Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: WW4xqw3x9gSIs6NOZHcrpj6w8zLCJ31TbisSAIJYpAA=
Subject key identifier: 5F:CD:6B:6C:4F:E7:D5:F2:F3:F4:03:2E:A6:64:71:D6:75:D1:1E:95
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 019F9392599B5A18473AF6E214EE9AF8FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 10:01:09 +0000
Manifest this update: Fri 24 Jul 2026 10:01:09 +0000
Manifest next update: Sat 25 Jul 2026 10:01:09 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: HaUbjmne3tCFdDxbDRdUrFrKgBge4XdaUI6qfJbAH6A=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:59:9b:5a:18:47:3a:f6:e2:14:ee:9a:f8:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Jul 24 10:01:09 2026 GMT
Not After : Jul 25 10:01:09 2026 GMT
Subject: CN=5fcd6b6c4fe7d5f2f3f4032ea66471d675d11e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:84:65:b2:20:49:3a:02:c9:f8:57:ad:91:
7f:af:da:7e:33:8a:a4:42:8c:19:cb:46:ef:6a:9d:
d9:44:89:b1:f7:82:05:90:51:69:d3:1c:7d:36:e8:
1c:61:de:c3:94:66:3d:35:d6:e8:03:77:33:f4:10:
71:79:a4:22:f8:0f:99:70:2d:e6:69:f0:10:f7:7e:
20:4d:40:b0:87:af:38:ff:92:54:e4:56:5f:ee:50:
ec:76:e5:0f:d6:ad:a8:0d:53:50:f3:06:98:30:82:
7a:1f:15:be:d0:a5:45:88:20:99:72:eb:c4:1b:45:
4c:6c:d1:81:74:69:67:50:fc:1f:03:a0:d4:ba:82:
b0:90:b7:4d:27:21:e3:26:69:1d:a1:91:e3:f2:b2:
50:f1:a2:36:f4:7e:4c:1f:2b:a7:59:d5:50:7d:cb:
5d:40:e5:c4:8e:f7:4d:d7:e1:8c:41:b0:8e:c5:93:
bf:c5:20:e5:fd:e9:fd:26:e5:57:9c:5d:73:6b:c6:
eb:21:2a:d3:98:f8:e1:1d:b5:af:36:c6:ac:d9:e6:
16:50:7f:d9:38:36:79:3a:fb:6f:e7:a1:91:fe:55:
f0:2c:a4:da:ae:83:45:58:ee:84:f8:63:af:2c:56:
af:03:28:c7:66:ed:b7:82:79:99:3d:16:69:77:1d:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:6B:6C:4F:E7:D5:F2:F3:F4:03:2E:A6:64:71:D6:75:D1:1E:95
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:d1:b2:42:7a:2f:6a:b3:55:f6:59:7d:81:d2:4e:30:12:
73:4c:ce:5b:d3:39:5f:37:6d:5c:1c:85:c2:df:39:96:1a:91:
5d:2c:55:fe:b5:e2:c6:0a:37:25:b8:2b:77:6b:01:9c:70:f4:
0a:11:ef:04:52:4f:2b:94:f8:f5:ff:00:d2:2e:8e:66:3b:53:
e6:75:ed:b5:cd:06:7e:9b:17:a4:fe:98:51:bf:71:e3:a5:7b:
26:f4:2e:27:de:a6:04:56:2e:f7:95:6c:ec:7c:7b:f4:97:ba:
7f:1d:28:1b:c2:93:92:5a:d3:a8:a3:c5:59:f8:d0:72:b1:51:
8b:74:28:af:88:10:9a:59:ec:49:94:d4:66:c0:23:61:de:b4:
c4:43:01:7c:ce:e5:08:53:79:40:2f:2a:6e:a4:82:8e:ac:b7:
3b:98:9a:2d:97:e2:44:41:b3:74:3b:ae:36:6f:0f:fe:f9:0d:
f5:c0:81:20:a5:30:91:51:1b:f8:82:27:ab:cc:7a:ad:40:90:
6c:c6:7f:db:af:4c:bc:43:f0:27:63:8b:93:6b:27:17:ae:64:
48:97:4d:e7:91:f5:48:13:60:90:2a:3f:83:58:c0:f3:c1:97:
04:6d:e3:8a:39:ce:ae:d3:bf:de:c1:89:a3:ae:63:c8:48:dd:
03:50:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:16 2026 by rpki-client