Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: By85+3aK7FWp+BaQYOO+acl/LBPo7cnijM7Fc3As5b4=
Subject key identifier: EC:86:FB:E1:64:55:FB:54:36:49:7C:4C:C2:18:71:87:95:40:DC:02
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019FA93DEF81894A94104DFDDD1859250184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 16CD
Signing time: Tue 28 Jul 2026 15:00:36 +0000
Manifest this update: Tue 28 Jul 2026 15:00:36 +0000
Manifest next update: Wed 29 Jul 2026 15:00:36 +0000
Files and hashes: 1: CC_uQGJB-X8dNzS4njkHHnRy0EE.roa (hash: kLWeBF22uNWLbsgPVVSSeJVxiHQO+5+Sj42QETQzuhc=)
2: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (hash: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: pvb3jfDgrPaxXSF6qwPxDcHD6/i7qatdMZZ/jAVDD5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ef:81:89:4a:94:10:4d:fd:dd:18:59:25:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jul 28 15:00:36 2026 GMT
Not After : Jul 29 15:00:36 2026 GMT
Subject: CN=ec86fbe16455fb5436497c4cc21871879540dc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:81:cf:9f:43:ea:f2:36:8f:bb:14:3f:eb:
3b:fe:29:39:47:f0:49:82:f3:2c:c3:05:2c:86:24:
83:67:d5:71:11:4e:2c:24:b9:e2:ff:a3:66:64:7b:
3b:ee:b7:9d:34:7b:7c:44:bd:d3:d5:1c:53:ac:bb:
bb:57:9e:65:cd:e6:0f:00:6d:d8:cb:14:59:4f:e4:
eb:cf:d1:1a:48:67:15:15:a3:28:1a:48:f6:af:6b:
47:8a:b9:5b:b5:07:aa:45:99:b8:84:6d:5f:d8:20:
64:c0:e1:66:e6:2f:e9:15:06:39:0a:97:d9:19:d7:
70:c9:fb:2c:33:b1:a8:fd:b0:a3:5a:ca:a2:da:f1:
24:bd:3f:b7:9d:9d:b8:b7:ef:42:70:9a:16:bd:89:
dd:48:66:d4:d8:5d:86:8e:6c:ca:ef:19:0e:86:7b:
95:e5:b1:67:38:fc:e1:ca:8a:92:1a:f8:16:76:4e:
4d:cc:28:3b:49:5c:00:34:22:09:72:a3:01:bd:4a:
4b:c5:de:de:8d:7e:96:d7:9e:7c:ff:f4:73:f8:95:
3b:0f:fb:79:09:94:92:62:98:6f:d9:b3:4a:6c:4d:
6a:ee:5a:71:84:3c:49:f3:99:7e:82:ad:c0:eb:a5:
49:a0:bd:ef:6f:a7:fe:5d:0d:df:6d:7d:c0:f6:ce:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:FB:E1:64:55:FB:54:36:49:7C:4C:C2:18:71:87:95:40:DC:02
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:64:87:40:01:c0:90:fe:9a:67:0c:17:c1:d7:67:6c:aa:
a1:2c:13:67:8b:ee:b0:d9:21:92:b5:79:f8:41:07:a3:f2:7c:
95:15:a8:ed:da:32:6c:94:a5:cd:c3:3e:76:ef:12:f6:12:a2:
2e:22:82:69:87:77:70:5f:af:08:30:54:96:9e:f5:9e:ec:aa:
b5:fb:c5:2b:9d:5e:e5:4c:03:74:00:35:19:88:64:8b:2f:59:
b3:0f:87:ef:a4:22:b7:2f:f2:dd:c3:77:10:39:5a:0b:d6:14:
b5:46:e1:6e:e8:82:38:05:c8:96:08:d7:f6:26:3f:59:fb:d8:
05:ef:86:3d:49:68:c7:9c:99:d5:32:59:5e:bd:04:4e:31:11:
1f:a7:5c:8a:18:ad:4a:81:51:78:c5:df:4a:9c:ef:27:e1:21:
2f:d1:ae:e5:60:e5:5c:21:2c:91:18:43:92:93:b0:a5:55:ca:
88:bf:11:06:de:f0:96:c7:6e:c3:2a:66:d0:6e:48:b2:5e:cb:
1b:2e:25:fc:27:96:22:b4:00:6c:2f:be:62:a8:24:33:37:c0:
02:1e:9d:16:3f:cb:3e:60:c4:db:1d:1f:ad:ad:ef:41:f2:fd:
82:8a:4f:ee:5f:b4:ca:62:ec:aa:20:ea:1c:3b:27:52:21:54:
5c:36:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:38 2026 by rpki-client