Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: xOt6zdroCBg6OgzDgnciOj+LZSQlipgvMqYXdZ9qGR0=
Subject key identifier: 98:FA:44:37:AC:48:0A:9D:A5:C2:76:B2:E2:BD:2C:4F:4C:0A:18:AE
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 019F943729251A3DF510EF6DECEA6F57F542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 1486
Signing time: Fri 24 Jul 2026 13:01:10 +0000
Manifest this update: Fri 24 Jul 2026 13:01:10 +0000
Manifest next update: Sat 25 Jul 2026 13:01:10 +0000
Files and hashes: 1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: H13SLx87U/sDuZmFV5IVaEKqCxya/yk8yGUxSPKNh44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:29:25:1a:3d:f5:10:ef:6d:ec:ea:6f:57:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Jul 24 13:01:10 2026 GMT
Not After : Jul 25 13:01:10 2026 GMT
Subject: CN=98fa4437ac480a9da5c276b2e2bd2c4f4c0a18ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:85:08:65:bb:17:87:a4:c6:1e:87:05:92:
36:dc:1e:a5:7c:dc:74:b0:ee:a6:23:ba:18:be:b8:
d2:02:8a:68:1a:43:b6:79:b4:16:52:39:de:87:57:
43:03:d7:8d:cf:a3:12:1b:fe:c8:ef:d1:9e:eb:ab:
09:f8:7e:f4:f6:2c:4f:f5:c6:3a:7e:80:68:aa:8e:
a0:13:a1:f4:94:48:65:81:c9:8a:71:d3:c8:8b:9f:
f3:cf:ac:f7:d2:67:ff:29:c1:59:fb:98:2f:ed:06:
2f:c3:0a:42:05:e5:2a:ac:ec:cf:f5:ad:36:eb:18:
81:a8:12:f9:4f:c9:5d:9b:ac:b0:fb:8b:6a:68:95:
4a:87:05:29:82:b4:a1:b1:69:98:d2:4a:b9:f7:34:
50:ea:f4:e5:70:16:45:b4:e5:ba:a5:9e:15:33:b6:
92:0d:40:da:77:2c:2d:a9:89:50:41:38:80:68:f5:
9b:74:d9:7a:cc:26:e0:96:6d:46:6a:ec:64:4a:2e:
e8:9a:02:60:ca:ab:0f:2e:76:bb:93:80:2e:4f:23:
ff:37:f1:2a:c9:da:51:07:74:bb:72:0e:22:0f:b4:
ba:e1:6c:95:dc:c1:a5:87:d7:d8:1a:9e:79:eb:24:
33:61:3d:6e:fd:d2:f0:b5:61:7f:e4:bd:96:2b:49:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:44:37:AC:48:0A:9D:A5:C2:76:B2:E2:BD:2C:4F:4C:0A:18:AE
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:84:e3:47:b6:05:b5:3f:69:37:2f:8f:b2:6a:99:d7:ba:7d:
a5:58:b5:3c:d6:d8:c1:49:92:47:a6:0c:02:a0:5e:28:2c:c3:
51:d0:18:fe:17:e4:c0:d8:48:ce:88:84:78:af:5f:ec:d2:40:
4d:e7:25:ef:ff:b1:fd:c7:8e:42:b3:f7:8d:0e:fc:91:ba:bd:
cf:73:15:3a:90:f2:46:18:50:10:0c:5f:bc:26:8a:ea:3a:34:
f4:be:73:31:59:b1:2f:0e:87:16:8c:3e:4d:25:f4:db:93:ff:
8f:60:0d:19:ca:0a:9b:7d:ac:c9:60:b3:04:92:37:04:9f:95:
ab:c7:87:93:32:2e:a9:3f:a7:22:4b:3a:31:a0:e8:30:b7:ba:
22:4e:b5:e0:c2:52:3b:d2:9b:63:da:94:ea:ee:bb:36:9f:a1:
69:29:d0:4c:35:b9:93:b7:5c:3f:ef:b9:aa:ee:cf:13:60:a3:
9c:2a:b3:97:26:31:b4:f5:fe:65:5b:29:46:07:3c:d9:2c:e5:
5a:32:45:4d:a7:74:5e:90:2c:3e:2c:8d:63:65:9d:0f:c5:b1:
06:7a:07:54:2d:78:67:4c:2d:bd:c4:8d:39:e7:75:17:e3:f7:
f3:da:ea:5a:3d:7e:82:90:56:e4:e7:16:67:e4:2f:7a:b7:16:
89:cf:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:27 2026 by rpki-client