Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: 1GaqUbXy3b4FUphKtitGa97soQuYDxQ+rwK9eN43XrQ=
Subject key identifier: 4E:3F:94:89:E3:C0:DC:7E:95:20:DD:E3:3C:86:4A:31:9A:C0:C9:2B
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019F93C9191C3E3CF83E8C806800102E8715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 0759
Signing time: Fri 24 Jul 2026 11:00:57 +0000
Manifest this update: Fri 24 Jul 2026 11:00:57 +0000
Manifest next update: Sat 25 Jul 2026 11:00:57 +0000
Files and hashes: 1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: K9Zw5j6/IXFkpINArMeAV1WSovQCz1+HxInYDm/h20o=)
4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:19:1c:3e:3c:f8:3e:8c:80:68:00:10:2e:87:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Jul 24 11:00:57 2026 GMT
Not After : Jul 25 11:00:57 2026 GMT
Subject: CN=4e3f9489e3c0dc7e9520dde33c864a319ac0c92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:e6:f6:01:b4:49:4e:91:87:58:ea:ec:ea:
28:40:0f:2e:e0:07:81:ea:dc:08:5e:2d:42:aa:e2:
6b:a4:fb:03:29:8a:96:be:dc:8b:14:90:ab:4f:e0:
be:c2:4d:0d:80:62:0d:dc:93:69:ce:f7:80:d4:ea:
8f:aa:a6:f6:01:38:a8:40:26:a7:db:cd:76:f0:ef:
ec:2a:29:df:e4:da:23:5d:a9:64:6b:d7:48:4a:88:
b4:1d:f6:e6:82:98:49:81:7e:fe:7e:e4:bf:86:6b:
52:89:c1:ee:05:b2:54:e4:d1:c7:22:dd:8b:27:dc:
aa:bd:ac:df:71:1c:ae:8c:26:15:39:7d:d4:0d:48:
4f:72:b4:21:c1:45:0d:b7:9f:64:35:cd:4e:69:73:
19:21:03:4a:00:2a:bf:55:6f:bb:5c:1e:89:eb:95:
78:ef:58:d2:5a:b3:09:b6:15:5a:34:38:2e:17:51:
7f:5a:81:90:d4:32:24:3d:92:88:e4:38:c4:90:b6:
c1:dd:e9:57:14:7b:7b:45:d5:cc:ea:ab:dc:98:a7:
54:27:57:3e:91:0e:34:8f:dc:43:3c:f7:c0:7e:df:
c5:b2:66:9f:53:41:71:80:29:6c:81:ad:ac:a0:45:
03:64:1b:0d:6d:82:7f:d8:ee:dc:f7:b4:12:0b:d2:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:94:89:E3:C0:DC:7E:95:20:DD:E3:3C:86:4A:31:9A:C0:C9:2B
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:b8:c6:da:4e:f3:44:21:76:b8:c7:73:14:ab:ad:b6:aa:
6f:1a:87:56:63:79:d3:e1:99:82:c8:1a:5b:89:bb:5e:b6:71:
42:2b:f7:a3:3f:a2:c1:cb:3e:96:d4:b3:6d:06:16:4b:27:e2:
79:52:23:ff:ac:5e:82:df:bf:ef:77:fb:f2:d8:77:21:e3:02:
08:8b:31:2a:d2:68:b1:79:ab:24:cd:d7:99:3c:e4:c9:aa:fe:
87:71:6e:3a:92:73:2d:cd:6d:2c:a2:6e:5a:21:36:1a:f5:6c:
bd:82:7d:95:96:60:10:18:24:87:e0:0a:6b:ab:cb:51:53:8c:
e9:e6:38:7f:65:1d:f9:2e:47:31:6a:f4:82:d8:92:63:a2:fd:
88:42:c1:ff:3a:2a:ce:69:86:ae:6e:6f:b6:04:91:a5:fa:65:
ff:90:83:bd:a2:4e:cf:0a:ea:9e:37:62:90:c5:0a:c2:2b:b9:
d4:12:7e:ad:65:b2:71:2d:15:e1:24:41:98:60:18:80:ce:70:
b2:e0:72:57:dd:84:e9:a5:bc:12:99:c5:d9:cd:5d:19:3a:d0:
04:31:a8:75:7b:53:ed:1b:d0:27:6f:9e:15:28:33:bd:34:b6:
64:90:4c:9c:bc:a3:be:9d:81:4a:5c:8c:29:c2:c8:f6:9e:0e:
92:3a:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:20 2026 by rpki-client