Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: GNfQ5SScqol/6WAsXoq6B9fQnyShchTLXOy2KHHMFTQ=
Subject key identifier: 04:B4:4D:47:E7:B9:46:A7:56:02:D5:EC:9D:39:8D:FC:A5:24:63:7C
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019FAABE5DEF6AAD3B299434B8CD49816820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0DC6
Signing time: Tue 28 Jul 2026 22:00:30 +0000
Manifest this update: Tue 28 Jul 2026 22:00:30 +0000
Manifest next update: Wed 29 Jul 2026 22:00:30 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: GLIYRy5fGKBr3GC8M0wleGvDYeZHHLuIImFShYn3iqw=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:5d:ef:6a:ad:3b:29:94:34:b8:cd:49:81:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Jul 28 22:00:30 2026 GMT
Not After : Jul 29 22:00:30 2026 GMT
Subject: CN=04b44d47e7b946a75602d5ec9d398dfca524637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:92:8c:7f:f9:57:14:09:0a:a9:33:35:7b:
5c:74:f4:fa:b7:6e:ed:e4:d1:d7:22:cf:9c:c7:3a:
aa:b9:4c:7a:c4:d3:ec:3c:2b:77:5f:80:9b:26:00:
de:d6:4e:24:16:c8:75:c2:33:fe:1f:af:f8:8a:a0:
49:e1:02:4f:4d:61:2a:e7:a7:fc:f3:c6:6b:3f:d5:
8d:27:e9:9f:6c:2f:d3:6b:19:21:df:bb:67:07:5a:
76:0b:77:43:fb:d4:06:50:9a:b4:20:31:11:2c:cb:
f9:27:e1:2d:2b:8f:eb:5e:43:37:08:a6:d6:d8:9d:
dd:b0:db:8e:57:34:3a:10:c8:db:35:7d:3f:03:02:
80:71:bd:76:1a:df:d9:0f:64:f8:38:05:bd:48:dc:
94:4a:40:34:40:2d:cb:62:8d:f6:05:6b:7a:d8:2a:
16:3b:34:4c:08:e9:2d:8e:5d:51:50:bd:53:2c:6a:
5e:56:7b:f2:1d:95:d8:14:5f:2c:83:6b:41:ef:5e:
ef:17:90:39:31:0e:07:b0:72:64:3e:d0:b0:20:20:
ca:d1:90:01:11:46:5e:e8:5b:9f:47:8b:6f:b8:76:
84:0e:a7:03:7d:87:b9:e3:d7:4a:55:a4:e9:4a:12:
93:f3:ce:0b:aa:db:60:8e:3e:7f:4e:3b:72:d2:ff:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:4D:47:E7:B9:46:A7:56:02:D5:EC:9D:39:8D:FC:A5:24:63:7C
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:19:51:f6:88:6e:23:97:01:03:b5:3b:ac:65:b9:f7:53:a9:
f9:ad:03:ff:11:62:af:8f:17:e4:e5:73:13:59:fd:5f:e4:c0:
a8:8a:1a:7f:72:db:c8:fa:a6:f6:2b:e5:70:91:98:e9:bf:17:
14:56:b1:07:a6:30:56:e7:39:32:10:28:c0:75:14:53:1e:10:
fa:36:75:be:9a:c3:3e:b1:eb:ec:2a:94:c4:5e:f5:e3:08:d7:
dc:dd:42:af:f6:d5:16:3f:d4:73:6c:e3:ff:eb:71:42:9a:1c:
bf:e1:90:a7:ed:b9:c9:a6:b7:fb:d8:9b:22:36:c1:df:2c:e9:
2a:30:58:d7:eb:59:63:81:c0:55:c9:5e:36:3e:d3:84:96:79:
2a:a8:fb:91:2a:4c:21:25:e8:2c:b1:3d:2f:18:83:07:ac:e4:
bb:b3:fb:4a:f2:ca:42:62:04:ea:bf:82:25:7d:02:2a:57:62:
34:bf:8a:8a:14:bb:b3:08:5e:26:aa:88:93:6b:c0:00:bc:e5:
27:8b:6c:48:1b:70:90:4e:3c:1d:c7:63:a2:ea:d2:04:61:b3:
f1:48:97:92:49:e6:e7:24:fb:1a:0a:d4:3c:b5:43:f0:b9:d6:
70:c5:21:26:f5:1f:72:d0:23:62:be:26:cc:f0:a9:21:05:70:
2e:f6:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:30 2026 by rpki-client