Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: 5vGa7We5Ro9x0tB2fsW19Zd4eYuUV5hklkecP9kS73s=
Subject key identifier: 38:DF:5A:13:5B:DA:A7:D2:7C:0E:C5:B3:2F:1B:21:E2:5B:C2:BE:83
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019F92ED0767C060896A02205AC4F8B3BFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 195F
Signing time: Fri 24 Jul 2026 07:00:34 +0000
Manifest this update: Fri 24 Jul 2026 07:00:34 +0000
Manifest next update: Sat 25 Jul 2026 07:00:34 +0000
Files and hashes: 1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: z88JnEst6/0KEDd7sJDH/w/HfBcbdwWaAHmPPDIABDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:07:67:c0:60:89:6a:02:20:5a:c4:f8:b3:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jul 24 07:00:34 2026 GMT
Not After : Jul 25 07:00:34 2026 GMT
Subject: CN=38df5a135bdaa7d27c0ec5b32f1b21e25bc2be83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:14:eb:82:57:15:43:2b:b5:e1:6c:d2:d3:
23:d6:e5:cf:f3:67:f7:96:81:39:26:89:64:15:55:
5b:54:46:fe:2a:90:a5:79:aa:47:c7:53:0b:3d:6d:
1b:13:56:bd:79:ef:05:c6:d3:2d:14:0b:68:5b:40:
26:f1:4f:c4:10:7d:2a:00:7d:88:c5:12:35:4f:70:
08:90:a6:0a:24:ad:76:cb:ec:df:d6:26:e0:cb:1b:
62:a1:e9:81:db:ec:4c:9e:5b:3a:1b:2a:89:0e:02:
0a:18:b4:74:63:5d:03:32:fc:04:f8:99:27:ed:19:
fe:53:d3:05:4e:9e:89:92:4b:41:fc:ac:55:45:7e:
69:85:f1:ca:bd:b2:4b:25:95:fe:31:90:5f:3d:24:
e8:f5:8d:67:09:65:58:cd:9b:5b:93:8f:14:6e:c2:
21:75:87:ee:d2:f6:70:0e:a7:8f:0d:05:66:d3:2f:
89:64:32:02:69:42:e7:69:c1:f3:a1:db:fb:47:7c:
de:66:66:42:70:18:0b:dc:1e:08:41:64:64:0c:5b:
76:fe:a2:f3:59:5b:3d:26:06:d4:82:33:a7:64:6e:
6f:2f:c8:9b:0e:ec:a7:4a:e5:f5:93:03:4f:c0:19:
31:0e:0c:65:78:ab:fe:59:ea:c4:c3:f9:6c:17:53:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:5A:13:5B:DA:A7:D2:7C:0E:C5:B3:2F:1B:21:E2:5B:C2:BE:83
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:25:d7:f3:4c:22:c1:7b:d0:88:77:d4:01:41:6f:d3:50:41:
e5:24:e0:2a:0b:14:82:fe:6e:73:7b:6f:08:90:49:58:36:bb:
2f:1e:28:a6:de:dc:1e:ef:78:db:8e:45:93:86:eb:e6:23:2c:
51:c7:52:de:90:c8:22:ba:30:28:f5:ed:68:e1:21:28:4c:9e:
2c:ec:4c:9a:ab:d9:b5:b1:45:32:6a:ac:1d:81:e2:f4:b0:aa:
8a:06:00:49:8e:9c:c8:ff:e3:ec:48:9d:5e:13:10:ee:73:7a:
be:34:07:1a:35:db:3a:c9:ae:f0:22:85:6c:c5:2b:03:c3:01:
ed:6e:1f:6b:e5:21:b6:09:3f:19:a8:88:9d:a3:87:60:ff:b8:
90:fe:41:fa:48:6f:9d:e7:8b:df:be:41:e2:7c:34:02:9e:64:
c8:94:12:e3:5b:5e:ec:b6:c2:f1:71:fb:a4:51:86:4b:72:ac:
59:6a:da:e5:9c:c8:8f:fc:6e:1c:96:8b:7c:41:70:7f:e0:db:
a3:4d:9b:dd:e5:43:ae:e9:51:a0:24:bd:55:bc:6e:34:e0:f4:
c0:2c:e6:83:8a:4a:34:74:43:8f:dc:14:09:07:95:5e:97:7a:
45:e4:3d:9b:b6:1a:0e:26:99:58:0b:65:48:fb:1e:a2:4b:df:
4f:da:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:36 2026 by rpki-client