Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File: a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier: AoVMzc2DH5qnTc0N+GtpeyfLrXQjHL7keirTRQfWXcM=
Subject key identifier: 9C:2D:CC:42:E5:0E:66:2B:E7:E8:1D:80:8E:76:AA:2F:56:79:9B:A9
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 019FA9E2E286F37036BAB9312A1EBF8B8083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 18:00:46 +0000
Manifest this update: Tue 28 Jul 2026 18:00:46 +0000
Manifest next update: Wed 29 Jul 2026 18:00:46 +0000
Files and hashes: 1: MuWBM4y_8sU7g6FEyEJdZpch7MA.roa (hash: polciHBhuEIudcpVsohkilsNPMnWK3IMSBDrJXYyToE=)
2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: pkpxg+dqbLgaJlokg0QNX05ySrs+aXMnUa6+4TLUHjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e2:86:f3:70:36:ba:b9:31:2a:1e:bf:8b:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Jul 28 18:00:46 2026 GMT
Not After : Jul 29 18:00:46 2026 GMT
Subject: CN=9c2dcc42e50e662be7e81d808e76aa2f56799ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:bd:42:f7:02:21:8b:a0:5c:e1:e3:07:dc:
a7:7b:da:6a:e0:f1:48:5d:08:bd:6a:45:e6:3a:69:
30:1e:80:42:a6:5d:f6:70:4e:85:6e:0d:9a:df:b3:
64:b9:f8:32:8a:50:f8:7f:97:6f:a7:56:2f:b7:0a:
9f:51:f8:d0:f8:5d:eb:ac:28:6f:75:6d:d4:cc:60:
6a:d3:ce:68:88:e4:34:05:96:ae:7e:a6:bd:64:ef:
b1:47:23:28:bc:5b:cd:8c:09:7f:01:3d:9d:ba:06:
bb:50:a1:78:32:cc:38:b5:4c:bf:6e:f5:8d:1c:8f:
18:8f:7f:fe:71:28:35:c1:73:7e:b0:20:c0:e7:16:
ef:92:de:88:43:a1:4c:6c:1d:cf:eb:aa:11:58:8f:
c8:55:01:b5:fa:d1:c6:0c:50:9a:7c:ca:91:93:1b:
b8:05:e3:75:92:72:6b:21:f4:d8:f2:1a:73:5e:9c:
1f:a7:b4:c5:70:71:bf:db:d8:9a:9e:67:d2:92:3c:
fe:7e:c9:2f:d8:4c:b7:da:c1:98:9e:6e:28:7b:fa:
5f:59:3c:30:e1:dc:dc:08:00:72:18:2a:a7:57:96:
4f:d1:c1:16:2a:47:79:15:ff:3e:f0:18:e0:91:3d:
28:89:0b:94:31:c2:cc:39:9e:be:3c:e9:c2:41:c0:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:CC:42:E5:0E:66:2B:E7:E8:1D:80:8E:76:AA:2F:56:79:9B:A9
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:ae:42:9d:3f:c7:f4:65:77:3f:92:f4:89:9c:3d:0e:8f:
ea:b7:43:f0:65:47:31:d5:8a:de:6b:8c:29:ff:7a:17:06:3e:
1a:14:af:fc:fd:ee:9b:8a:98:fb:4d:77:40:5f:d5:39:d5:78:
e8:cf:cc:6d:ad:89:5b:36:df:26:a9:b3:13:d7:d4:6b:0e:5c:
f9:28:23:d9:55:5a:04:69:f4:6f:2d:97:02:a1:0a:66:36:e3:
3b:4a:c1:43:ee:98:a2:bc:b2:7a:2e:ed:f1:6a:66:25:b2:f1:
2d:00:b9:df:ab:fe:6b:83:94:4b:a2:38:41:8d:b6:69:5d:db:
e2:98:bd:63:43:3a:e8:10:2c:bd:d0:e6:4f:2f:d3:dc:c8:ab:
b7:13:6b:e4:0d:f1:01:87:de:dc:0a:9b:35:c2:16:7f:32:88:
f9:48:df:eb:82:5d:05:5c:65:6b:7f:db:35:d5:94:6f:84:b9:
67:20:2d:d6:57:f9:bf:93:ec:fc:72:5b:2d:61:00:a2:f7:71:
3f:8e:07:91:6a:8f:9b:95:eb:6f:65:9a:08:71:b6:3b:b2:2b:
bd:81:6d:fe:9a:21:f7:27:3f:01:a8:2c:06:a7:f9:99:68:e6:
b4:f6:1b:b7:48:ab:f5:f3:6c:f7:e0:d5:4f:d9:1b:2f:6b:26:
3d:88:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:59:46 2026 by rpki-client