Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: tffp1L8GnkVoCQsR6mKW5XP73sk/FmHxjGIs2ZviQXg=
Subject key identifier: 83:43:33:39:15:4A:A1:94:C2:BF:BE:08:D9:F1:C2:5A:53:0C:F8:C9
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019FAB63465829BD540F9C9481717EFEC94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0656
Signing time: Wed 29 Jul 2026 01:00:37 +0000
Manifest this update: Wed 29 Jul 2026 01:00:37 +0000
Manifest next update: Thu 30 Jul 2026 01:00:37 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: 4WlWT0DRgjbwugW6T2jvFeeOrteIArV3BY4mpuwjvsg=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:46:58:29:bd:54:0f:9c:94:81:71:7e:fe:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Jul 29 01:00:37 2026 GMT
Not After : Jul 30 01:00:37 2026 GMT
Subject: CN=83433339154aa194c2bfbe08d9f1c25a530cf8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:e9:7c:41:f3:80:f4:85:1c:68:cf:64:59:
b1:94:8d:58:63:4d:f3:b8:f9:78:39:d9:f1:83:78:
fc:4a:99:d5:50:9e:53:7b:6b:e0:35:8f:ff:3e:43:
6a:b3:22:6e:46:d6:34:53:aa:67:e3:82:3b:2a:a9:
ab:90:b8:22:b2:4b:11:58:99:a5:7a:ce:4c:1f:b8:
32:68:54:c5:24:63:92:ed:f2:a4:7c:33:be:c4:12:
bb:0f:96:69:10:f5:22:ed:5d:13:92:6d:2f:da:21:
1d:6d:d2:51:83:2f:d0:5a:36:93:73:35:9e:0f:c3:
8d:e8:79:ae:f9:8f:a5:6c:ed:a5:cf:47:1b:5a:41:
b9:31:00:40:6e:7b:a8:41:9f:ca:b7:88:95:63:d7:
e9:57:f8:7d:f2:fc:8a:85:21:6d:53:7b:fc:a6:16:
1d:dd:a8:59:2c:9f:11:d5:62:fa:79:2b:88:fe:79:
66:10:d4:bf:8c:5e:ec:f9:e8:ad:3e:5f:fe:3c:b2:
dd:f7:e1:01:59:f2:35:36:d8:23:61:98:56:7a:db:
72:d0:94:b5:81:8e:a4:d5:97:9e:09:2b:67:5d:ee:
bd:10:2e:0b:85:19:e3:ae:72:f4:13:26:da:5d:65:
1c:5b:a5:9f:ed:b0:e0:cf:89:04:68:b8:bf:20:04:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:43:33:39:15:4A:A1:94:C2:BF:BE:08:D9:F1:C2:5A:53:0C:F8:C9
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:74:5d:ec:46:8c:99:6e:11:3a:60:40:b8:9d:87:0c:2d:
a2:ec:76:17:0e:5c:6e:97:a7:64:78:fe:fc:9a:40:e1:6e:e8:
92:29:d4:f6:83:58:b7:ff:e0:77:b5:c3:58:86:dc:a1:5e:69:
74:3e:fc:9f:43:a9:40:da:19:9c:38:35:61:d9:03:01:6c:8d:
01:5e:b6:78:2b:b7:fb:48:34:83:c0:0d:ae:a2:bc:4d:e4:52:
29:b5:53:7e:d3:b0:04:04:94:ac:08:59:60:67:df:21:8c:25:
d1:f6:87:62:ee:37:3e:03:75:8d:f6:31:45:98:7d:1d:94:70:
3e:a4:27:43:55:4d:3c:0d:95:4b:3d:86:a9:6a:ee:05:15:03:
ac:97:ce:90:d2:f7:92:f9:0a:71:71:55:bb:df:d1:60:73:79:
be:5e:6f:39:04:3b:4b:a1:8c:87:96:b7:7a:07:3b:0d:17:8a:
0f:02:61:b9:b2:5a:24:5f:51:fe:14:96:ed:18:c3:71:56:3a:
ba:dd:4c:7e:58:dc:f5:07:dd:8e:12:b5:ea:db:dc:e0:36:8c:
36:ac:f6:41:8a:75:0a:d5:c3:03:2f:81:eb:56:25:e6:18:81:
3f:b6:24:c5:72:05:96:ef:c9:44:3e:ee:40:28:6b:2d:36:0a:
2c:ed:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:05 2026 by rpki-client