Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: oZ78Neagm6x6IU9L/c5nlm0lvOJorgiQXWcRlr+c7OE=
Subject key identifier: 78:EB:6E:B5:2F:8C:6A:8E:70:0E:1B:86:AF:53:99:DA:53:37:A0:1C
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019FAE9BA40F289BAF21B92E0B8ECFBA2265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 16:01:03 +0000
Manifest this update: Wed 29 Jul 2026 16:01:03 +0000
Manifest next update: Thu 30 Jul 2026 16:01:03 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: nFF6A2qDmThUNIVTsUd4/sQ8QHO4LjHhYw360IE4eeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:9b:a4:0f:28:9b:af:21:b9:2e:0b:8e:cf:ba:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Jul 29 16:01:03 2026 GMT
Not After : Jul 30 16:01:03 2026 GMT
Subject: CN=78eb6eb52f8c6a8e700e1b86af5399da5337a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:de:ec:15:da:7b:5d:43:da:e8:1c:89:40:
d1:ca:0c:ef:9f:64:ff:db:b2:b6:fd:d4:c1:77:cc:
e6:c3:2a:15:0f:84:1c:ae:91:28:0d:fc:5e:3a:80:
34:c3:83:27:fa:4b:02:78:6c:63:d2:9e:d4:23:f4:
5d:45:1e:16:fe:1f:13:b1:a1:67:33:33:c0:e7:e6:
38:9d:24:55:d6:69:1e:2d:75:3b:10:b5:32:fc:fd:
5b:99:ec:2d:3f:c8:f2:12:56:c9:7e:0b:0a:28:51:
6d:ec:7b:67:fd:1c:39:e2:d6:d7:28:ea:b6:1e:fc:
8b:e5:f9:e2:62:7b:23:91:45:70:21:c3:cd:9d:5f:
89:13:3e:14:44:f8:73:ef:aa:4b:45:4f:2d:19:7c:
47:28:41:d0:20:cf:82:87:f4:df:d6:d0:83:2e:27:
5f:2f:b5:65:42:1c:7f:1d:a6:9d:c5:47:1b:50:fc:
26:bb:c7:b5:e7:46:11:a2:91:b8:21:a4:ab:c8:4e:
25:34:a6:25:70:8c:b2:16:c3:7d:8c:30:66:b8:c5:
98:c0:30:10:db:27:1a:4b:24:61:f5:42:bc:cf:3b:
28:86:f1:3b:ee:a5:b3:bf:30:66:2d:6a:e9:c4:92:
22:ba:7d:c4:86:e7:9b:c8:ff:ca:f4:c9:1f:5b:21:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:6E:B5:2F:8C:6A:8E:70:0E:1B:86:AF:53:99:DA:53:37:A0:1C
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:17:f4:59:a0:f0:13:a6:33:05:83:72:3d:29:f6:4e:e5:cf:
18:b7:84:d3:46:7f:bc:71:f8:82:f1:e3:6d:36:71:35:fc:fb:
59:17:3e:75:47:43:52:26:3f:0b:ec:6d:42:72:00:80:9f:cf:
29:b1:04:9c:91:19:a3:f7:55:17:be:4f:4a:6d:e9:26:98:9c:
02:63:6a:32:f0:8b:cf:08:c4:8f:72:3f:7d:87:13:a6:ca:2f:
0e:db:52:e4:b4:de:1d:d8:65:9d:83:6a:5c:50:76:cc:02:e9:
aa:fa:c0:df:fb:2e:4e:51:9f:e7:07:cb:60:bb:3f:2f:47:02:
fd:30:87:1c:50:50:23:ec:2c:56:c3:3e:83:41:8c:c7:fb:36:
bd:80:77:be:7d:ff:1c:8d:af:6a:f0:a0:5b:b5:2c:ca:0a:76:
03:ba:04:1c:d8:ea:e0:d8:b9:56:72:f0:25:0f:3a:9d:a8:6a:
da:20:45:94:0f:15:c1:ba:28:79:2a:cb:ac:ee:d3:54:a1:dc:
70:39:a2:a0:44:d9:31:9b:03:b2:c2:0e:71:f7:b0:eb:47:84:
6f:f1:1d:a4:67:32:a2:16:e4:13:fa:57:dd:2b:45:d5:ce:9a:
11:a7:45:64:27:bb:94:47:ee:af:ef:54:7f:09:fa:b5:cc:e8:
e1:c2:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:34:43 2026 by rpki-client