Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: FcyOXgdFe+PVWG1kDnfdwuWfgKCRDAJegKuKBL/UuYA=
Subject key identifier: 53:89:28:F6:2E:73:96:42:C3:F2:9F:C4:24:8E:3A:DA:74:A6:EF:FB
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 019F935BE3AEB77F3EFEA8049C19427C2869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:40 +0000
Manifest this update: Fri 24 Jul 2026 09:01:40 +0000
Manifest next update: Sat 25 Jul 2026 09:01:40 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: whwntBSyjYnOBwymLNCJLo9UA6dwD3MuEUi5MROVQ5E=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:e3:ae:b7:7f:3e:fe:a8:04:9c:19:42:7c:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Jul 24 09:01:40 2026 GMT
Not After : Jul 25 09:01:40 2026 GMT
Subject: CN=538928f62e739642c3f29fc4248e3ada74a6effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:13:02:12:83:86:af:73:67:f9:b7:3e:e7:
2d:d9:17:93:91:f2:03:56:83:34:da:f9:69:b0:ba:
03:6c:51:fa:ca:73:2a:2d:a4:94:8f:84:d7:dc:88:
f7:ad:c2:fb:5e:dc:be:a0:ef:12:a0:6f:42:7f:a0:
e1:fa:d5:f5:2d:95:c7:ba:05:92:e7:e8:e4:11:ac:
f8:46:b2:07:7b:05:bc:25:ef:dd:21:0e:e7:21:e6:
50:55:07:74:88:f7:98:da:d4:64:d8:2e:fa:b0:0a:
26:51:2e:c8:b7:42:8e:cb:9a:3c:9c:41:28:bf:ed:
19:9b:19:48:51:f2:63:77:31:ff:e6:17:cc:8b:79:
70:5d:2a:0a:ab:c4:3c:36:7a:92:f5:9e:0c:db:8b:
8b:11:b3:32:c4:53:9a:de:77:8b:47:e4:9b:6e:9b:
37:cf:37:3e:7a:16:71:59:87:33:54:3f:dd:8d:c9:
c0:fb:14:ff:58:56:01:95:57:97:f4:db:0e:2a:c8:
31:76:95:db:46:13:aa:e6:cc:80:22:38:4a:59:dc:
b6:74:2b:5c:d0:00:11:29:4f:64:75:a4:e7:48:97:
45:84:a6:c0:d0:64:f5:12:74:ec:69:44:1d:27:30:
91:9c:ce:fe:66:47:54:c7:6b:ea:db:4e:b8:cd:4c:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:28:F6:2E:73:96:42:C3:F2:9F:C4:24:8E:3A:DA:74:A6:EF:FB
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:28:a8:c1:27:40:5a:47:14:4e:1b:4f:bf:39:ee:b5:dc:
3c:e0:75:d0:63:39:9e:f4:7f:ad:af:1d:61:b2:0b:65:d5:7f:
ef:9e:63:5c:97:c0:33:ee:27:65:72:47:f1:eb:2e:2f:00:13:
82:fd:e2:de:c2:93:b4:21:92:fd:c5:d2:d5:ca:10:7b:9a:1c:
8c:1d:1f:ea:8d:3a:1f:85:8f:ae:b1:08:96:8a:9b:b2:b3:81:
d6:c4:01:f8:63:bf:9c:73:a2:99:e9:d9:49:90:fb:96:a4:3e:
f8:73:15:bd:5c:60:ae:39:bb:e9:da:e2:78:22:91:f0:36:fc:
b2:14:28:3f:2a:2a:38:cc:f9:09:35:ba:70:62:28:1d:c6:ae:
d5:2e:b1:4b:95:a3:5d:a5:d8:45:c2:18:0b:f7:10:d6:5c:a7:
cc:4e:23:73:9f:fa:fa:9d:d0:53:03:19:35:38:21:4e:0c:c1:
18:66:68:08:0f:8c:f5:1c:ef:4e:17:8b:9e:69:9d:8d:42:1d:
98:fe:ce:6d:8a:b1:36:71:c2:97:5f:e1:33:aa:12:68:68:49:
59:4c:84:9d:2d:21:45:36:46:aa:af:f8:8e:73:0d:fd:6a:e4:
a0:73:85:17:6a:fc:97:d0:9d:8c:66:c9:f5:c4:d8:eb:93:20:
ef:5c:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:36 2026 by rpki-client