Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: ttstA/hX2qIGzK4R4VT5zSXzwAYStGJbbwBj8s9YiQs=
Subject key identifier: 6F:3A:B4:90:BC:F5:EF:5C:9A:CA:D1:35:64:FF:E5:3F:A8:50:01:17
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019FAC76D930D0A499377E01D45B2D6D1DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 0238
Signing time: Wed 29 Jul 2026 06:01:37 +0000
Manifest this update: Wed 29 Jul 2026 06:01:37 +0000
Manifest next update: Thu 30 Jul 2026 06:01:37 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: JmU2s5LuVh+SXLPWr5EizWo2D+44yS3XU8fJaN9EhmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:d9:30:d0:a4:99:37:7e:01:d4:5b:2d:6d:1d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Jul 29 06:01:37 2026 GMT
Not After : Jul 30 06:01:37 2026 GMT
Subject: CN=6f3ab490bcf5ef5c9acad13564ffe53fa8500117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:a7:2e:21:f2:83:2d:6f:44:9b:e8:db:fc:
d1:d7:cc:05:39:96:94:98:4a:d4:0b:3a:ef:a5:35:
1b:ba:d9:52:d7:3a:c1:30:60:4c:73:e1:69:30:69:
51:67:0c:80:a7:28:0c:4a:cf:ec:27:2f:f0:f7:65:
2f:07:02:27:d2:f6:c0:3e:5c:6e:81:10:71:43:22:
03:b3:ed:16:84:e2:6f:be:72:13:3e:30:94:6f:5c:
c1:e4:cc:b8:18:f8:8c:a8:ce:f5:de:83:86:b8:50:
66:24:e2:aa:98:60:e4:c7:65:1e:fb:db:55:e4:43:
72:6a:0f:99:3a:5e:c0:4b:80:b4:f8:62:c4:df:cf:
07:ff:29:32:37:e0:5e:47:5e:c7:61:da:13:0c:3b:
ee:5b:3a:fb:8d:52:9c:bd:3a:c8:f5:1a:02:85:16:
c2:c6:5c:d7:e8:68:84:0b:27:75:f9:cc:50:09:70:
3f:3d:2e:3d:fd:dc:ac:a9:1e:af:f5:c3:9e:dd:32:
a3:7f:23:ea:e1:c9:99:fb:07:a3:fe:80:0f:0b:37:
fb:ba:71:e8:19:29:72:f8:16:29:d8:1f:ec:f6:28:
0a:07:89:9f:b2:9a:e0:83:6e:ff:6b:45:11:58:cc:
a7:05:05:d1:52:fd:15:ac:5c:cd:55:75:6f:7c:8a:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:B4:90:BC:F5:EF:5C:9A:CA:D1:35:64:FF:E5:3F:A8:50:01:17
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f9:0f:3f:3f:97:11:a1:46:75:0f:94:bf:95:7a:f3:26:51:
9f:f6:67:eb:e7:0e:1d:be:0e:3a:a0:06:28:d4:0f:9e:ce:d8:
b5:64:f5:5f:22:cc:4e:72:6a:b8:19:be:72:d0:93:99:1e:87:
c8:7e:7d:2d:6b:90:b3:bb:a3:40:00:ec:3a:4c:d2:2e:60:29:
a8:68:e9:aa:bf:d6:c5:78:1c:01:30:c7:fc:28:67:d6:4a:64:
04:f3:9e:2b:4f:55:c5:4f:bc:b7:aa:04:5c:dd:d3:b0:5a:18:
3f:99:2e:be:e8:09:4b:6d:46:b6:50:7e:32:24:c1:ae:27:aa:
c4:80:66:ef:78:a0:a4:be:5e:fb:07:96:40:71:c8:20:af:88:
fb:6a:5b:0f:08:1d:7c:f4:84:80:bf:93:25:03:df:72:31:52:
81:ad:64:96:13:3c:b0:b9:c4:3b:e7:f9:92:8e:79:80:26:c9:
55:98:08:da:66:8f:3b:8f:af:d9:d6:18:72:9f:6d:02:7c:3f:
7f:e2:1b:25:50:b6:c1:d8:2a:76:28:75:4b:4d:8c:86:f8:8d:
58:42:37:4c:8d:83:e3:e1:39:f0:33:f8:17:35:2b:55:c0:2c:
f0:63:76:eb:ad:af:e9:34:c5:2b:af:b0:b5:fd:60:62:19:ee:
87:3d:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:35 2026 by rpki-client