Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: dsdo5IlLH6DosTrtIODKxy0jlZmfqKR/SHg+TE3nbIw=
Subject key identifier: 62:81:23:D5:35:2B:09:FF:AC:2E:8C:CE:55:8A:14:9A:E4:B7:84:F0
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019FAA87A226D08ED33A1FA41519B2F06BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0F60
Signing time: Tue 28 Jul 2026 21:00:43 +0000
Manifest this update: Tue 28 Jul 2026 21:00:43 +0000
Manifest next update: Wed 29 Jul 2026 21:00:43 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: w10Xq1ukIoD+G5MRtbCxUYh+3FZxjEFnm2FwEYNEcVU=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:a2:26:d0:8e:d3:3a:1f:a4:15:19:b2:f0:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jul 28 21:00:43 2026 GMT
Not After : Jul 29 21:00:43 2026 GMT
Subject: CN=628123d5352b09ffac2e8cce558a149ae4b784f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:88:f8:1c:ee:7a:30:ee:60:c2:58:06:a8:
8b:27:36:80:28:f1:37:aa:16:e6:25:cc:6a:bc:7c:
85:11:5e:ba:4c:ab:30:a4:10:fe:73:62:ed:56:26:
37:ea:fd:23:54:d9:ee:c7:e0:56:60:85:7e:3e:a0:
7b:68:5e:fb:20:bf:32:2d:ba:f4:ce:7f:7e:98:9a:
95:46:fa:58:6e:9f:92:9d:74:30:d3:59:23:f3:c6:
e2:08:84:55:79:42:d6:13:f8:12:fe:eb:12:a7:5e:
4a:72:2c:5c:c1:a4:8e:58:ed:77:0b:91:2c:f5:b0:
14:a0:4f:64:79:c6:38:06:5c:12:62:40:0d:8f:5f:
71:8e:0f:b4:ab:5f:08:4c:d5:d5:a7:82:97:45:28:
c1:bb:10:f9:e4:51:c9:78:18:a8:c8:83:22:35:5f:
06:93:26:c8:9f:35:68:80:e3:15:4e:c3:94:e5:72:
e1:34:c6:88:4b:50:cb:20:91:e0:ee:07:d1:83:4c:
77:56:1a:60:9d:6f:62:3a:44:2a:24:d8:27:c7:ce:
4a:c5:a1:9b:d7:96:88:90:2d:b2:22:41:c6:99:a3:
7d:83:86:0a:26:b0:ea:4d:64:71:49:d5:ca:a6:f4:
54:23:80:53:20:b9:bb:c9:89:d9:74:80:b9:0a:60:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:81:23:D5:35:2B:09:FF:AC:2E:8C:CE:55:8A:14:9A:E4:B7:84:F0
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f7:36:81:b3:8a:a3:43:d5:5c:b7:46:14:de:c1:79:00:1a:
b1:3e:cd:d9:e2:36:8b:49:b4:0f:10:ab:b1:b8:ce:6d:70:76:
58:19:4e:a7:1f:9b:63:d4:d9:61:31:67:62:c8:a8:62:c1:10:
ef:8e:ff:be:5f:9f:6b:d4:82:53:b0:af:71:6f:13:a8:b7:37:
3e:90:61:80:c9:40:f8:a1:10:63:24:27:97:78:77:9f:40:05:
b5:a7:b9:3f:e7:95:e2:c0:58:72:07:eb:ce:c2:86:af:fb:96:
47:02:37:df:9c:e6:bc:98:bc:d2:48:4b:3f:3e:1a:9b:3d:58:
d9:65:ec:01:73:fd:9c:e9:5f:47:ea:4a:45:85:6f:c0:2a:8f:
f8:28:00:29:b5:3a:eb:1b:d1:a4:72:ff:35:92:30:48:2d:3c:
be:f9:b0:8f:5a:81:41:f8:7e:df:a5:20:10:ca:a7:58:06:ba:
05:ae:aa:f8:8b:41:fb:ed:8b:47:97:1a:8b:f0:72:b1:59:93:
53:d8:44:d6:6a:f8:3b:4a:4f:0a:a4:be:66:f5:52:b7:9c:f8:
ba:dc:b0:3d:ea:9c:5d:48:e8:46:3a:6d:56:da:b6:ac:46:7e:
f5:9b:90:d2:47:24:12:7f:7a:ec:f0:33:dc:22:86:84:db:07:
44:e4:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:19 2026 by rpki-client