Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: lFsx9TnLNKOMII/x5SNFSEo0fXcmsRFkbmsOFCDm1OE=
Subject key identifier: 84:97:9D:2C:A8:E6:C4:AB:E8:18:ED:49:27:FB:49:2E:B0:55:78:E1
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019F92B65D537E277FFE0D592979E7104D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 0337
Signing time: Fri 24 Jul 2026 06:00:52 +0000
Manifest this update: Fri 24 Jul 2026 06:00:52 +0000
Manifest next update: Sat 25 Jul 2026 06:00:52 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: DTp0Y+q4w/JbjG77wOX2c2NLj4hw7XynbuWr18eikqM=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5d:53:7e:27:7f:fe:0d:59:29:79:e7:10:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Jul 24 06:00:52 2026 GMT
Not After : Jul 25 06:00:52 2026 GMT
Subject: CN=84979d2ca8e6c4abe818ed4927fb492eb05578e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:54:2e:89:5b:d8:df:d0:1d:76:09:ad:90:
10:b2:22:55:48:56:9f:1a:37:1e:12:1f:6b:82:6b:
00:a9:01:7d:d8:34:30:b6:a4:26:cc:92:eb:23:90:
ac:db:03:b2:5b:43:11:e7:b9:c0:60:6e:b2:41:e3:
8f:66:47:fc:87:3c:a4:f7:ea:a4:f7:2c:c5:2b:95:
11:1b:33:f9:0a:9c:ab:fb:ff:53:86:1b:a4:07:f1:
23:68:3a:ec:c2:d0:b8:07:44:3a:ec:bc:96:63:e2:
d2:3e:85:bf:32:13:f5:b3:f7:6c:7f:8c:89:66:05:
df:8b:0a:11:75:3b:97:22:72:af:0c:74:0d:5a:79:
ef:8f:06:fc:c4:78:94:84:45:b7:53:3f:a1:da:28:
06:7f:d7:c8:78:4b:97:a0:4e:2b:f0:3b:78:cb:16:
b3:a7:b9:c7:cd:a7:24:f0:c0:12:73:b6:9f:db:6c:
af:a6:88:79:b7:9b:f4:e2:ae:69:56:7c:72:84:5e:
67:08:99:62:50:a4:73:4b:29:12:73:45:55:77:e3:
07:e9:d7:1c:89:5c:f1:44:c6:2b:b6:ed:bc:e8:f5:
22:0d:b2:c8:1c:d1:dc:86:52:48:a7:86:be:34:b6:
1d:5c:d5:fa:60:4c:26:07:a7:ff:51:d9:1d:09:b6:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:9D:2C:A8:E6:C4:AB:E8:18:ED:49:27:FB:49:2E:B0:55:78:E1
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:2d:68:19:1d:63:52:87:58:2b:d2:fe:43:35:18:c9:b6:
53:bb:a2:ce:27:23:b8:48:a2:5a:91:6f:88:b9:31:2e:ff:33:
71:20:d8:d1:64:e3:9e:bb:0c:a2:8b:f8:74:27:6b:1d:5e:2f:
b9:bc:f6:8a:9e:9c:62:e1:2d:5e:4a:08:25:b4:3e:5b:03:be:
45:f9:0b:f3:0f:54:32:ee:c7:e7:4a:73:19:7d:42:be:94:55:
be:56:16:f3:c2:2f:80:fa:80:bc:33:13:e9:2f:87:5b:be:4e:
7c:14:27:7f:9d:98:7d:01:c4:f4:71:c8:7b:03:f1:1c:fd:5e:
1f:cb:a4:f8:56:e5:8f:42:58:b1:61:64:a1:81:71:20:60:c8:
90:f8:0b:93:f2:df:2a:df:6a:76:ce:ac:64:f0:e2:dc:60:cc:
ef:7d:fc:90:c5:a3:28:ff:27:37:ae:d8:c0:e2:40:55:6a:50:
8a:50:81:3c:b0:e3:da:10:c7:fe:fc:47:97:db:02:1f:3f:37:
cb:7b:45:f4:e4:ab:29:a3:5f:a2:fd:40:df:f4:ed:8b:d6:0b:
1e:a2:b4:97:81:93:fb:82:1b:b3:17:2a:ea:96:e8:44:79:9a:
95:34:69:f9:83:aa:d0:b5:8c:6b:f9:45:17:96:76:ee:6a:86:
ee:ee:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:53 2026 by rpki-client