Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: AbFVNljRxPbHMtDhMWgQs3kMW8Yjp4V7fD2MnLIJMG4=
Subject key identifier: 97:30:E5:A6:65:48:CD:C0:F5:43:D2:79:76:7A:BC:F0:E4:66:E2:CD
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019FA90714312643486193046DAC3023CE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 1344
Signing time: Tue 28 Jul 2026 14:00:41 +0000
Manifest this update: Tue 28 Jul 2026 14:00:41 +0000
Manifest next update: Wed 29 Jul 2026 14:00:41 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: SDJyd/pAVNOdj8D17lgkaynYN80JvVLJsI7xVtxOXZc=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:14:31:26:43:48:61:93:04:6d:ac:30:23:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jul 28 14:00:41 2026 GMT
Not After : Jul 29 14:00:41 2026 GMT
Subject: CN=9730e5a66548cdc0f543d279767abcf0e466e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:b2:7d:ea:76:e8:b2:16:6f:d1:96:bc:49:
b8:8a:27:80:05:ef:67:52:fe:41:90:f9:b3:4c:88:
ba:fb:da:6e:82:fa:03:b0:a2:4a:c1:20:66:09:e1:
cf:fb:d5:d7:d4:ed:ed:51:71:7d:78:71:1a:07:fc:
66:64:38:73:3e:18:83:76:d3:3b:52:41:76:b5:ba:
cb:9a:4b:32:6a:ac:83:b8:2a:71:a5:4e:de:fc:40:
62:2a:32:0c:25:0e:6e:4a:73:45:8b:ac:a3:0d:ba:
99:d3:53:5d:fe:57:5b:cb:89:f5:44:cc:e8:d4:d5:
0b:14:55:6b:a9:70:f4:16:f9:fa:58:84:1d:79:b1:
a1:70:f6:6a:a6:0c:3c:ad:9c:af:75:28:f3:60:e7:
c9:c7:c7:9d:62:b3:d8:82:3d:43:6e:f9:4f:ae:b9:
c3:bb:7c:c5:af:96:fc:e9:1e:51:15:97:d7:de:7c:
f2:64:08:ad:66:b1:58:e1:e9:0d:27:e9:c8:05:56:
35:2c:8a:90:57:83:9e:e9:1c:9b:cb:c5:24:ce:8a:
c1:75:bd:08:d6:05:06:1d:d3:52:d9:be:4e:27:12:
9f:ee:92:da:17:4a:0e:b2:c9:62:16:e8:f0:14:2a:
37:73:f2:1b:53:91:0f:38:00:77:e7:2c:f3:a6:b1:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:E5:A6:65:48:CD:C0:F5:43:D2:79:76:7A:BC:F0:E4:66:E2:CD
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b5:84:da:2d:79:85:55:69:c2:86:58:c8:72:b9:a1:31:ea:
dc:26:93:d4:99:0a:49:51:f8:7a:ac:95:a4:1c:4e:3d:32:b5:
45:98:99:1b:df:55:70:6a:f0:95:fd:e0:df:f1:e0:2c:fb:08:
f9:a2:3f:36:68:43:b5:f7:31:72:c6:5f:b9:f0:9e:86:74:64:
95:5e:b8:d7:27:6f:be:74:53:94:05:48:00:77:ed:2a:2f:15:
e4:5c:5c:a1:d1:ee:5a:48:cb:7a:23:ac:d4:1b:e8:ba:2e:b8:
e9:08:9e:3c:67:e7:5e:dc:d8:98:a6:9e:60:43:d1:d9:0f:a6:
34:6f:ae:bc:af:8e:90:43:2f:6a:39:ab:3d:42:68:fd:2b:74:
db:40:5b:99:94:b6:b1:50:0a:38:5e:2f:5d:1a:90:05:f5:2d:
98:84:1a:2d:30:3d:37:4e:4f:48:9e:5c:ac:5b:58:63:eb:9c:
40:03:e0:02:37:dc:da:d2:9d:fc:6d:57:63:d2:65:61:df:a9:
28:41:0a:35:04:fe:fb:14:98:b3:83:1a:5b:02:27:da:e0:be:
f6:50:1f:b0:50:77:5f:b8:be:7c:c5:a6:0e:f3:ac:70:c3:59:
d2:81:47:4e:1e:13:9c:62:94:36:38:64:8a:86:36:d6:40:91:
91:48:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:38 2026 by rpki-client