Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: aupjm0/onY70jMGl8tf7Qfui+bR70rmgUbn//RMy/xs=
Subject key identifier: 82:BA:33:A1:F8:70:34:2B:93:C6:08:60:27:AC:38:71:46:B7:00:43
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019FAC3EC8A2AA1222F0854D8AF5814150B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: 011A
Signing time: Wed 29 Jul 2026 05:00:23 +0000
Manifest this update: Wed 29 Jul 2026 05:00:23 +0000
Manifest next update: Thu 30 Jul 2026 05:00:23 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: uHaXJYteqehale6dTbyBNEb1REJju/r8CkfPYBisA0k=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c8:a2:aa:12:22:f0:85:4d:8a:f5:81:41:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Jul 29 05:00:23 2026 GMT
Not After : Jul 30 05:00:23 2026 GMT
Subject: CN=82ba33a1f870342b93c6086027ac387146b70043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:54:e2:d6:cf:40:c5:47:2b:0e:88:62:88:
f8:fa:77:72:33:71:d4:79:ef:98:be:ea:8c:a5:4f:
fd:c7:7d:26:47:6c:1d:6d:0c:88:64:69:09:e7:74:
66:25:84:28:d3:80:a4:38:fd:c9:6e:1e:06:35:9f:
c4:2e:00:76:2e:12:3c:ef:71:75:6d:fc:32:f5:ed:
31:07:92:32:e0:4d:95:5f:d6:d1:75:f3:c2:ad:22:
1c:63:c3:21:d2:a1:3a:89:2e:9a:c6:fb:c1:fa:84:
f9:c4:04:bf:d9:ee:1e:9f:ed:70:6a:3f:1c:09:b4:
c0:ec:39:3d:3e:b3:c8:42:f4:bb:72:e6:81:4f:6d:
64:4d:80:22:b9:25:33:67:8a:c4:b0:ea:99:1d:bb:
f9:1c:0b:f4:52:ab:2f:91:98:ec:d6:bc:fc:cf:f4:
41:11:4f:5a:24:dd:54:e8:e7:2e:01:f4:31:f5:74:
00:02:40:21:fb:e7:74:58:73:1b:98:f1:8e:bd:f1:
c2:a3:1b:cd:41:95:b5:1b:8c:09:87:82:76:62:12:
d7:f9:a3:ff:24:bc:c8:79:87:93:39:29:7c:7b:fb:
7e:e4:f4:12:e4:9c:d8:f0:3c:92:71:92:44:87:92:
6a:ca:2f:34:7e:06:5a:bf:f6:fe:fc:db:1d:bd:18:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:33:A1:F8:70:34:2B:93:C6:08:60:27:AC:38:71:46:B7:00:43
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:52:18:4b:f9:3c:2f:53:25:d7:56:94:d4:1d:3a:db:9a:fe:
99:da:cb:a5:96:be:5b:f7:1e:56:72:6a:a4:63:0f:ed:0e:ec:
40:b7:f7:0c:36:b2:5e:34:d3:ee:74:da:1a:0d:96:f4:18:67:
ee:50:eb:e8:36:14:34:ec:93:00:7d:4f:f2:58:f3:18:6b:2a:
28:45:66:0a:82:79:2f:68:c0:35:b2:b5:d3:bc:86:86:a6:2d:
f4:ce:41:fb:4d:5f:3e:85:ba:de:af:22:13:5e:5d:ff:06:96:
50:52:7f:c8:40:26:8f:d7:71:45:c0:47:79:ba:44:40:67:02:
8c:94:9b:1e:23:97:ed:29:79:a5:40:e5:dc:5d:f4:01:84:bf:
6c:78:b0:14:35:81:6d:71:34:2e:4e:c8:8f:20:0e:91:54:16:
28:57:2a:a5:e4:52:f6:32:3c:70:04:ad:f8:86:e5:be:8d:ae:
68:c3:4c:7f:63:2e:dd:1d:3f:94:b1:06:d1:14:81:e4:cd:73:
3f:6e:5e:7d:ef:84:e2:73:9f:c4:a9:26:43:9e:88:26:a7:0a:
44:17:e3:b7:10:5f:79:ff:a9:56:14:c4:cf:69:df:02:86:46:
3c:77:0e:5c:a6:66:43:50:44:6a:8d:b3:73:8b:50:25:0d:e1:
c1:49:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:15 2026 by rpki-client