Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: Qkzcg0+iO7BOv2Fl1SA5JAq2BtmMVFv+vGw+nGlfFHU=
Subject key identifier: AC:D6:42:1C:1E:C0:AF:D7:A7:04:6A:09:10:E4:C1:47:CC:DB:A2:98
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019FAB639946655B975F39CCF485F17B46C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0937
Signing time: Wed 29 Jul 2026 01:00:58 +0000
Manifest this update: Wed 29 Jul 2026 01:00:58 +0000
Manifest next update: Thu 30 Jul 2026 01:00:58 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: 4GrYFLCKlkrGoP5vJUqU49iL+lu9fB/qLjf9o7g1EGc=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:99:46:65:5b:97:5f:39:cc:f4:85:f1:7b:46:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jul 29 01:00:58 2026 GMT
Not After : Jul 30 01:00:58 2026 GMT
Subject: CN=acd6421c1ec0afd7a7046a0910e4c147ccdba298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:b2:ed:be:b3:37:1b:0b:48:a4:58:6c:c2:
7e:60:60:89:cf:60:87:19:3c:02:c3:7f:ac:1d:cd:
82:10:59:78:7b:3a:67:d0:6e:23:3a:e4:4f:e3:57:
14:cd:56:d0:74:35:bf:64:24:44:e0:1b:57:c6:cd:
c0:d5:6e:f2:a1:d1:05:bb:ca:75:ed:56:fd:45:0e:
4e:76:f1:d9:a4:4b:05:c9:11:33:65:9f:31:14:06:
e2:45:be:ce:db:18:49:1c:6d:72:96:81:da:7e:ea:
c8:55:56:89:63:f8:12:1f:ca:a2:da:ff:f8:eb:9e:
a8:bf:8a:1d:b3:e7:6c:3f:fc:1a:36:88:a0:c7:ee:
ca:fe:6a:42:42:e5:20:f1:dc:8f:42:51:8f:3d:c5:
3a:b7:9c:68:ee:11:ba:fb:10:3c:58:f2:0c:98:2c:
4b:41:b8:69:c5:2b:03:8d:a4:94:cc:a4:f4:b6:4e:
d4:8f:37:f2:cb:75:c0:56:a4:a6:36:37:3d:2f:e7:
7b:e5:f2:10:93:26:67:05:45:ef:3f:9a:6d:e8:70:
4c:a2:41:6a:45:12:09:ea:31:60:98:ac:5d:c5:ed:
86:7f:0c:97:62:97:53:cc:00:28:1a:a6:e0:24:9b:
1d:82:84:50:f5:58:b2:fa:00:52:f6:99:6b:7b:da:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:42:1C:1E:C0:AF:D7:A7:04:6A:09:10:E4:C1:47:CC:DB:A2:98
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:65:58:d5:95:b1:e8:00:86:23:c8:d7:de:31:52:5e:08:74:
21:c3:76:ae:b1:48:3e:83:e6:41:23:fd:09:af:5d:1e:94:c0:
0e:17:12:4b:16:62:42:4f:e8:db:07:8b:29:4e:1b:bd:2f:f2:
ba:34:49:57:3b:4d:de:bf:aa:e7:51:b1:7a:5b:57:36:5d:95:
7e:64:e8:22:8c:33:ad:db:3e:65:a3:d0:83:8e:35:c1:18:63:
4b:4e:ec:72:d6:35:bb:c6:2f:04:b5:5d:76:3d:c9:5a:75:3c:
05:66:a4:eb:01:fe:c3:06:ba:90:90:c9:7f:66:a6:2d:f8:4f:
0b:1d:19:59:fe:07:ba:57:e7:b6:bb:29:97:b6:0e:08:f0:c0:
90:7f:1d:9c:ec:a4:a8:ba:fa:5d:20:c2:7e:16:72:a9:68:da:
fc:ab:25:75:4d:5b:e1:6b:bd:d6:fd:2d:10:3d:af:a8:58:b0:
6f:7e:87:22:21:03:89:15:4b:f2:05:78:1a:0c:47:71:c1:83:
8b:e8:4b:e8:85:08:b3:73:66:72:bc:86:40:5a:d8:9d:d3:99:
f7:75:b8:73:12:39:4b:b0:0d:ec:b3:db:9f:bb:6f:85:f3:2b:
74:fe:7e:9a:df:f4:d7:1d:cf:49:af:c1:cb:a9:65:cd:eb:29:
8f:f2:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:11 2026 by rpki-client