Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: 6tj4xHfHrEk3fJazzhpi4Ekm24JuoJxfpa6/cVzd3FI=
Subject key identifier: 55:81:2D:98:B2:DB:98:F3:01:4F:A7:CB:36:86:D3:2D:F7:B8:03:F4
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019EC1B6EB77309436E7341934959DD0A2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 08BE
Signing time: Sat 13 Jun 2026 16:00:50 +0000
Manifest this update: Sat 13 Jun 2026 16:00:50 +0000
Manifest next update: Sun 14 Jun 2026 16:00:50 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: Pay7BPaB7F/Z40h18zGiOKUWzvDkOACwUP5Easpq4Dw=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:eb:77:30:94:36:e7:34:19:34:95:9d:d0:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jun 13 16:00:50 2026 GMT
Not After : Jun 14 16:00:50 2026 GMT
Subject: CN=55812d98b2db98f3014fa7cb3686d32df7b803f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:5e:5f:02:b9:6b:35:be:42:fd:01:8c:28:
30:ec:01:90:4c:22:61:64:fb:7f:ca:a6:3d:b3:c2:
c1:98:3a:e1:55:02:ef:f8:04:b5:a4:6a:40:ad:b6:
f6:e2:f2:13:ec:28:c8:3f:07:ed:14:42:b3:9d:0c:
43:bd:58:a7:74:0d:7f:9e:30:48:85:f7:e4:c0:18:
e2:b2:87:f1:5e:08:0b:16:72:87:b7:4a:8e:87:4a:
fe:e0:e5:97:ef:d6:24:11:ae:6b:8b:b2:d7:91:4a:
92:7d:18:43:d4:00:8b:8f:de:f2:b3:9f:bc:6a:aa:
2a:8e:15:fc:94:8d:9c:02:33:8e:b0:07:f9:7e:d3:
fe:a1:e5:3d:7e:20:68:a5:2a:37:bd:2d:1a:4f:1b:
90:1e:a9:f2:df:24:b4:d2:fd:f8:05:d3:26:18:fe:
df:61:45:35:34:c2:73:64:d5:9f:3c:f6:bb:ff:63:
61:b4:4f:6e:54:a0:f0:cc:45:c4:07:f4:b5:ee:f4:
61:2e:2a:51:e4:d3:54:d8:14:ec:86:62:df:a3:19:
cd:f3:cf:84:e8:c9:dc:e4:25:b8:46:db:b7:77:19:
88:53:20:3f:db:a3:d0:39:12:25:f5:98:4e:e5:ba:
b9:44:56:e1:3c:75:60:a0:9f:87:68:3c:7d:69:09:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:2D:98:B2:DB:98:F3:01:4F:A7:CB:36:86:D3:2D:F7:B8:03:F4
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bc:cd:be:12:dd:06:6d:37:c2:3f:98:97:0a:e8:c9:f9:d5:
39:58:3c:3c:8d:c3:c8:f1:ee:44:09:50:ef:7f:ce:74:0a:82:
08:d0:0a:cd:04:74:ce:86:3a:dd:a9:df:da:62:bd:a8:a8:c7:
e9:89:48:51:a9:63:18:8f:d4:75:94:78:b1:9e:c4:7b:e4:5b:
60:a7:bb:5b:d4:fd:e7:94:38:cd:58:98:c5:58:69:e1:c1:ea:
cd:57:97:dd:30:27:94:4d:55:74:7f:ed:76:7f:80:a8:0e:67:
04:5d:49:bb:ba:d9:dc:7b:7f:4b:d5:b2:ee:52:66:c7:0d:99:
e0:69:0e:9e:57:53:35:02:e7:8b:4f:e4:59:1e:fa:68:57:97:
c2:21:a1:f9:6d:c5:b2:fc:54:7c:9c:d3:95:ff:40:36:7e:8c:
06:38:11:34:8f:c1:4d:e3:02:3a:c2:48:d5:5e:4c:52:f3:73:
68:c1:06:8b:15:d5:25:0f:5c:67:d1:77:42:1c:0b:09:b7:20:
10:a8:42:5b:00:84:69:b9:fe:1b:5c:83:a9:82:d9:3d:71:11:
90:8a:5e:2e:a4:74:60:20:4a:ef:21:7a:75:9b:02:ff:67:1a:
80:94:c1:96:1c:ad:87:d1:6a:75:da:ec:31:9f:b6:a8:76:eb:
8f:77:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:04 2026 by rpki-client