Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: ZYnoqiUCp2VeQio4eRuKghzfJzp7N/dGw/y+4tSFE5E=
Subject key identifier: 9D:69:01:AF:EE:E4:14:65:11:7D:FD:9E:55:D7:5B:4F:E8:37:A0:A7
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019FABD124B08F04677D62A04FF270448126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 0344
Signing time: Wed 29 Jul 2026 03:00:38 +0000
Manifest this update: Wed 29 Jul 2026 03:00:38 +0000
Manifest next update: Thu 30 Jul 2026 03:00:38 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: KNM9mE/OAlRduJz4e8K1wkLMYFPgZiwsomXLirViaCY=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:24:b0:8f:04:67:7d:62:a0:4f:f2:70:44:81:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Jul 29 03:00:38 2026 GMT
Not After : Jul 30 03:00:38 2026 GMT
Subject: CN=9d6901afeee41465117dfd9e55d75b4fe837a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:ae:46:2c:93:39:eb:1e:3a:04:ec:24:dd:
ed:49:8d:fb:1c:c4:9a:7f:31:f9:db:b5:ab:1a:cf:
34:97:24:e9:0a:e6:38:eb:c0:e9:d2:69:e6:5a:d9:
c9:88:f8:68:a2:ca:23:e0:bc:fc:6f:d2:4d:21:ee:
bc:38:94:2f:e1:2b:f1:b9:db:27:0a:95:84:ab:82:
07:92:e8:f3:02:4a:38:11:95:1b:18:63:59:79:90:
d8:60:fe:94:eb:e6:31:9a:6f:71:ce:95:98:04:38:
74:fd:8d:c7:20:dc:ba:b0:b5:40:8e:56:41:46:9c:
4d:45:db:ab:aa:ed:ae:c8:ca:5f:3c:12:0f:e2:c6:
4e:37:35:a8:ae:af:0f:a0:7a:d1:8f:79:9f:5e:1a:
31:58:e4:82:24:80:1e:da:50:16:bf:29:36:b4:33:
e0:60:64:e3:f0:f8:3e:1a:3c:14:7f:f3:50:22:7f:
2a:3a:76:94:df:ed:0d:be:49:8e:6a:33:8e:25:c4:
2c:5d:d3:79:b9:76:9a:00:f2:5f:24:e2:90:2f:6b:
27:50:e4:f8:3c:4e:0d:a7:58:86:35:cd:c7:12:bb:
64:eb:10:ab:d3:14:da:ed:d1:53:c0:e8:8e:50:19:
a4:c4:9b:1c:83:3a:80:cf:1c:d6:db:0f:3e:f6:8d:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:01:AF:EE:E4:14:65:11:7D:FD:9E:55:D7:5B:4F:E8:37:A0:A7
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:84:57:18:9f:14:bc:ea:a6:3a:2c:cb:76:3c:51:60:30:
4a:f2:87:6d:21:b2:f7:97:4d:fd:d7:a2:2e:d2:c7:d3:b6:db:
a2:90:a6:4a:f9:bf:e5:57:3d:38:6c:95:86:bb:32:c0:54:02:
da:dc:33:58:d7:24:01:8a:f5:84:0e:02:a0:f5:12:0b:81:31:
16:3d:23:bc:76:15:2f:ee:02:3e:9f:bf:6a:2a:07:13:8e:4a:
05:2a:7a:91:79:6a:3a:e2:6a:08:a9:60:9e:b3:4a:13:bf:6e:
5c:9e:86:fb:36:b7:ff:83:e4:21:6c:b9:11:02:a3:44:07:44:
94:3c:b2:33:14:5e:a7:b6:b2:c8:a8:14:ca:ce:43:53:1d:d8:
44:ba:4a:8a:54:89:4b:09:ee:d0:10:48:87:d5:9b:d1:a8:dd:
c7:c6:61:9b:af:3e:b9:fe:c0:25:ce:57:2b:e7:92:64:43:82:
44:8b:d9:b8:95:7c:f9:9b:86:1b:4d:6f:4b:7c:af:0b:4b:26:
20:83:5d:aa:9c:ab:8e:0f:88:36:18:80:0d:2b:e0:84:86:5b:
a0:cc:43:7d:49:ec:60:9d:06:e7:08:1a:e8:db:28:1e:fe:cd:
0e:64:92:4a:04:a8:9d:9f:02:2a:17:1f:b6:0b:6d:22:5c:c9:
5d:5f:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:44 2026 by rpki-client