Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
File: o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft (raw, json)
Hash identifier: /gM5rzhjLQ5ywIVdCsAdTntlGdCqJhZTqCAx7sjNOes=
Subject key identifier: 09:79:0A:28:4B:39:40:2D:3D:68:89:D6:03:6D:E5:89:07:F4:5E:23
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 019F8F7E960AA340424E59C93C17CF7F807B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:05 +0000
Manifest this update: Thu 23 Jul 2026 15:01:05 +0000
Manifest next update: Fri 24 Jul 2026 15:01:05 +0000
Files and hashes: 1: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (hash: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=)
2: o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl (hash: YbEHO1uHXEi9wOwEqVYZTo6/uAFQvFz/k0XVfZa5v7s=)
3: ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (hash: vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:96:0a:a3:40:42:4e:59:c9:3c:17:cf:7f:80:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Jul 23 15:01:05 2026 GMT
Not After : Jul 24 15:01:05 2026 GMT
Subject: CN=09790a284b39402d3d6889d6036de58907f45e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:b0:83:b7:91:fc:f0:aa:d8:a3:29:5b:0f:
f1:e7:96:be:ab:45:ef:aa:2d:46:d2:17:6e:e3:b1:
c4:31:78:69:58:1d:d0:81:aa:a3:e6:bf:4e:69:d3:
84:15:61:92:1e:32:61:52:38:9a:31:69:df:28:3f:
ab:6d:d7:0a:66:63:9c:d2:48:c3:0e:0c:72:bd:22:
82:db:40:45:dd:66:45:63:c5:b5:13:04:8a:22:ee:
f6:97:bd:a7:fa:a0:fa:0e:c6:c7:dc:4d:dd:4d:a6:
64:f0:59:66:09:8e:62:b1:e9:b3:e0:a9:6d:95:46:
4d:24:59:9f:12:72:9c:9e:4e:65:f2:73:4d:41:a2:
e2:cd:86:6a:cc:97:89:30:90:0f:9e:a9:03:9d:45:
59:01:bb:0f:06:15:3b:c9:4a:ef:1d:ee:45:6a:e3:
76:89:a1:ff:13:a0:ca:80:c1:2f:a5:f5:f8:2c:cf:
05:84:25:25:03:ad:a0:ff:c8:cc:48:c8:be:86:4b:
7c:ca:cd:88:0e:9d:00:a5:08:f8:26:0a:eb:ba:41:
57:f7:4d:e8:e5:75:fa:39:f4:31:a4:cb:c6:56:b5:
db:61:ff:43:c2:bb:45:31:2b:68:bf:f0:97:b6:6b:
ab:2f:40:5c:ed:82:66:0a:b3:de:99:83:41:85:9f:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:0A:28:4B:39:40:2D:3D:68:89:D6:03:6D:E5:89:07:F4:5E:23
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:26:94:99:69:4b:16:b4:cf:e9:78:e9:6a:79:db:1d:b6:
b8:34:dc:34:75:fb:90:cf:40:9f:ac:47:37:c5:ae:4b:30:30:
bf:bc:0e:ed:d2:a4:08:69:8b:0b:93:12:c1:38:57:3b:2c:28:
5f:56:24:90:73:c2:b1:18:36:66:ae:7c:b0:cd:8e:32:9c:13:
de:80:a1:78:37:50:8a:45:9b:cd:dd:ab:30:ae:8e:98:6b:41:
16:4e:bf:c4:93:f0:63:f8:b3:b8:05:30:44:a2:e9:d6:21:55:
81:1e:db:c7:bb:cb:e9:76:21:a9:59:27:28:ea:e1:c1:b4:0e:
05:ed:e0:e6:8a:ef:91:ef:29:9c:12:b5:64:94:9e:8d:6a:a9:
67:2f:47:69:95:0d:60:25:00:43:a0:a4:68:28:56:25:2e:60:
b7:33:60:f5:11:7a:a7:d5:15:44:73:1f:77:e9:3d:07:53:ee:
e6:0a:df:ef:1e:64:8b:5c:41:f3:88:2d:59:19:1f:4a:45:55:
2e:b7:d6:4a:f1:32:2e:31:7c:06:a9:d5:2e:9c:88:5e:42:cd:
47:1b:66:be:6d:f1:f9:29:9b:15:bf:83:87:e0:01:b9:cf:c1:
57:34:24:ff:2a:10:ed:47:e8:d4:20:78:d8:60:30:db:44:a9:
94:ee:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:00 2026 by rpki-client