Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: bijTYz8+NrSkxka7dS4+5DuX4Eb+IMZRZPuOyttIY2s=
Subject key identifier: 5F:E7:03:15:8E:F5:E5:5C:D6:09:9F:66:B1:97:11:DA:8E:58:23:54
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 019FACACEE93E5309FA73DE96B8E7FF7CB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 07:00:42 +0000
Manifest this update: Wed 29 Jul 2026 07:00:42 +0000
Manifest next update: Thu 30 Jul 2026 07:00:42 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: G5LYmTfQMykLLGl70qU1VG3D8HrhJY7KJOpZc2Hep2I=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:ee:93:e5:30:9f:a7:3d:e9:6b:8e:7f:f7:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Jul 29 07:00:42 2026 GMT
Not After : Jul 30 07:00:42 2026 GMT
Subject: CN=5fe703158ef5e55cd6099f66b19711da8e582354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:be:81:97:b7:72:ca:97:3b:87:01:0a:f7:
04:0d:a3:5d:cd:5e:a9:38:9d:39:86:19:4e:1a:4c:
8c:d1:82:6f:3f:9d:ca:a4:13:be:c9:8a:53:8a:68:
8c:7b:c4:df:02:00:5b:87:80:bb:45:4c:ec:40:d7:
61:e8:b0:53:47:50:91:b1:d6:f5:99:2f:e1:b4:3b:
6e:09:b2:3e:15:e4:c7:93:87:0b:ac:20:03:f3:e4:
00:e7:a3:f5:53:35:5f:63:08:4b:c0:49:4f:92:a1:
c0:4b:ab:8d:73:b2:54:ac:03:1f:f7:5b:52:62:9d:
7e:86:8c:b3:aa:b5:bb:1b:5f:08:b0:9f:bf:96:ec:
ae:00:6d:e2:8c:7f:66:2f:a3:31:85:2d:3d:5f:a0:
fe:26:8b:f0:60:aa:8a:a0:61:57:36:94:43:7c:23:
22:34:65:2b:dc:5a:1f:ef:b8:ce:eb:b7:d9:33:f0:
23:da:c4:72:1a:96:7d:72:32:10:c6:84:55:bb:6c:
75:87:2d:2b:b3:91:e1:e4:e4:75:88:ab:2b:d3:de:
31:ed:fe:70:b9:18:10:ca:2f:20:05:f1:d4:fc:a2:
86:18:18:56:39:0c:be:99:97:4a:05:29:11:7e:fc:
74:00:02:ac:33:ab:47:0e:6e:1c:15:f2:35:64:fc:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:03:15:8E:F5:E5:5C:D6:09:9F:66:B1:97:11:DA:8E:58:23:54
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:80:45:e5:6c:86:39:53:8a:52:ba:07:06:a3:c4:81:65:7a:
a2:be:a3:4c:4d:94:31:74:66:5d:7b:15:9b:41:d5:f2:66:03:
80:71:a7:22:4f:cf:43:c3:0d:24:fa:22:b4:1c:b8:dd:e5:af:
12:9d:07:05:3a:82:72:64:83:d2:c8:64:5d:09:c1:bf:5f:07:
b3:58:0e:7f:75:a7:dd:73:97:5a:23:08:42:2f:95:29:25:d8:
0f:8d:98:12:82:a3:07:4a:90:4b:21:30:0d:c9:37:6a:ca:80:
4d:44:30:86:7c:6f:cb:0b:d5:5f:78:82:7c:f6:7d:90:8b:e5:
ad:f4:84:96:1e:19:b8:b6:a7:30:64:cc:e4:2a:d3:58:5e:b8:
31:b4:48:ba:a1:91:f1:8a:60:84:1f:ae:01:f6:14:6c:38:2e:
83:11:a2:87:1d:37:0b:fe:64:97:83:0b:84:12:53:95:d4:52:
44:80:1b:6d:8a:f9:15:c9:9e:13:68:3d:9f:fc:3e:cf:d3:cc:
e5:2c:80:34:c3:dd:05:ad:22:4b:47:1a:c9:58:ca:a6:65:56:
09:19:e1:8a:60:ec:50:50:d4:55:58:f8:f6:df:f8:9e:3b:6d:
6b:51:cb:c9:86:c4:68:a1:71:e2:9b:92:9c:0a:39:30:28:be:
ca:4c:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:15 2026 by rpki-client