Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: bWrQYIA+WnpTe+40VWXkPw9+l7WgpDa0ZaU2cx+4eNk=
Subject key identifier: 6F:01:87:29:9D:19:63:D2:D5:8F:A5:F2:F0:9D:E5:D5:54:73:0A:82
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019FAA883D72F3C343F3C1B2915E2D9AF885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 03C2
Signing time: Tue 28 Jul 2026 21:01:23 +0000
Manifest this update: Tue 28 Jul 2026 21:01:23 +0000
Manifest next update: Wed 29 Jul 2026 21:01:23 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: 8T2lCEHtRl15qBLZMUhj+b6xPjt9B7j61kz8Btuk6+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:3d:72:f3:c3:43:f3:c1:b2:91:5e:2d:9a:f8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Jul 28 21:01:23 2026 GMT
Not After : Jul 29 21:01:23 2026 GMT
Subject: CN=6f0187299d1963d2d58fa5f2f09de5d554730a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:35:94:0f:29:74:0d:9c:4e:c4:7f:42:89:
5e:58:5c:5a:b8:d7:a8:02:d1:fd:26:5b:f5:a9:56:
1b:5a:87:98:f0:c7:fa:6b:4e:00:66:cb:07:10:fc:
fd:ab:57:6d:c8:aa:40:63:82:c3:3a:64:f2:2f:73:
13:5d:21:28:f4:6d:6a:b1:1d:19:c3:cc:61:ce:47:
7d:0a:02:cb:d8:e2:f2:27:6b:9d:85:6b:95:96:05:
24:ed:97:da:05:fe:d1:dc:68:49:c8:6b:77:08:60:
d4:89:23:fe:ef:c9:a7:c1:92:8c:46:6e:ee:12:9b:
84:f4:73:ac:eb:74:e8:92:19:51:13:37:93:01:28:
16:fa:a1:0f:f1:3a:de:75:7c:b1:02:3d:fd:01:a1:
22:67:0f:9b:ff:97:61:03:e7:4c:f1:1e:dc:65:e6:
5f:2b:fd:cd:dd:4d:00:c2:0a:d5:98:94:56:77:08:
e4:54:eb:2a:82:74:f7:a0:a5:9a:75:d3:0a:10:97:
f4:e3:09:09:95:35:0a:0f:94:52:52:b0:7f:06:11:
de:01:4d:42:01:d4:2a:3b:16:76:95:4d:01:74:4d:
ed:66:17:19:9c:6e:0e:a5:3e:dc:f2:d4:ab:ee:05:
1c:0f:b9:e8:ab:3c:b2:e8:fc:76:c2:5c:06:02:78:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:87:29:9D:19:63:D2:D5:8F:A5:F2:F0:9D:E5:D5:54:73:0A:82
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:9e:71:73:97:f7:98:b8:05:b4:7c:15:7b:6b:c1:9d:6f:
f1:28:81:91:3f:83:7a:08:c9:ce:60:5f:2a:16:55:83:64:01:
00:01:2c:59:a2:69:f3:78:be:08:9c:33:40:bb:b7:08:2b:fc:
27:20:62:71:ff:aa:5d:46:c7:95:b3:3e:5b:12:db:0b:6b:c5:
72:2e:7e:0f:a0:da:6b:07:b6:60:63:73:4e:cd:fb:36:2f:f3:
10:c0:a3:e9:76:2c:f6:45:3a:c1:e6:83:1c:59:72:66:78:6a:
c0:7d:b3:2c:db:52:b9:a6:f2:2c:70:4a:8a:c5:c1:20:7d:8e:
62:69:03:2e:15:74:93:0b:72:0d:e3:af:bc:3b:83:07:1e:11:
06:49:81:e7:40:24:92:ac:05:12:7a:5c:3d:24:40:13:1b:71:
b3:5a:92:5a:fa:49:ff:b5:25:37:3d:e5:04:ac:f1:99:7f:0b:
ae:ab:8b:7d:f6:fb:d3:96:dd:a7:35:45:b2:25:59:59:0a:90:
b6:37:23:b4:21:7b:99:35:c3:67:ce:9c:9c:80:f7:b7:f5:85:
d2:92:65:36:94:8a:a9:85:df:73:b3:46:26:2d:c7:b2:04:da:
cc:13:05:eb:f5:58:05:3e:21:55:ee:db:71:14:2e:ce:67:6b:
f7:1b:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:42 2026 by rpki-client