Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier: uy0X2fa5m0OjtG+3GgPSxBuurdspbfyyuJK0tJ83nHM=
Subject key identifier: CB:54:BC:6A:9C:26:55:DC:72:8C:D4:A3:92:4D:C6:A6:9C:F5:06:1C
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial: 019F935B4D3AFCC04A62F020A29626529189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number: 027B
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: JNyOXPA8sUWDWpV3nKxMdoLoSAwmw82cPuSGWKtxd64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4d:3a:fc:c0:4a:62:f0:20:a2:96:26:52:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=cb54bc6a9c2655dc728cd4a3924dc6a69cf5061c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:5c:a2:b4:ab:b2:3f:d2:2f:d8:20:a3:15:
01:62:42:11:f7:ab:91:da:4c:1d:e8:e0:98:01:bb:
80:bb:0e:c1:8c:62:5f:26:8c:89:7d:08:01:2c:f8:
cb:dc:a0:fc:3f:23:16:e4:06:4f:65:5b:dd:57:85:
c4:5a:6c:b1:35:d7:13:a0:ba:4e:a7:b8:76:4c:57:
f4:d8:2f:aa:a0:72:47:a3:8c:ec:a8:cc:32:fb:fa:
ed:65:9e:84:c2:9e:85:a4:f2:2d:0e:de:7f:c4:71:
25:e0:38:a8:0d:e0:85:4e:a4:95:7b:e9:6c:fb:e4:
63:9c:94:6e:d2:70:a3:e1:eb:26:fa:48:9b:0d:63:
ff:a8:4a:73:95:04:9f:65:a4:43:c7:55:98:49:d9:
17:87:f3:39:59:a3:a6:81:b1:5e:e9:82:22:a2:3d:
5a:50:01:c5:cd:6c:55:42:63:bf:a8:ad:e2:13:80:
dd:b0:6b:43:fb:e8:16:0f:a0:50:49:fc:6d:4c:a8:
8c:c0:f4:06:5f:21:36:02:94:bd:79:6c:39:e9:85:
cf:2d:81:98:cd:a6:d2:d7:42:3c:96:c2:3b:21:fa:
72:a7:ac:06:db:70:4c:6a:1e:0c:33:ed:cb:56:29:
00:93:82:99:27:fe:03:87:3e:9f:04:f6:16:9c:44:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:54:BC:6A:9C:26:55:DC:72:8C:D4:A3:92:4D:C6:A6:9C:F5:06:1C
X509v3 Authority Key Identifier:
keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:e5:c6:31:80:c4:58:a4:f2:e9:6b:2e:04:5b:cf:87:d7:
15:2b:05:76:04:30:fa:b0:dc:6e:d5:ba:80:fb:c3:17:7b:a8:
72:da:ee:3d:48:58:91:6b:ec:ea:d6:3f:d2:97:a4:0c:8f:fc:
82:12:bc:6f:73:ba:4a:8a:54:85:8c:f7:ee:e4:95:f5:f3:ad:
d4:b0:c1:a1:c9:d5:bb:e9:e3:0b:aa:68:0b:b8:21:60:86:e9:
20:f2:6a:e9:9b:16:ea:0f:14:66:fd:4d:28:50:5d:df:6e:e8:
c3:ed:bf:05:06:31:57:b4:84:a6:6f:32:2f:6a:be:e5:4f:29:
6d:95:81:e8:5c:8c:e9:9c:0e:e8:9b:aa:3b:c7:91:33:4b:c3:
69:e9:93:18:3c:f1:be:34:b7:ce:de:57:3a:aa:61:37:b8:60:
7b:8d:d2:be:1b:b9:d3:3d:a1:0d:2b:12:db:eb:55:58:6a:db:
dd:42:3d:d2:cc:6d:db:8e:f8:05:08:01:54:6f:45:5c:a9:81:
ba:81:e1:ff:f7:47:b2:b0:d9:f5:3a:b4:4c:97:65:0e:25:8f:
fa:30:d8:43:e7:dd:7d:d1:17:1a:02:f7:39:3c:83:70:e0:ff:
9b:94:1f:c8:a6:53:91:24:00:9d:c3:d3:1b:c2:a2:7a:c9:2f:
82:86:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:33:55 2026 by rpki-client