Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier: rXQVUsmoMdnGdZwmU2enLRrbaJJ9H/jfBBBVzz8mp60=
Subject key identifier: BA:9A:A5:77:3B:62:7D:EE:45:D3:F8:44:55:F0:3E:5C:F7:11:D7:02
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer: /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial: 019FAD1A6DB7DAA57186FEE844EF1B2A81C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number: 0111
Signing time: Wed 29 Jul 2026 09:00:18 +0000
Manifest this update: Wed 29 Jul 2026 09:00:18 +0000
Manifest next update: Thu 30 Jul 2026 09:00:18 +0000
Files and hashes: 1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: 6lb8HcwWkV/PvtOl4Pzx1nPONM+2zsmFP5OGxpDN3RM=)
2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:6d:b7:da:a5:71:86:fe:e8:44:ef:1b:2a:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
Validity
Not Before: Jul 29 09:00:18 2026 GMT
Not After : Jul 30 09:00:18 2026 GMT
Subject: CN=ba9aa5773b627dee45d3f84455f03e5cf711d702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:a6:34:ed:2d:0f:9f:ed:0e:49:09:b9:dd:
0f:26:b9:e1:ac:96:c0:df:39:c3:6f:32:2f:30:1b:
fe:64:9e:95:b6:13:de:3f:c5:90:b0:59:d2:99:df:
4e:9b:a7:2c:7a:6b:60:09:d8:02:16:21:ed:47:88:
04:21:29:56:82:3d:20:fb:42:5d:b3:a7:19:11:73:
82:09:2f:60:8d:df:51:9f:ef:81:c3:34:71:40:42:
e6:25:67:d6:a6:28:50:d4:01:05:c4:80:39:0e:cc:
f3:7d:64:3c:34:53:13:4c:69:c5:4a:64:42:eb:9b:
71:74:b3:61:2d:33:af:69:01:9d:78:38:6b:26:8d:
86:42:11:7d:08:23:73:f4:50:c1:2b:f0:00:ff:1a:
fe:94:27:b9:bc:5b:ee:33:e6:3a:b6:6b:3d:68:71:
aa:24:f3:7b:fa:6c:31:4c:ce:bc:2b:ab:66:d7:75:
d4:cf:51:5f:94:99:96:18:1e:d9:5f:fb:1b:55:63:
60:09:5c:31:92:79:fd:88:30:d6:b6:23:90:ae:e0:
36:9a:78:74:59:54:70:a5:5b:4e:b1:11:52:80:d5:
91:c7:95:f9:d1:47:22:06:1a:51:95:51:dc:c3:5d:
73:67:c0:03:8f:b5:a2:cb:96:72:94:d6:2c:7e:60:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:A5:77:3B:62:7D:EE:45:D3:F8:44:55:F0:3E:5C:F7:11:D7:02
X509v3 Authority Key Identifier:
keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:45:f7:bd:e3:4c:d7:a6:46:88:d7:a0:22:c9:20:6a:3b:09:
92:5f:e7:b9:e7:56:7a:32:53:38:ad:4d:cf:c3:35:2e:c6:f8:
d1:e7:13:65:5d:b4:7a:53:47:be:0f:71:bd:18:49:1f:47:e1:
2b:20:5c:ab:96:8e:4e:ca:a5:dd:f4:5e:df:0a:e8:dd:6c:92:
ae:59:3c:a7:b5:bc:32:86:62:ae:0c:79:f3:a9:5e:d5:32:eb:
a1:74:be:b5:65:81:4d:8e:a6:04:0c:ad:9d:f3:1e:fa:85:08:
77:29:ab:69:2f:c4:64:2a:09:38:0b:fa:bc:85:36:c5:34:a3:
65:9a:ad:75:9e:b7:40:fe:a6:8b:61:c9:a5:b0:2b:fd:27:39:
6e:69:01:ea:eb:07:fa:90:a0:35:d6:db:83:65:29:ed:6c:4d:
2d:1c:c0:53:0d:d2:9f:7b:3b:a8:a4:2b:0a:43:5a:d8:9a:8d:
1a:07:e0:86:4c:3e:e4:50:9b:b3:58:5c:80:a6:98:85:7e:d9:
96:8d:09:12:fd:fd:2d:d3:cf:4a:6b:4f:35:8a:8f:04:ab:09:
4b:a8:34:d1:74:27:42:26:6c:8d:c8:7f:23:51:f7:bf:2d:a6:
f5:2d:56:9e:cf:22:ac:00:8c:81:ac:39:6a:bd:f8:0c:c3:29:
34:10:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:51:35 2026 by rpki-client