Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: DDJL5bfqN1vvhP3+/6mH8/8A/ljpLydFbD21KYiprdQ=
Subject key identifier: 80:94:A6:96:30:D3:00:B8:E0:8A:30:61:45:9C:99:A0:B0:53:A7:DA
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019F935AD661107C6E9DB9D9986D554DA8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0CDD
Signing time: Fri 24 Jul 2026 09:00:31 +0000
Manifest this update: Fri 24 Jul 2026 09:00:31 +0000
Manifest next update: Sat 25 Jul 2026 09:00:31 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: nztFT+AU+bRwhipW0U+3UMGYK95ugeWdSDPDL+o64n0=)
3: ez4u_1j0_ojM3jorhMhPc8LRXyY.roa (hash: iklDjhEm/+o8jK0OCBuLkTDvKYqHZMgst24iVNDdcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d6:61:10:7c:6e:9d:b9:d9:98:6d:55:4d:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Jul 24 09:00:31 2026 GMT
Not After : Jul 25 09:00:31 2026 GMT
Subject: CN=8094a69630d300b8e08a3061459c99a0b053a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:41:dd:42:e6:0f:36:a8:49:13:4e:b2:ce:
5f:67:a5:6f:e8:19:14:d8:14:bd:ab:c4:ba:77:ae:
94:1d:49:84:f6:63:ed:c1:81:83:cb:a4:10:6a:09:
63:e5:a1:3c:5e:45:8f:06:91:20:3c:bf:c7:e3:2a:
29:e8:a0:ed:ea:15:80:78:d3:52:d6:39:7e:37:3a:
0a:28:e5:1d:f7:e8:66:ec:cf:97:a9:23:a3:fb:a5:
a9:e1:81:72:45:0a:b9:94:d1:47:f8:14:ad:ac:ac:
48:41:2b:29:72:36:f8:c0:93:17:e6:8f:c1:be:54:
d1:b3:71:73:6c:03:37:c2:f6:7f:fb:e2:40:4c:4f:
61:21:0d:26:99:d0:24:26:ee:3a:5e:0f:12:b2:f5:
c5:99:ee:90:4f:0e:3d:45:0e:dd:e8:8a:4e:71:02:
57:64:30:5b:ae:ea:59:07:58:0d:bf:7b:2f:d8:7a:
f9:0b:13:7c:d1:cd:f1:5f:83:48:6f:a9:72:53:41:
60:47:a8:4c:16:7e:5d:a5:c1:05:03:a3:ff:16:05:
4f:40:b6:b8:45:31:05:aa:bf:ab:5d:65:2b:c3:75:
d2:a0:62:d3:e1:f8:24:1d:c5:83:c7:c8:e1:64:f6:
af:0a:eb:dd:fd:40:82:ba:60:f9:0a:a0:b0:f8:3e:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:A6:96:30:D3:00:B8:E0:8A:30:61:45:9C:99:A0:B0:53:A7:DA
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:22:9d:8c:f4:c7:e7:18:c4:d7:e4:56:80:7d:0b:52:2e:44:
9f:be:06:75:fc:f8:b8:7f:5e:0c:3b:36:80:93:bd:ac:4b:af:
2a:68:98:99:8a:3f:09:83:ca:f7:b7:92:7d:ac:ad:70:00:20:
76:0a:d6:73:36:a4:8b:68:85:e3:da:0c:15:30:e8:6f:b0:c4:
90:44:6f:b6:df:b4:6e:c6:ec:e1:6f:e6:20:8d:70:f6:8b:52:
be:c9:e1:ac:08:5c:65:5b:b3:35:78:e6:44:0f:4c:2a:e3:f5:
a1:ae:33:5a:4e:c2:3b:a8:17:f2:43:77:e1:80:0e:3a:41:b3:
ac:c9:14:01:39:e0:58:17:20:0a:cc:4d:f6:7b:aa:c1:b5:17:
88:e4:44:73:52:ad:6d:e0:6c:cb:fc:a2:9a:43:79:5e:58:a6:
98:7a:a6:ac:b7:9f:f3:5d:1f:9a:ea:c7:6e:5f:92:0d:6f:69:
16:f5:03:90:c6:24:09:ca:87:79:fc:99:ba:ab:97:3e:ab:9d:
bc:40:a6:b9:7f:1c:bc:8b:ab:16:0c:58:34:65:46:a6:14:da:
05:2f:f4:84:c6:f4:c3:89:71:ab:92:4b:62:94:c3:83:93:60:
cd:95:2e:0f:b3:7e:29:05:b4:be:28:65:7d:48:69:16:5f:63:
0b:1e:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:30 2026 by rpki-client