
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier: bCisK+Q56YCp4N3XWinDM6MutlQAmBsrrg7bfAJEseQ=
Subject key identifier: 34:53:C0:17:03:89:AF:22:DF:7A:CD:AC:5A:65:6C:EE:4D:15:20:33
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer: /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial: 019F93FFA79530CFAE5217FDD25256256D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number: 0104
Signing time: Fri 24 Jul 2026 12:00:33 +0000
Manifest this update: Fri 24 Jul 2026 12:00:33 +0000
Manifest next update: Sat 25 Jul 2026 12:00:33 +0000
Files and hashes: 1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: z1f9isi0v1YHPR/DhayOZdTQNapz4oGcRo+ZUoNkSfI=)
2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a7:95:30:cf:ae:52:17:fd:d2:52:56:25:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
Validity
Not Before: Jul 24 12:00:33 2026 GMT
Not After : Jul 25 12:00:33 2026 GMT
Subject: CN=3453c0170389af22df7acdac5a656cee4d152033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:f3:57:38:57:30:cb:c2:a9:db:06:2f:b1:
1b:ef:5a:fa:29:92:63:61:bb:c3:26:24:40:64:c4:
91:ba:36:8b:33:ac:98:a8:58:f4:d1:df:f7:38:1d:
1b:53:ff:75:f1:fc:f2:5d:c3:0a:c9:95:01:3b:06:
33:67:e8:83:1c:34:38:4b:9d:f0:2f:5e:e1:a8:cc:
dc:f3:7d:49:b7:ad:b7:1b:db:3c:15:12:17:fb:b8:
27:24:c7:72:d3:03:dd:ec:a6:00:f8:f9:f7:cb:dd:
51:86:7b:c0:f7:48:88:cb:31:b8:ff:a7:c6:2a:a0:
b1:04:88:66:9f:23:d5:90:48:53:b0:cd:4f:3e:8d:
79:f8:30:59:6a:2f:86:f3:3e:e2:0c:9a:35:18:61:
c4:74:0b:0d:64:60:4c:97:a8:f3:63:a4:52:fe:47:
43:c1:ea:17:aa:dd:f1:de:68:72:95:39:a1:76:8c:
63:4a:9e:a9:30:24:7b:ad:e9:7f:56:8c:28:65:93:
ee:a0:3a:e0:e5:37:d1:db:b7:66:4f:4e:5d:7d:ee:
4c:87:1a:42:90:b4:a5:d1:e0:c2:db:e4:04:f7:78:
f8:1a:41:4e:ab:6a:0a:07:45:61:15:16:5e:aa:18:
a4:e2:d4:2d:5b:4f:8f:51:cf:17:db:42:6f:38:3d:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:C0:17:03:89:AF:22:DF:7A:CD:AC:5A:65:6C:EE:4D:15:20:33
X509v3 Authority Key Identifier:
keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:88:58:08:a5:eb:d8:d1:74:fa:39:01:2b:84:8c:7e:68:0c:
6f:b1:12:e5:93:2a:12:e1:1d:dc:b2:f8:bc:d0:86:db:97:07:
d1:b0:85:85:91:6f:7d:3c:ad:05:1e:e2:ac:92:64:10:db:98:
2f:31:2c:ae:1a:f4:3c:db:16:cd:a2:66:9d:55:33:1c:c6:92:
c6:36:56:88:e6:67:b7:27:b9:4b:66:4e:1f:b6:aa:ce:72:89:
83:aa:98:81:b2:c9:1f:78:ee:8c:ba:17:c7:90:9a:ac:14:09:
87:2c:59:a7:ac:db:d0:41:6e:ce:c0:9a:ff:87:bc:78:ed:53:
6e:3c:da:2f:af:5c:85:e3:eb:78:5b:1b:85:94:be:68:fc:70:
b2:29:b2:52:f6:c5:15:d3:57:0b:8f:0a:8d:e0:90:2d:2c:42:
7f:08:37:05:5b:6d:0e:d8:2d:97:91:71:dc:ed:6d:7c:cb:1d:
12:bc:79:9d:71:38:a6:0e:87:4d:7a:f1:0c:7b:d4:a3:b6:e1:
a4:44:63:6e:e2:b4:84:71:f9:c9:06:6b:40:64:3b:7a:26:83:
0e:67:64:0f:5f:e0:21:5a:81:c4:06:70:71:95:e3:f0:d8:38:
23:aa:c9:96:86:82:94:f6:4f:ba:ee:d9:64:c5:35:be:96:2c:
20:23:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:51 2026 by rpki-client