Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: ALYOzo3R68wWpPhkXsqjz4i+dgVj2Fvw3bBdpv2/JWo=
Subject key identifier: 0F:10:C3:A5:99:83:9C:A1:C1:DD:84:D4:1B:69:A2:0A:50:39:07:57
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019FAABE82C9CD1321E9B3A58DF66A77E49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0E63
Signing time: Tue 28 Jul 2026 22:00:39 +0000
Manifest this update: Tue 28 Jul 2026 22:00:39 +0000
Manifest next update: Wed 29 Jul 2026 22:00:39 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: Gqv6UefZ6K7DDZvordNDnDeULlxxZh261LN0bHr+fdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:82:c9:cd:13:21:e9:b3:a5:8d:f6:6a:77:e4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jul 28 22:00:39 2026 GMT
Not After : Jul 29 22:00:39 2026 GMT
Subject: CN=0f10c3a599839ca1c1dd84d41b69a20a50390757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:78:fe:06:ca:eb:d5:13:46:18:df:4e:3d:
7f:26:8e:90:70:2b:1b:7b:22:92:3a:33:93:84:29:
09:92:58:6d:aa:d9:9c:23:07:61:26:5f:6f:f9:8f:
00:40:0e:f6:fe:6f:c6:73:3d:9d:e0:73:d8:45:be:
5c:d7:40:f8:03:49:62:0a:19:7c:8e:b5:dd:dd:22:
2c:03:22:7b:08:ab:3d:b4:a6:ba:f7:2a:02:8a:17:
b7:67:1d:36:d4:d9:e9:9c:5f:c9:9e:21:7c:62:d1:
fa:4e:46:5e:f8:50:bf:6e:72:f3:c1:0d:f8:81:60:
b1:15:96:50:4e:3a:fb:81:4c:29:38:81:27:83:58:
34:2c:d2:b4:d5:a6:9d:cc:cf:dc:44:42:40:cf:e3:
d4:fa:dd:a0:65:46:c0:51:14:5c:f5:81:2f:c2:71:
49:59:cf:b2:f3:3c:08:76:87:5c:ab:bc:a8:9e:18:
5a:f3:2d:ee:0c:eb:f3:d7:a3:98:3e:5e:9c:82:7d:
ad:08:e7:4d:a2:51:60:c8:df:8e:cf:b3:4b:03:16:
0e:25:5b:4c:7b:88:86:ce:10:a5:19:6b:04:76:c9:
b3:a9:4f:98:76:a2:00:a4:c0:e9:b7:e7:22:c6:98:
d0:b9:9e:0a:80:63:82:b1:83:09:b8:da:54:a5:a0:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:C3:A5:99:83:9C:A1:C1:DD:84:D4:1B:69:A2:0A:50:39:07:57
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:17:1d:54:da:e0:47:f4:c8:f4:87:c3:9e:06:2a:9f:e0:
62:04:d3:c9:c2:80:99:a2:c9:68:1a:df:aa:ab:2f:de:71:cd:
42:06:c9:60:11:c2:74:3c:62:86:b6:21:ef:83:7a:b3:22:30:
3a:de:ba:8f:3f:04:a2:82:e7:ac:a7:61:22:da:2f:41:a7:8d:
60:08:90:47:c0:4c:22:ff:8d:0b:50:e3:a6:99:5f:4f:ea:a0:
85:bd:f2:1d:12:c1:d7:d0:48:89:93:34:6a:c5:2b:8b:5e:3c:
62:ac:97:18:1a:9c:1a:e4:d6:c5:23:60:54:e2:fc:cc:ac:32:
d7:17:28:e9:1d:b7:bd:5d:12:8b:7a:04:76:fc:77:70:ff:d6:
72:89:9d:b8:e3:99:9a:36:d8:40:d4:75:e0:53:b6:0e:9f:b7:
1e:f5:c9:1a:19:8e:4f:51:34:1b:be:83:40:4b:99:a4:f7:97:
31:3e:18:01:fe:e8:6c:21:3d:c6:60:ec:96:89:39:eb:21:82:
fd:51:be:25:18:7f:c5:04:db:fd:95:46:53:9d:ef:4d:ed:c9:
fb:35:15:2f:5e:81:fc:a3:32:f2:6f:e2:71:05:8b:db:0b:de:
f2:22:12:88:f3:50:22:1c:75:f9:10:7f:98:44:db:9f:08:54:
6c:a9:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:25 2026 by rpki-client