
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier: 65bmD1N8LH2OZ6bp+QpgzqcjmFsQGtTkl2o5WTFYrh0=
Subject key identifier: 45:0A:D7:32:B9:AE:67:C9:F9:4F:41:13:18:BC:20:0D:D4:46:B6:76
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 019FAAF5DFCE610AE1F15B87DD7759A68CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number: 1697
Signing time: Tue 28 Jul 2026 23:01:08 +0000
Manifest this update: Tue 28 Jul 2026 23:01:08 +0000
Manifest next update: Wed 29 Jul 2026 23:01:08 +0000
Files and hashes: 1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: tTy0K27wHgzQ5/ctwYxzQ6wSag+GmCCuDIoIwiAX6Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:df:ce:61:0a:e1:f1:5b:87:dd:77:59:a6:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Jul 28 23:01:08 2026 GMT
Not After : Jul 29 23:01:08 2026 GMT
Subject: CN=450ad732b9ae67c9f94f411318bc200dd446b676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:07:ab:8a:e1:0b:25:17:2d:73:c7:a7:26:
29:4a:ae:30:23:fc:d5:2c:ab:ee:70:51:cb:b8:5a:
3d:cd:13:57:96:38:fa:92:40:e6:da:db:1f:65:a3:
0d:27:82:d2:0f:32:5e:43:91:42:a8:86:06:e6:f1:
f5:7c:d0:a8:c0:60:2d:df:a5:fc:15:0b:0e:9a:7e:
bf:27:19:c5:58:bc:c2:07:1f:f6:68:c6:af:db:da:
ea:4f:e9:51:61:71:a3:cb:74:b9:ae:4e:8f:69:95:
9a:8e:28:b3:ed:a4:21:11:c1:70:f9:70:be:f1:de:
56:2f:f3:fe:1a:d8:c5:72:e0:56:51:65:4c:75:90:
7d:d8:98:4b:a2:51:54:24:6f:41:57:35:de:89:b7:
b3:3b:ec:ed:c8:16:90:a2:68:af:ee:62:81:0a:33:
bd:4c:4e:3f:ab:69:74:93:ea:64:d1:47:c0:dc:ed:
c3:6d:cc:e2:8e:f7:99:34:fe:2e:a3:15:af:dd:12:
96:01:d6:da:21:a5:45:fd:52:ce:4e:46:f9:55:97:
07:d5:e1:37:cf:51:8c:46:c2:20:ce:1c:89:fe:87:
05:1b:76:d6:b5:f8:be:55:ee:79:7f:21:cd:f9:ed:
8d:8c:a3:97:f5:32:e9:ec:13:a3:76:4a:5c:b7:82:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:D7:32:B9:AE:67:C9:F9:4F:41:13:18:BC:20:0D:D4:46:B6:76
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:82:2f:24:0c:c9:0c:b1:33:89:f5:d2:58:78:1e:c2:e3:
3f:4b:08:7b:71:22:51:15:f3:db:21:3e:31:db:ef:02:73:fd:
0c:8b:4b:4a:63:92:bf:97:8a:d5:ee:0c:2b:23:6e:be:06:02:
c7:3e:fa:22:d9:3d:23:0d:25:4b:16:54:e3:28:09:25:72:b7:
f8:4b:c3:47:d3:a9:37:2b:d8:65:2a:fe:d1:3f:25:f0:7a:e0:
39:b3:d1:bc:61:5f:26:94:ad:a1:81:68:7d:0e:85:ab:2e:24:
7a:3a:c0:3f:ff:7e:8c:1f:8b:18:09:1f:a5:e3:65:85:6f:f9:
86:d4:3a:27:df:33:38:91:15:27:f4:6f:a9:88:d3:e4:c7:16:
0b:ce:0c:eb:1c:d8:3b:83:c9:67:c1:51:6e:aa:4c:6e:5b:a7:
ac:f9:b9:fb:3f:29:d4:ad:de:dc:55:5f:67:0d:31:93:df:9d:
0c:0a:4d:2f:36:62:c2:68:e4:ce:38:ed:bd:79:d3:92:ab:57:
82:24:eb:a4:01:25:34:bb:34:68:fc:08:eb:fb:86:db:16:05:
71:d7:48:8f:b7:8d:cc:c3:38:dc:ef:1f:5a:e1:13:fa:fa:10:
04:66:12:2d:6d:6b:e4:1f:62:08:c0:2c:4e:86:cd:03:11:bb:
a2:23:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:24 2026 by rpki-client