Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: o+2KRTOhDeiYS19qM8smVk+2eq2qYUtGvT5D1KSd/e4=
Subject key identifier: 38:CA:75:26:3E:D7:3B:F5:01:DA:0C:E3:8D:90:24:4F:9B:8C:65:39
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019FAB9A4775C38ED4773245712FB9F8F859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 01F9
Signing time: Wed 29 Jul 2026 02:00:42 +0000
Manifest this update: Wed 29 Jul 2026 02:00:42 +0000
Manifest next update: Thu 30 Jul 2026 02:00:42 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: 3P4I8vXnXKemM3JLHd9QFdORkYNDsFSiTZy1EgKQclA=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:47:75:c3:8e:d4:77:32:45:71:2f:b9:f8:f8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Jul 29 02:00:42 2026 GMT
Not After : Jul 30 02:00:42 2026 GMT
Subject: CN=38ca75263ed73bf501da0ce38d90244f9b8c6539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:3f:a2:78:cd:ef:8d:2e:b3:fe:65:ed:3d:
3c:3e:09:a2:6d:cd:3d:23:aa:a0:d1:f6:f3:c4:57:
e1:d8:fc:9a:52:c0:6f:ac:53:42:73:c8:05:19:2d:
64:a6:6c:b8:1e:a4:f1:41:c7:46:67:1f:4d:5f:0c:
b2:e8:e1:3b:20:31:12:6e:0e:25:4d:24:a6:a7:fd:
57:50:af:2b:c6:bb:9a:7a:41:c3:37:d4:0a:28:a0:
50:ff:1b:6d:31:b7:69:33:a2:59:a5:50:1e:43:e2:
e8:ca:71:d6:2b:72:9f:20:56:fb:b0:0b:fd:d1:45:
24:ca:de:e5:6e:8e:7e:42:9e:04:b8:0e:53:6a:21:
3c:ff:0e:09:6f:a5:d4:dc:57:15:83:32:b6:ff:87:
27:31:a3:99:db:f6:99:57:02:4f:7d:4d:a1:61:00:
e7:78:75:60:4c:72:7e:22:61:f4:c4:f0:43:e2:8f:
9a:58:40:ae:99:da:83:ba:35:45:67:e6:6f:77:f9:
91:de:5e:4c:c7:e5:32:9d:d2:29:af:ce:95:e8:f4:
aa:90:7e:9a:bb:18:ff:4f:1d:85:03:ae:36:85:0a:
e6:ed:9f:4c:32:d7:ea:db:4c:1d:36:6a:8a:b4:a1:
8a:3a:2a:93:15:b5:1e:25:18:aa:92:ab:63:c2:c4:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:75:26:3E:D7:3B:F5:01:DA:0C:E3:8D:90:24:4F:9B:8C:65:39
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:f3:94:fd:b1:bd:0a:f0:a1:4c:be:37:ba:99:69:10:2b:
4a:65:20:86:1e:d9:23:9e:79:01:92:2e:50:31:f8:28:52:86:
3b:55:a9:1b:d9:12:5d:be:f4:44:4b:7f:16:38:d1:70:ef:df:
c6:2e:16:7e:43:90:14:11:6f:c5:26:77:de:5f:2a:ec:36:3a:
34:f6:f1:11:78:e5:45:c3:85:aa:c4:c6:e9:d0:3f:10:08:67:
bd:35:76:6d:c6:03:04:8c:aa:c1:94:cf:3d:c5:f6:c0:8b:28:
96:b4:0f:dd:27:ca:62:58:51:ae:19:43:1c:d1:b9:e6:fa:12:
aa:8c:38:14:7b:ca:05:38:53:4b:78:c5:51:01:99:85:d8:22:
6b:75:b2:07:1d:ef:e1:53:0f:c1:1c:06:d0:68:d6:a2:86:59:
5c:1e:5f:bd:46:84:8f:9e:41:de:a3:b5:fd:a1:5a:73:97:87:
0b:4a:22:1c:53:f2:94:e4:2f:fa:43:ff:a7:fc:a1:45:f4:b3:
f2:70:25:4d:f0:c8:c2:b0:60:3d:ef:29:a5:f8:33:64:ac:7c:
07:78:81:29:2a:34:e6:3b:40:60:85:54:6f:d8:ca:79:9b:a7:
47:45:bb:f6:c5:ff:d5:db:30:a1:31:05:83:9d:1a:64:9f:5b:
77:27:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:34 2026 by rpki-client