Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: JLXgA6bkN4Qe2VB4GvTDd69gXAoPAa3Rlj9cmiI7TKA=
Subject key identifier: 85:96:7B:AA:BF:76:CF:48:AD:B9:E0:DB:39:B1:C0:C2:E6:CD:4F:2B
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019F935BCDD1F2B0AB482B4E511DE5582592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 022B
Signing time: Fri 24 Jul 2026 09:01:34 +0000
Manifest this update: Fri 24 Jul 2026 09:01:34 +0000
Manifest next update: Sat 25 Jul 2026 09:01:34 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: +ux7EHOUYJ7gnvTKkxZl8DUifKxynVlQe9vA9bpwfHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:cd:d1:f2:b0:ab:48:2b:4e:51:1d:e5:58:25:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Jul 24 09:01:34 2026 GMT
Not After : Jul 25 09:01:34 2026 GMT
Subject: CN=85967baabf76cf48adb9e0db39b1c0c2e6cd4f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:bb:4a:1e:ef:d9:a0:47:84:56:66:ab:e9:
04:90:99:6a:53:2a:51:ce:3f:7c:ce:5a:c8:01:41:
58:12:01:c9:3a:e9:13:6a:42:0c:a6:37:df:86:b7:
07:cb:d4:34:4b:5b:8c:0d:c1:cf:01:f8:1b:2f:3b:
0f:66:61:74:c2:8b:77:0d:08:bf:95:9c:d9:04:04:
32:19:f7:92:0f:87:f7:7b:f0:94:38:33:76:78:fd:
cc:0a:24:e3:35:4c:e0:bd:8a:ce:c8:84:6f:f4:ab:
78:47:f7:b7:9e:32:65:4c:c7:f4:8b:e2:a2:39:00:
9f:64:b7:83:8e:9f:33:22:c2:bb:04:ec:1a:9b:ee:
fc:ac:6d:a4:00:0e:a9:10:9d:eb:8b:c6:07:cc:30:
f9:69:a7:7f:6a:18:6d:6c:6f:b7:89:28:d4:cf:e3:
1e:92:ce:9b:9b:87:b9:35:ff:0d:c6:c1:1d:09:e3:
88:cc:5f:f8:06:8d:52:fe:43:d6:80:43:bb:5c:86:
b5:9e:6a:6b:e0:6b:73:f1:d8:be:b3:14:70:8f:09:
89:d6:2d:b7:fb:c0:6b:fc:b4:7c:58:75:54:d6:94:
4d:25:38:9c:6a:09:7d:b6:83:00:64:07:da:f3:be:
7f:b2:8f:59:4d:84:2a:c4:0e:f9:cb:99:0d:d8:97:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:7B:AA:BF:76:CF:48:AD:B9:E0:DB:39:B1:C0:C2:E6:CD:4F:2B
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:13:82:1e:bf:f0:1a:30:f8:c0:cf:5a:3a:be:13:a2:d1:a2:
cf:d2:99:04:8e:48:4a:06:d0:91:36:ef:7e:59:cd:ef:cf:57:
1b:fe:61:9f:f1:e0:11:3c:e5:b2:7c:e8:30:a6:0e:5a:a1:59:
3a:ae:db:2a:59:9f:04:5c:c9:b6:eb:be:ba:05:66:61:4d:3a:
e8:cf:23:44:c0:2d:6c:1e:41:7d:b0:9d:fc:ca:ff:4d:ef:2d:
9f:00:44:84:f5:cd:8f:04:53:70:3c:67:ad:b5:01:d5:5a:ac:
80:76:97:53:7e:70:8c:08:03:a6:1f:09:5d:91:32:86:82:ce:
df:02:20:38:3a:29:0c:b1:0c:dc:2f:0f:07:f4:7f:a8:2e:98:
0a:c5:13:46:e5:ac:00:64:0d:d6:60:a5:3b:df:fa:83:40:eb:
57:28:77:a0:30:2e:95:b8:a7:bf:d1:bf:7f:b4:15:bf:1a:7a:
a9:ba:92:48:56:86:c6:7d:98:b8:34:61:9e:d6:5a:55:ca:73:
fb:7f:91:c1:fd:44:d9:f7:da:00:a3:25:68:b0:30:3b:80:24:
4c:ca:89:70:99:7d:d2:97:53:c6:57:88:d6:78:a3:54:16:cd:
1e:a3:bd:75:03:a3:de:13:a4:8a:cc:0f:2e:4f:b1:14:31:a5:
5f:1f:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:19 2026 by rpki-client