Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: 8lvuidi8LKHshRUsiE+KPa64LNRGV9/UFRH2GbZVtfA=
Subject key identifier: 48:4D:B2:98:14:28:0C:58:52:34:88:32:D5:9B:C6:E5:A6:EC:80:66
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 019F9437662F7E7F9EF923065F8C165F1DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 13:01:26 +0000
Manifest this update: Fri 24 Jul 2026 13:01:26 +0000
Manifest next update: Sat 25 Jul 2026 13:01:26 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: CtEbk8iU0XgEvutjE6tRWcqzKtn8WJTyoX6EH7F4Qls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:66:2f:7e:7f:9e:f9:23:06:5f:8c:16:5f:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Jul 24 13:01:26 2026 GMT
Not After : Jul 25 13:01:26 2026 GMT
Subject: CN=484db29814280c5852348832d59bc6e5a6ec8066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:bb:a0:28:07:c1:32:70:9a:a1:c2:b5:70:
5e:04:18:d6:64:1d:d9:0d:1f:8d:0f:7e:56:a8:92:
33:86:e9:96:05:ac:b0:aa:b4:b8:82:8f:81:b0:f5:
ac:e9:ce:df:db:29:75:9a:45:14:ad:9b:bc:ab:7b:
b9:ad:79:cd:7b:88:a7:64:b4:e1:5a:cf:42:fd:7d:
7d:11:36:48:7c:89:91:87:66:92:50:c5:e2:24:69:
ed:ec:8f:67:9f:a5:b2:80:de:89:2b:c2:db:a2:f0:
40:ed:ff:11:27:5c:05:6f:df:86:39:84:0c:31:75:
92:f4:f0:da:3a:e1:09:a4:d8:65:a9:a9:4a:1e:76:
64:66:fa:ff:90:f5:5d:c2:46:0f:f7:38:b0:29:93:
05:90:02:88:c8:4b:10:96:07:94:b7:6f:dc:98:50:
90:9a:be:43:0a:fb:58:61:9a:42:c2:27:60:97:22:
77:12:ec:37:1a:d2:59:7d:56:bb:43:b9:6e:0d:f2:
67:f1:8c:70:6e:66:32:8e:2d:3e:dd:35:c3:e8:0a:
d2:e4:3d:0c:1e:bb:32:70:5d:04:c9:db:4a:c4:d3:
72:68:79:36:19:25:32:1a:3d:db:1f:4d:5c:eb:e8:
da:fb:d2:6b:3e:37:17:c7:63:4c:da:0d:b8:00:e3:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:B2:98:14:28:0C:58:52:34:88:32:D5:9B:C6:E5:A6:EC:80:66
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:59:35:b3:cc:67:ff:b2:9f:ab:97:0d:7d:bd:10:6b:70:fa:
74:af:38:d7:73:ac:f4:c7:5d:fd:23:b1:03:c0:33:3d:c7:2c:
12:8f:8c:01:d3:7d:7d:5c:40:0b:f3:53:94:fc:c9:71:b8:5f:
1b:b4:3a:a5:13:c0:b9:a0:b6:82:35:97:35:9c:0f:88:26:6f:
a3:2b:2e:e2:e0:39:ed:40:5e:c3:dc:55:57:5e:de:81:26:17:
30:bb:e1:7e:de:10:1a:54:c0:8f:1a:8c:eb:02:68:24:8e:68:
68:4d:87:2e:63:ee:04:2a:37:93:6f:be:73:ec:fd:d4:93:77:
8d:3e:a8:53:ef:56:f7:c4:cf:84:ef:77:54:99:c8:dd:61:1e:
f7:50:bb:89:cb:e1:28:85:da:e6:14:f7:7e:d1:69:8d:15:ef:
cf:e5:75:4e:31:5d:2c:46:c4:0e:ce:64:e6:0e:60:6c:40:68:
d7:06:81:1f:ad:27:67:25:80:6d:53:e4:92:bf:dd:0f:ac:c1:
60:bc:2e:bc:c3:2d:4a:db:a9:64:33:19:7f:d8:a1:e6:e1:4a:
d6:8b:f7:35:c1:9e:48:4d:d5:08:0f:4b:45:97:67:0b:1e:3c:
d3:8a:c3:17:3c:d7:22:12:1a:5d:cd:d0:2f:8e:57:ce:d4:11:
91:89:a9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN2Yvfn+e+SMGX4wWXx3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2
ZjFjYzAwHhcNMjYwNzI0MTMwMTI2WhcNMjYwNzI1MTMwMTI2WjAzMTEwLwYDVQQD
Eyg0ODRkYjI5ODE0MjgwYzU4NTIzNDg4MzJkNTliYzZlNWE2ZWM4MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpK7oCgHwTJwmqHCtXBeBBjWZB3Z
DR+ND35WqJIzhumWBaywqrS4go+BsPWs6c7f2yl1mkUUrZu8q3u5rXnNe4inZLTh
Ws9C/X19ETZIfImRh2aSUMXiJGnt7I9nn6WygN6JK8LbovBA7f8RJ1wFb9+GOYQM
MXWS9PDaOuEJpNhlqalKHnZkZvr/kPVdwkYP9ziwKZMFkAKIyEsQlgeUt2/cmFCQ
mr5DCvtYYZpCwidglyJ3Euw3GtJZfVa7Q7luDfJn8YxwbmYyji0+3TXD6ArS5D0M
HrsycF0EydtKxNNyaHk2GSUyGj3bH01c6+ja+9JrPjcXx2NM2g24AON6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhNspgUKAxYUjSIMtWbxuWm7IBmMB8GA1UdIwQY
MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt
MjhiZWM3Yjk5OTI5LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5
LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1k1s8xn
/7Kfq5cNfb0Qa3D6dK8413Os9Mdd/SOxA8AzPccsEo+MAdN9fVxAC/NTlPzJcbhf
G7Q6pRPAuaC2gjWXNZwPiCZvoysu4uA57UBew9xVV17egSYXMLvhft4QGlTAjxqM
6wJoJI5oaE2HLmPuBCo3k2++c+z91JN3jT6oU+9W98TPhO93VJnI3WEe91C7icvh
KIXa5hT3ftFpjRXvz+V1TjFdLEbEDs5k5g5gbEBo1waBH60nZyWAbVPkkr/dD6zB
YLwuvMMtStupZDMZf9ih5uFK1ov3NcGeSE3VCA9LRZdnCx4804rDFzzXIhIaXc3Q
L45XztQRkYmpyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:30 2026 by rpki-client