Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: Y4Mckin/F3OUsnhQTDz/+EDJm8V7oXf82SFbnuMhLwA=
Subject key identifier: 34:AA:A0:A2:E1:CC:CB:E1:41:01:74:6D:4D:73:16:B7:4A:61:AB:1C
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019F954969FFCBE51EB302D9FCA56BE62EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 18:00:44 +0000
Manifest this update: Fri 24 Jul 2026 18:00:44 +0000
Manifest next update: Sat 25 Jul 2026 18:00:44 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: HkQ2sEgFJCb8sjABy2GhcR0Jh2nsniE8mal1OjVWQco=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:69:ff:cb:e5:1e:b3:02:d9:fc:a5:6b:e6:2e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Jul 24 18:00:44 2026 GMT
Not After : Jul 25 18:00:44 2026 GMT
Subject: CN=34aaa0a2e1cccbe14101746d4d7316b74a61ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:c5:fd:4e:49:e8:7f:ed:ce:59:2f:f8:ce:
17:2c:9d:e8:d0:28:bc:53:23:13:56:1a:ba:ab:b9:
70:c5:26:32:fe:6a:02:61:e8:3e:2d:df:c5:f6:48:
2b:16:47:58:23:cd:3d:b3:e9:46:bd:01:80:5b:68:
29:96:de:f5:f9:9e:06:b5:e6:d1:10:44:a6:f2:8a:
45:d8:15:58:16:bb:75:dd:7a:eb:52:2e:fc:06:a9:
0a:72:40:e1:ab:71:73:4b:ef:9f:74:5d:5a:23:4c:
f9:79:1c:2f:c8:37:e7:68:53:2c:c7:ca:17:4d:6e:
72:db:16:18:3a:70:70:d3:68:83:68:fb:0d:1e:51:
b9:6c:4f:29:c6:a5:6b:4e:9e:ac:99:52:9e:ea:6f:
3a:34:9f:f3:6f:2d:a6:d2:77:c4:95:89:22:ba:87:
9e:14:b4:be:1a:e0:fa:1c:6a:e3:8c:c0:9f:36:4d:
aa:8d:0a:e3:3e:4d:91:be:a7:2f:16:60:f6:17:9d:
eb:4b:23:41:f0:5e:59:7c:8e:76:ac:73:67:de:84:
46:fd:ce:03:6d:a2:66:11:2f:bb:c5:94:c3:79:73:
e8:9e:f7:53:4d:bb:6f:e9:bb:c8:97:29:37:4f:26:
9e:ea:50:4b:91:73:2a:51:b1:c0:d4:c8:5b:81:4e:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:A0:A2:E1:CC:CB:E1:41:01:74:6D:4D:73:16:B7:4A:61:AB:1C
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:24:65:a5:eb:9d:d7:32:f2:09:b2:0d:71:bb:95:08:78:eb:
e8:53:5a:79:0e:83:c3:f1:ca:d0:1d:34:fd:82:47:8f:12:fa:
af:61:5a:59:cf:35:43:64:7f:11:e3:ff:a3:7b:90:f7:ec:84:
a9:38:d6:f1:9d:36:8e:27:9b:8d:4c:bb:7b:a0:0a:3d:9b:58:
6c:fe:cb:24:20:6c:d2:6e:49:88:3e:e6:56:ec:2b:79:cb:d7:
96:e4:fc:b0:1e:d5:21:9b:da:97:e9:ff:f5:8d:f2:8a:35:e0:
5f:4d:49:31:0a:4d:55:c5:19:18:d3:5d:37:a5:52:d0:22:e8:
34:f2:8b:77:f0:fa:e3:c8:3b:9a:d6:da:4a:24:b9:29:9f:ec:
a9:17:b7:6b:fd:be:db:b7:b5:6f:4b:ec:89:25:31:25:82:85:
82:54:66:2f:13:27:71:73:c9:7d:e4:dd:d2:c8:36:4a:db:85:
90:6e:95:41:b7:cc:7d:52:aa:05:77:a1:d9:ee:e6:4f:fb:e9:
65:5e:60:53:c5:1b:d5:47:73:4d:56:36:5e:49:70:b7:df:f1:
46:76:c4:88:6f:1d:1e:1c:79:6c:9e:e4:b3:7e:72:31:1d:df:
35:01:72:a6:29:0c:44:06:b6:52:73:1a:43:b2:3c:8b:3e:57:
af:2b:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:56 2026 by rpki-client