Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
File: O3S5CBUT135Tof8iWzNAD7s5E1U.mft (raw, json)
Hash identifier: OhhTku+jpn/B7elJEe9No5IspHO/x9CHNQ10vRzYiEU=
Subject key identifier: DB:96:62:32:0A:D0:3A:8D:FB:7E:4A:E3:A5:C6:38:01:C5:D2:7B:A8
Authority key identifier: 3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
Certificate issuer: /CN=3b74b9081513d77e53a1ff225b33400fbb391355
Certificate serial: 019F8FEBF2F09A1E87E66C4EF399BE5B4841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
Manifest number: 1A
Signing time: Thu 23 Jul 2026 17:00:32 +0000
Manifest this update: Thu 23 Jul 2026 17:00:32 +0000
Manifest next update: Fri 24 Jul 2026 17:00:32 +0000
Files and hashes: 1: O3S5CBUT135Tof8iWzNAD7s5E1U.crl (hash: RgLPJ8XYgBzVjo8Of7sRoDAGM9YpTTF0l2JGIdO89hk=)
2: TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa (hash: V32WZ60pl0CbZiR2Xww+WSeiolXx8sZ4RQF4hMAGck8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f2:f0:9a:1e:87:e6:6c:4e:f3:99:be:5b:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b74b9081513d77e53a1ff225b33400fbb391355
Validity
Not Before: Jul 23 17:00:32 2026 GMT
Not After : Jul 24 17:00:32 2026 GMT
Subject: CN=db9662320ad03a8dfb7e4ae3a5c63801c5d27ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:16:03:1f:d1:a0:14:d7:33:f4:93:7b:23:
64:44:24:1d:59:5d:ed:da:0f:35:a9:bc:91:37:15:
5b:46:fb:7a:b3:53:26:67:d6:17:a9:be:b2:99:84:
11:9e:23:43:9f:27:d8:2f:8c:f3:d1:22:e8:51:0d:
cc:23:25:83:72:2d:15:63:ae:95:9b:ca:fa:3f:f8:
d7:12:30:58:41:6b:7f:68:37:af:ba:15:b1:72:7a:
93:b8:cb:40:dc:ec:14:45:9b:75:40:ea:3a:9f:97:
96:05:e9:7b:62:cf:08:85:4d:85:de:b3:c4:c0:36:
86:55:58:2f:0a:31:ea:e5:91:1b:d9:12:8b:5b:22:
e8:4b:3e:d7:b6:8b:b6:b0:b9:55:df:6a:03:c7:b0:
19:f1:d1:3c:58:5a:ef:8b:e4:26:a4:17:06:7f:d3:
35:55:f8:02:fe:f3:e5:5b:02:a8:61:a7:ff:f6:10:
2c:de:97:78:34:36:af:00:bc:ad:9c:34:6f:ee:2c:
59:4c:5b:40:57:d6:02:dd:09:72:2f:06:76:2b:bd:
67:86:5e:ba:65:db:db:80:9f:8d:99:8b:6b:30:58:
8e:15:d8:7f:00:bf:45:a0:ac:26:5f:5d:60:36:8a:
4e:df:c7:2e:9d:b3:09:ce:de:7e:05:2d:03:cb:8f:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:62:32:0A:D0:3A:8D:FB:7E:4A:E3:A5:C6:38:01:C5:D2:7B:A8
X509v3 Authority Key Identifier:
keyid:3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4e:2b:cb:61:e3:c4:81:2d:77:2c:5a:34:ba:5c:20:8f:bc:
bb:9d:27:2d:4e:0f:73:b7:bf:58:f4:e5:0f:fb:51:0a:57:c2:
4c:fe:13:59:59:53:ca:81:e0:ac:2c:25:ab:b7:d1:a0:12:d4:
c5:8b:a5:f6:da:15:42:08:19:82:dd:8a:70:e5:91:4d:11:df:
35:31:a9:f2:f5:17:e0:1c:77:21:79:d0:f0:73:50:b2:3e:bc:
21:51:12:85:1e:e5:5d:52:b8:75:f5:3d:8b:78:1f:2e:7f:5c:
2f:3b:5c:bb:af:14:24:56:5a:51:00:69:09:59:e3:fe:29:3b:
31:90:b5:43:ab:18:14:bc:d4:e0:07:e6:cd:0d:0b:2c:57:1a:
ef:1b:fa:42:3e:d1:37:cc:af:b2:61:0a:60:60:cc:1d:e6:dd:
88:89:64:02:20:7e:ff:4a:0d:c0:d5:5c:dc:36:03:38:48:a3:
3c:89:e9:d8:5d:a8:f0:36:cf:83:b8:64:7d:43:ef:bb:85:5e:
2f:16:80:a1:fb:e6:e0:e0:2a:af:f8:1c:45:4d:3e:b5:a3:77:
3a:96:77:9e:e6:c8:b2:08:cc:1f:0f:00:74:e5:7f:53:b5:72:
b7:99:56:76:29:25:2d:6a:79:0a:fa:ef:07:99:75:dd:61:6e:
5e:46:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:13 2026 by rpki-client