Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
File: 5BOmx2sTFEjjCg3GojAAdHAUAzo.mft (raw, json)
Hash identifier: /HT9ikREYjcw2CySC6S42tWkHZqH/Kcq4WfrDfF1ce0=
Subject key identifier: E8:D7:57:3A:44:AA:36:C1:8D:65:99:12:AD:04:E8:E0:27:F6:E6:B5
Authority key identifier: E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
Certificate issuer: /CN=e413a6c76b131448e30a0dc6a23000747014033a
Certificate serial: 019F8ED97B0A20948C21EC3C1DAF97FC7983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 12:00:45 +0000
Manifest this update: Thu 23 Jul 2026 12:00:45 +0000
Manifest next update: Fri 24 Jul 2026 12:00:45 +0000
Files and hashes: 1: 5BOmx2sTFEjjCg3GojAAdHAUAzo.crl (hash: QGotMFadvNqzPeneqBZOTdATH2+Ea03n2Kkw7l7c6jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:7b:0a:20:94:8c:21:ec:3c:1d:af:97:fc:79:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e413a6c76b131448e30a0dc6a23000747014033a
Validity
Not Before: Jul 23 12:00:45 2026 GMT
Not After : Jul 24 12:00:45 2026 GMT
Subject: CN=e8d7573a44aa36c18d659912ad04e8e027f6e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:68:16:af:41:45:7b:6e:08:20:9f:95:97:
fb:8f:c0:11:52:3c:17:54:6c:25:f3:93:40:f5:2c:
e7:c1:f8:21:28:25:94:5c:ad:9d:f7:f7:6a:fa:db:
c4:34:09:a9:ce:f0:91:63:d9:21:2b:e8:9f:e2:28:
18:87:32:59:6c:5d:22:f2:6f:6a:ce:d0:e3:5b:5d:
72:88:b8:96:ea:cf:4c:a4:5a:1a:c3:7b:08:6b:26:
ad:dc:fa:cc:76:7b:ff:bf:ec:cd:ab:ae:bd:cc:5e:
ce:fb:39:9e:9e:65:38:94:89:db:ff:b1:60:7e:d0:
dd:7a:dd:42:13:33:b0:78:0f:29:b5:bf:eb:89:32:
00:14:c9:4c:f6:27:8d:19:4b:f1:63:52:bc:40:4c:
43:01:fa:cf:95:5b:4c:3d:a8:ad:f4:21:65:d4:57:
b9:34:76:bb:d3:81:af:e3:5b:75:23:ef:b5:c4:fe:
4c:d6:6d:5a:08:6a:09:07:77:57:54:eb:de:9a:8a:
4d:bf:d5:64:06:3c:34:b7:ce:d5:ba:6b:c6:92:ae:
ab:64:4a:c4:77:f7:a6:04:14:b4:ff:a1:fe:3c:f9:
18:1d:c7:47:3b:ed:0c:cd:28:02:3a:e0:01:21:39:
e6:5b:d8:76:e5:53:f7:de:8d:03:2b:9f:e8:5f:b2:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:57:3A:44:AA:36:C1:8D:65:99:12:AD:04:E8:E0:27:F6:E6:B5
X509v3 Authority Key Identifier:
keyid:E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:aa:75:9a:54:c8:98:ad:a2:37:81:2c:81:18:a4:d5:49:6f:
50:6f:98:c9:17:32:b2:34:20:ca:7b:bd:6f:cc:86:13:b8:cb:
35:f5:a3:a2:82:b1:43:7c:6e:e2:73:95:97:78:9e:ef:1a:eb:
95:e4:7a:17:da:00:0d:40:6f:69:b4:67:dd:50:8d:47:9f:ec:
c3:44:4b:69:bb:32:0d:32:3d:d4:a9:d2:f7:7f:ea:53:68:8e:
57:02:ee:24:68:b7:cd:5e:2e:4c:0f:5d:40:2b:7a:c2:38:5f:
68:bb:97:c9:5b:66:ee:68:75:9c:e0:83:d7:4c:59:2e:3f:ad:
eb:64:9e:8a:65:56:17:ae:c7:5e:61:b4:5a:9e:57:3c:3e:ca:
a9:57:1f:01:55:11:8c:0f:df:b8:c7:71:2f:7d:35:3c:0a:7d:
b6:6d:de:df:84:b6:99:a2:a8:10:6c:04:37:c9:88:80:4d:16:
50:a0:37:8d:2c:69:fb:a4:76:73:67:de:b8:72:87:fc:d6:5d:
ae:8f:8b:6b:07:87:58:c0:59:ec:05:d3:a6:64:12:fb:2e:26:
ab:3b:db:09:42:1a:00:f0:e8:17:53:63:78:ef:0d:e9:bc:fb:
0c:97:b4:26:d2:ce:7c:da:1e:6e:2d:fa:56:06:35:c6:8c:70:
f0:e1:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:22 2026 by rpki-client