Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: x2BjZNGi1pWpvCBaYAtLOCkMfKUdSLuV31mCkuFOwqQ=
Subject key identifier: B4:56:50:F5:C7:C1:D7:89:99:DE:CA:CB:D6:11:A9:FC:2B:5D:B4:07
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019F93C960DF8ACDF2F527CB103047BD1EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 11:01:15 +0000
Manifest this update: Fri 24 Jul 2026 11:01:15 +0000
Manifest next update: Sat 25 Jul 2026 11:01:15 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: FtkHBDmSOIj3zpx9JxdV2zaIyPFmPsoBB0YmnmaqMxo=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:60:df:8a:cd:f2:f5:27:cb:10:30:47:bd:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Jul 24 11:01:15 2026 GMT
Not After : Jul 25 11:01:15 2026 GMT
Subject: CN=b45650f5c7c1d78999decacbd611a9fc2b5db407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:95:49:91:37:22:a8:a6:f3:61:f7:e8:1a:
86:3a:81:9e:1f:09:cb:07:ea:e4:7d:73:fa:3a:ba:
75:98:07:49:da:81:51:d2:03:97:0c:23:4b:cd:56:
02:2f:37:24:8b:50:71:57:15:97:58:f6:d8:2c:89:
46:a9:e9:af:d0:b8:93:9b:0d:6b:c3:c3:7b:5f:7c:
70:eb:a5:7e:d2:16:c7:2a:16:e8:c9:53:25:9f:05:
ab:b2:0d:ac:ca:7e:6d:73:37:1a:3f:4a:eb:a4:89:
f1:f9:82:9e:73:d5:79:39:c6:fb:cb:8e:6b:95:ef:
33:31:73:3e:fb:db:60:36:30:3c:57:27:ea:08:e2:
3b:ca:c4:f0:aa:8f:aa:8e:83:34:b7:36:bd:99:f8:
7e:36:39:14:93:73:20:ac:99:a4:91:62:fd:b3:68:
4f:c7:5a:d1:3c:3f:f2:38:d8:8a:43:0e:89:dd:bb:
e0:5f:1f:a3:13:d6:39:91:0c:61:58:94:ce:8d:35:
4d:2c:5b:99:2b:ce:ad:fc:86:4b:85:e7:56:06:43:
12:0c:8a:9f:35:99:2e:03:4c:13:e9:b4:ce:84:95:
54:73:68:f9:de:59:9d:af:b7:2f:46:22:e2:61:60:
02:90:d7:a8:14:dd:c3:3b:88:53:f7:21:62:c9:33:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:50:F5:C7:C1:D7:89:99:DE:CA:CB:D6:11:A9:FC:2B:5D:B4:07
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6d:7b:75:fa:25:6a:54:51:0f:88:6c:fa:a7:35:41:31:3b:
55:5f:06:08:63:d3:cd:04:f3:00:1d:f4:50:f5:92:a3:9a:61:
6d:88:93:da:17:67:43:3f:ca:42:89:25:24:de:7c:cb:60:a4:
f3:b2:4f:95:3c:a8:31:53:4c:6c:dd:4c:94:e7:0c:91:ea:8d:
1e:c8:0b:3d:ad:c3:9f:74:f7:bb:32:2e:21:35:51:03:f2:b1:
ef:fe:7f:e1:a9:16:ee:46:56:dd:e0:72:eb:b8:a9:87:cf:55:
f4:36:8e:ef:bc:12:ab:69:b7:f4:0f:66:55:dd:73:8c:53:bd:
83:08:92:2c:b8:30:41:c6:4a:2a:2d:53:48:a8:9a:94:3e:f4:
0c:53:d8:9d:70:3a:f5:a3:db:aa:c6:64:f4:60:85:e8:bd:3c:
76:3c:36:f5:c6:f7:85:a2:52:23:32:97:56:e7:88:06:a9:92:
28:e9:ea:a9:b8:0f:5e:9c:b8:3e:17:ef:27:eb:e5:a7:5f:27:
b0:6e:42:c8:83:78:3c:62:00:71:e4:57:8e:43:01:91:da:88:
b1:33:63:79:44:3d:12:ad:4b:1c:20:2e:17:45:5d:4a:49:6a:
61:08:5f:2e:a2:3b:46:a8:71:2c:2f:d8:45:de:3f:e9:d8:21:
cd:5c:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:26 2026 by rpki-client