ad:53:ee:
33:e1:2c:9b:b9:d2:59:a2:b3:e5:1b:4d:fa:27:20:
5c:ea:8b:2b:8d:52:e5:0c:5a:94:6d:a7:aa:da:46:
6b:5c:42:84:1a:2a:a1:db:0b:ba:b6:10:da:c2:39:
f8:6e:bf:98:10:43:e5:38:04:ee:f1:78:a4:00:4f:
4e:d2:26:23:73:6e:90:a7:13:35:1b:45:82:0b:c0:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1F:7F:1F:BA:91:DC:D9:E9:08:DA:D4:CF:D3:3F:ED:19:24:EA:72
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:9f:ba:72:d7:ad:90:37:70:21:c6:50:97:66:7a:bb:49:
4e:7c:eb:d3:53:c1:15:35:2e:2e:c3:46:6e:e4:93:b0:7e:28:
34:aa:3c:0f:09:de:17:ce:06:77:38:82:81:12:06:3a:26:e3:
3c:36:9c:43:43:8a:81:ce:27:b6:d3:2b:e6:3e:3b:42:4f:4c:
18:41:e9:ce:b0:0f:9a:1a:ad:c1:7a:9f:cc:1c:d5:fe:7a:7e:
62:97:d8:1e:e8:9f:44:c9:86:19:de:c2:f4:73:17:66:b2:50:
33:2a:78:d0:bb:78:52:71:bf:b5:69:2d:98:2c:1c:4c:b0:45:
a9:b5:a9:54:f3:be:a0:c4:ec:d0:df:b4:4f:2a:d1:f7:6d:c6:
b8:ee:c4:9e:e6:3e:93:37:b7:52:63:bf:8c:da:75:24:c4:a1:
9a:91:ce:51:0e:08:ab:91:55:46:c0:cd:b8:21:5f:a9:61:f9:
33:e4:b3:86:43:16:3e:2f:ce:5d:00:c4:5a:8e:ba:72:45:53:
b9:8b:e8:eb:1d:6e:4d:98:53:b8:71:fc:de:34:45:28:b7:59:
6e:49:e9:11:70:99:6b:eb:75:93:cf:5e:5d:95:8e:ca:4b:38:
98:83:f9:26:88:b0:66:ab:e0:35:67:0d:1a:7e:69:fd:c3:70:
af:82:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:03 2026 by rpki-client