Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: i2WH3uC/ZqDXbfel3J8XL7FnjpTC8RzlY9Ibr2nQEKE=
Subject key identifier: 68:39:63:48:E4:79:F7:94:7E:52:5C:59:FE:B6:03:C6:85:1D:E9:83
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019FAB638E072CE9F519BD9D6AF02CE804FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:00:55 +0000
Manifest this update: Wed 29 Jul 2026 01:00:55 +0000
Manifest next update: Thu 30 Jul 2026 01:00:55 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: bCSxY80KzgX2g2Y+/cC6AH7pGtcy+t/CM8v12MaTEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:8e:07:2c:e9:f5:19:bd:9d:6a:f0:2c:e8:04:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jul 29 01:00:55 2026 GMT
Not After : Jul 30 01:00:55 2026 GMT
Subject: CN=68396348e479f7947e525c59feb603c6851de983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:ea:15:9f:87:7c:f5:fb:27:e5:91:91:1f:
2d:81:b9:33:51:50:b8:e2:47:20:88:1d:26:2f:f9:
47:a1:f4:c7:76:c6:e1:d9:5f:18:0e:08:25:9f:70:
7e:79:4d:06:b5:df:17:15:08:63:bd:13:15:a3:d3:
70:11:9f:85:3a:5a:2a:e4:5c:0e:b8:04:50:81:15:
04:c8:60:3f:55:04:cf:ed:54:1b:a6:e6:b5:7f:a7:
82:27:da:ca:a3:99:04:40:fb:c5:0c:4f:b9:8a:e3:
0e:d4:90:9d:9b:d3:51:ca:b7:1b:cc:4c:ba:f9:fc:
fc:fa:12:6b:31:82:30:c5:01:ea:c0:72:7e:43:25:
cf:80:b4:5d:66:b4:3e:77:31:b8:24:4c:fb:4e:1b:
a1:e3:09:a3:b2:20:d9:9b:60:db:d9:e4:45:cb:e9:
18:b4:82:5d:a2:cd:2a:43:ea:24:0e:11:85:ea:f1:
f2:f9:95:77:08:40:15:ce:72:2b:d8:ce:24:8d:a8:
c3:2e:7f:79:c5:64:8f:16:08:38:20:88:f2:53:d6:
69:d9:5e:3b:3c:c8:f5:3e:56:e8:bf:fb:51:fd:ae:
ea:b9:9f:39:bd:94:c3:29:8b:d1:0e:b9:8d:ed:4c:
cd:47:ea:52:74:8b:70:f2:91:82:00:21:c2:75:f0:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:63:48:E4:79:F7:94:7E:52:5C:59:FE:B6:03:C6:85:1D:E9:83
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6b:ac:04:e9:89:70:e0:1e:e2:58:c7:06:cc:3d:e5:1f:c3:
f6:83:bd:93:5d:57:1f:45:27:32:89:45:62:fc:75:48:93:a1:
50:33:c1:54:0b:b9:77:32:9a:e1:c2:f2:4a:0e:fb:5a:49:c1:
bf:71:74:81:71:2c:10:42:05:71:f4:d1:20:f8:9f:f8:61:61:
af:d6:be:60:b2:6f:b6:48:41:42:ea:64:d7:76:89:9e:7d:b6:
b5:30:b3:2c:44:eb:eb:d0:0e:6c:65:94:6b:b2:c9:03:21:2c:
c4:6d:99:47:f0:89:97:43:06:39:21:cb:81:39:54:07:99:f9:
05:0b:39:b4:34:55:09:5e:f3:a7:9a:15:8e:6f:20:1e:6e:14:
38:6f:c2:06:3b:57:d9:9b:70:04:2d:7a:b9:be:0f:69:90:97:
f8:fa:53:22:ff:1d:9d:0b:b5:3d:81:ff:73:50:8a:c5:b1:4f:
74:3f:cf:27:09:10:37:f7:44:1d:73:db:3d:d6:7d:44:55:20:
14:1b:4c:f6:6c:9c:9a:a0:6c:24:70:60:e9:13:0e:00:bd:08:
b2:72:51:6f:f0:d7:f1:e2:1f:61:4f:4f:e9:ed:df:de:d3:8d:
c8:42:19:64:3b:3f:6a:24:a0:4a:a0:02:5e:b4:e7:df:7a:72:
7f:20:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:35 2026 by rpki-client