Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: 8y3bDtrqY9mtqKZF5RHloRgM3PsemkUmX+iyaNmI3pI=
Subject key identifier: 06:9D:7F:2D:49:4A:23:1C:52:83:E3:C8:D9:8F:1C:78:70:AA:1F:7E
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019F91DAC767E419C97F9DF362C6F6AD43BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 1338
Signing time: Fri 24 Jul 2026 02:01:01 +0000
Manifest this update: Fri 24 Jul 2026 02:01:01 +0000
Manifest next update: Sat 25 Jul 2026 02:01:01 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: ew8BercIQptxtCbzmqTcYKo1c9s4Gmr1MP9Cgvw7GO0=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c7:67:e4:19:c9:7f:9d:f3:62:c6:f6:ad:43:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jul 24 02:01:01 2026 GMT
Not After : Jul 25 02:01:01 2026 GMT
Subject: CN=069d7f2d494a231c5283e3c8d98f1c7870aa1f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:ac:54:bc:e6:d6:88:d3:32:7e:cd:38:20:
5a:65:5d:a0:62:05:42:57:da:33:ff:ec:60:bb:4a:
84:91:1c:97:8a:96:09:da:e5:c5:0c:44:53:2f:6d:
f7:c4:04:a5:41:a8:02:57:42:96:96:74:b6:98:fc:
49:df:12:60:9e:23:bb:02:1d:df:74:ce:b3:2f:30:
61:e6:87:69:75:d8:b8:91:bc:38:de:00:d4:30:61:
6a:ff:70:b3:92:35:54:85:be:64:ff:33:b2:43:08:
80:c4:78:51:61:13:a2:81:46:93:10:7c:78:99:05:
7f:58:39:7e:50:9c:bd:84:54:64:f2:9b:20:5a:18:
34:09:5e:a7:3d:3c:26:ce:5d:82:57:20:8d:06:93:
6e:38:7b:e8:30:25:6a:e1:ee:f7:85:a9:d0:b9:94:
97:ef:ed:4e:a4:b6:a5:86:40:8c:fc:90:0a:79:6c:
fc:da:c8:90:de:a9:e6:4e:54:d2:78:bd:0e:81:e2:
73:c4:69:15:d6:32:28:b0:e3:ed:72:c2:84:6b:71:
9d:60:21:b2:33:52:9d:44:ea:ff:0e:4c:b4:17:5b:
f3:90:69:d1:52:dd:03:66:c3:5d:c6:8f:7f:db:92:
20:e7:9e:ed:9f:6b:e9:91:cd:06:ba:68:94:4d:9e:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9D:7F:2D:49:4A:23:1C:52:83:E3:C8:D9:8F:1C:78:70:AA:1F:7E
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ef:23:bd:2b:16:19:02:e1:15:3f:3a:11:08:cc:ef:41:b0:
57:02:e0:34:90:91:de:77:ea:2f:b9:b4:5a:65:95:2f:dc:03:
ef:e1:3c:d5:4b:e1:9c:74:ef:e5:fb:8c:d5:d6:fe:65:73:3a:
95:a1:8e:f0:54:47:06:ef:07:e6:cf:4c:4a:2e:9d:44:ba:1c:
79:71:3d:ff:00:a1:23:7a:84:1d:b7:0d:e7:88:29:f5:ae:da:
07:03:f8:30:0f:96:f1:f0:52:0c:35:0e:5a:89:e7:0c:ed:91:
01:c9:5d:b7:e9:5f:3d:a0:d6:c0:58:c5:5c:50:4c:38:4f:90:
ff:f3:ab:86:15:8a:bf:83:f9:97:46:1a:35:dc:bd:cb:58:ba:
14:6f:0e:03:82:79:79:26:d2:cc:73:6f:f1:47:1b:63:00:c3:
dc:e1:c4:20:0f:ce:f0:50:57:78:c7:1d:39:3d:b5:31:50:e3:
6b:3c:00:41:cc:39:55:66:a4:e9:a4:b2:0a:95:3a:50:3d:ad:
83:0d:60:ec:26:15:2c:93:98:e9:25:41:10:47:a0:a1:a8:38:
9b:d3:99:15:ac:c8:0b:8f:b2:9a:89:1d:0c:21:96:1f:74:c5:
dc:b4:b6:9b:48:3b:d9:33:61:1f:15:8e:71:e1:f5:cd:4f:19:
62:88:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:26 2026 by rpki-client