Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: Hk46qQIAhJSdwWIlL3tGsTsACvprYQvkJf1kangzddM=
Subject key identifier: 03:B2:23:08:13:B0:56:4E:E4:6C:AC:AA:D1:82:64:85:7C:E5:48:3E
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019FA9AC03B74ECFEB607D60F796D68C2B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 1299
Signing time: Tue 28 Jul 2026 17:00:50 +0000
Manifest this update: Tue 28 Jul 2026 17:00:50 +0000
Manifest next update: Wed 29 Jul 2026 17:00:50 +0000
Files and hashes: 1: E1QbVJAayOHXybvvykh2_z_eoYk.roa (hash: Ne00sRp1K+wq4QIkqT2qcjKHyHlHGzP3FNyY8RockCE=)
2: JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa (hash: 9Mf/IBP/vEnvOsH8GvnEXV1QapAzMWJM6lph3xsak/E=)
3: Ov83ySv3sFV7M88SSWflw9--a-0.roa (hash: SVhdkcQVattKFVMXSZeL1xJo615LAy5BBiDbcYL9ck8=)
4: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
5: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
6: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: OnIseWbHUOLUc/iAwMph1zzmZ6P0b+2iMn92uLuqpu4=)
7: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:03:b7:4e:cf:eb:60:7d:60:f7:96:d6:8c:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jul 28 17:00:50 2026 GMT
Not After : Jul 29 17:00:50 2026 GMT
Subject: CN=03b2230813b0564ee46cacaad18264857ce5483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:c3:53:6d:53:0d:55:3c:6e:79:89:31:b7:
d8:77:20:0f:9d:29:09:b6:e9:c2:09:e7:32:17:c1:
61:ab:dc:8a:ca:9d:b0:b5:83:65:90:7e:02:3d:3f:
9e:03:54:e4:e9:66:4b:41:b4:35:61:f0:63:ba:d2:
37:97:f6:8f:f6:a0:4c:29:5b:e1:5a:c6:8e:e2:34:
63:95:a4:9f:6e:e7:61:5d:06:20:cd:22:f2:b6:ff:
69:84:43:35:03:bc:c0:99:74:ab:29:70:11:7c:16:
bf:b5:fe:87:53:5d:2a:1c:76:a1:73:66:5a:0a:e4:
68:7a:e4:c6:3b:4f:1a:17:85:01:73:7e:e3:2a:73:
4b:f6:48:c6:57:dc:b4:90:44:67:cf:1e:61:1f:ce:
dd:66:36:11:24:ad:e8:76:6d:79:e8:6c:cc:cf:78:
65:51:b5:d0:67:ef:53:14:e8:20:e4:47:7b:33:f0:
23:be:93:b6:1f:b0:30:f1:7e:61:61:b0:45:1d:7f:
e5:3f:cf:0b:67:54:a7:88:96:05:d5:1f:e4:55:49:
62:c1:3f:1b:75:35:5f:da:aa:6f:8c:70:28:18:ad:
dc:d5:73:4a:b1:2b:8a:c1:f8:96:a0:c1:8f:da:af:
75:1f:ca:d6:80:8f:0e:db:fd:e9:8e:1a:23:8d:bb:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:23:08:13:B0:56:4E:E4:6C:AC:AA:D1:82:64:85:7C:E5:48:3E
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:24:b6:37:a4:26:d3:c8:3e:51:2f:90:98:ea:ca:2d:0c:30:
57:02:4d:b3:54:a3:82:d5:18:a3:18:f2:28:7d:88:0d:1f:e1:
08:bf:3d:28:e5:8f:99:1a:31:7b:bc:1a:5f:72:87:43:50:b4:
5d:8a:06:6c:e3:b9:4c:e0:1e:5b:28:75:1f:e9:9a:21:2d:4b:
4e:2c:e9:4e:b5:d6:1a:ee:4b:fe:68:95:fe:bc:eb:48:a0:45:
f7:94:be:48:29:46:73:07:08:fc:1f:d3:9d:fd:74:7b:ef:d3:
58:9e:24:64:91:d3:7e:98:ce:15:6f:de:c4:66:98:7f:7b:2e:
ee:05:e0:7c:ff:9c:5e:33:62:9b:da:e7:d1:85:60:d5:db:eb:
28:0c:58:e4:25:9d:58:90:0e:31:97:0a:3f:57:36:fa:6d:c5:
2a:ee:f4:2e:13:d4:d8:99:21:93:38:03:c9:7d:4d:43:72:13:
b7:86:21:e0:b7:77:5e:d8:7f:c7:12:db:33:27:f4:60:ef:69:
04:87:ac:85:9c:d8:80:83:25:bb:ab:75:9a:2b:7c:49:da:23:
6a:55:e0:77:50:be:03:90:98:c0:36:ab:7a:6f:ac:cd:ff:20:
9d:55:77:d7:57:aa:96:aa:2b:ed:21:36:0b:34:d7:8d:74:3d:
20:85:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:09:53 2026 by rpki-client