Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: ehaUuZhVcEjOdi6cI352UYBEqcNWLZMKPVpNZ7rAp80=
Subject key identifier: 80:52:2C:15:21:DF:4D:99:22:CA:54:E8:38:1D:E2:1C:CA:23:24:C4
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 019FACE3A04A427269D055E539754C3FBE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 195C
Signing time: Wed 29 Jul 2026 08:00:26 +0000
Manifest this update: Wed 29 Jul 2026 08:00:26 +0000
Manifest next update: Thu 30 Jul 2026 08:00:26 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: 5u9kl0ypEcF6dHOE6DZ4TOjRXNPumhKbtlATxxFcwu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:a0:4a:42:72:69:d0:55:e5:39:75:4c:3f:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Jul 29 08:00:26 2026 GMT
Not After : Jul 30 08:00:26 2026 GMT
Subject: CN=80522c1521df4d9922ca54e8381de21cca2324c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:8e:c0:f7:92:dd:7b:eb:b8:d2:f7:54:61:
6f:90:d4:cb:f6:57:d4:3a:36:e6:e5:72:2e:9e:ac:
29:7f:c8:3d:fd:f2:8f:f6:78:13:87:f6:01:34:81:
74:9b:77:2d:71:57:b9:72:19:93:69:c2:3d:f2:cd:
33:6b:81:24:4a:45:fd:f3:f3:36:85:5c:52:6e:51:
33:23:7a:9e:26:27:99:60:d6:4b:a3:16:7b:61:33:
af:cc:71:1f:c1:f3:d8:96:ba:ff:2f:62:88:d8:e8:
45:ad:1d:a7:93:8f:d1:5d:f4:3a:2f:2d:4e:0d:18:
19:f4:fd:7f:4d:fc:2b:cb:0c:35:b7:a4:9a:38:41:
8d:c2:4b:4a:ca:1f:4e:25:a0:f8:6e:a2:d7:d5:d3:
88:a5:27:da:2b:26:53:b8:f7:ec:98:5b:e6:25:38:
ca:e4:68:e0:5d:52:5a:22:19:77:53:01:c9:30:ea:
8d:43:ab:e6:a5:7a:5e:4e:3c:2b:5c:23:b3:c9:5b:
91:e6:ea:2b:ac:10:ba:ae:67:40:29:a4:86:2c:f7:
93:e7:7d:ac:fa:f2:04:0a:77:97:81:c2:fe:86:67:
93:0b:fb:31:74:eb:9b:23:d2:78:dd:01:fd:cf:b8:
21:4a:1a:04:de:06:b1:3c:ae:30:fe:fa:2b:ec:41:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:2C:15:21:DF:4D:99:22:CA:54:E8:38:1D:E2:1C:CA:23:24:C4
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:0b:59:75:87:ef:69:2a:2f:ad:27:cc:dd:7a:2e:f9:74:
a1:4c:0e:26:ec:a1:09:4c:9f:00:59:95:a5:a2:70:5f:f5:ea:
e7:07:bf:8a:b5:9f:da:a8:ed:43:4a:7e:26:dd:f7:ae:0d:0d:
4d:83:7c:e1:d0:5e:9f:11:62:52:50:92:62:88:3b:ad:88:a4:
f9:4e:0c:a9:c6:e0:2a:f3:c6:eb:8a:c0:a4:34:c0:89:80:d0:
6a:87:63:7d:d2:18:19:74:53:d8:09:27:30:b3:27:a7:5f:e6:
d3:d5:62:e5:d0:b2:91:fb:08:c3:f4:8b:ef:a0:5b:18:7c:57:
10:49:f8:55:ab:5d:0b:28:2e:9e:57:11:dc:a2:f0:53:6a:a9:
b4:f4:7d:8a:0e:cc:c9:71:79:81:c1:1f:8a:7d:2b:04:a9:ad:
79:be:79:2e:58:5d:a2:b4:dd:3b:d5:f5:37:dd:23:e4:0f:b7:
33:56:be:12:ca:74:7b:49:11:42:ea:5b:f4:c1:c1:cc:d2:ee:
3a:b0:d3:5f:2b:5c:d7:0f:d9:5f:cf:b3:15:57:99:25:a7:01:
44:76:00:61:28:33:0b:dc:a9:cd:f7:c9:8b:5a:09:98:9f:57:
c3:5e:59:d6:e0:31:5a:b6:c3:e1:a8:b9:3c:8c:51:6a:3e:0d:
1e:28:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:09 2026 by rpki-client