Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: +3etkATKo9G7WEDIK7pporkWwuErIsRtgfGYrOEUvC0=
Subject key identifier: DD:88:04:93:9F:2C:B4:4B:89:A5:10:10:1C:79:67:4C:44:2A:F3:58
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 019F92ED8F9CBFCDB2C32C310D7CBE10F7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: 0662
Signing time: Fri 24 Jul 2026 07:01:09 +0000
Manifest this update: Fri 24 Jul 2026 07:01:09 +0000
Manifest next update: Sat 25 Jul 2026 07:01:09 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: Hxx5PZQF1ttmCJ5M03xfyeZec0DJtjhPyS0M+HWEVG0=)
2: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (hash: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:8f:9c:bf:cd:b2:c3:2c:31:0d:7c:be:10:f7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Jul 24 07:01:09 2026 GMT
Not After : Jul 25 07:01:09 2026 GMT
Subject: CN=dd8804939f2cb44b89a510101c79674c442af358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:ef:5a:45:16:b8:e1:ce:86:9c:fb:58:78:
bb:b0:3c:fb:fc:59:a5:28:72:0d:0e:22:f5:e3:c4:
87:d6:04:95:c3:27:4c:c1:3e:35:fc:8a:b0:a0:ed:
0c:38:44:38:73:bc:1a:41:8e:2c:cc:97:28:c2:89:
b4:d3:b2:e5:72:32:30:d7:d9:3b:d7:63:ad:30:15:
04:a5:a8:0f:0f:05:9d:57:be:ba:7d:b3:32:df:c6:
11:4a:cd:66:2b:43:3e:69:c6:6a:31:1c:df:5d:cc:
3f:f4:4a:67:fc:75:a9:ed:3c:9c:2d:a7:68:45:bc:
db:17:53:e9:1b:ed:4d:7e:0c:c0:fd:72:b3:a0:78:
ca:04:1f:d3:df:6d:1a:32:24:de:1e:39:8a:52:8b:
56:36:40:c9:f6:c0:61:94:1f:97:32:a0:54:9f:9f:
77:48:54:ea:41:c2:36:47:3d:4d:23:3f:74:1d:95:
c0:48:cb:ae:90:2b:07:67:42:a5:ce:26:7a:d1:03:
3a:86:d6:86:66:f5:a5:4e:4c:d3:4f:d4:0e:be:ce:
be:4e:11:b8:1d:99:1f:a6:9a:5e:29:01:f7:82:82:
33:cb:2f:91:3f:99:a6:ee:11:8a:94:ec:6f:92:3c:
8d:67:a5:32:f2:e9:96:d3:b4:da:71:6b:bb:b7:ee:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:04:93:9F:2C:B4:4B:89:A5:10:10:1C:79:67:4C:44:2A:F3:58
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:18:e6:ba:91:61:d8:32:f3:4e:34:ab:cc:ed:73:e2:7d:93:
2f:83:df:39:2a:db:70:e4:5e:dd:0c:bf:b2:9b:c9:00:f7:05:
37:66:f1:a6:0f:37:7d:a1:bc:a9:38:b4:36:c2:9e:4c:e8:b9:
a0:51:0c:c9:64:57:13:46:67:51:ef:ec:24:78:ab:b6:c8:e2:
7c:9f:04:ee:5c:39:ec:59:15:de:8e:7f:7e:ae:42:4c:81:06:
ff:2d:ae:37:43:5e:d9:59:a3:fe:db:52:96:3d:cd:e6:81:30:
73:10:42:cd:d1:e9:2b:2b:c3:82:af:fb:31:28:42:9f:b7:bf:
fd:18:03:30:62:20:2c:59:7b:6a:d8:2c:fa:a3:d9:e9:08:1d:
2e:de:65:09:ed:5e:dc:46:14:5a:05:31:40:29:59:45:a5:c6:
52:55:b5:90:68:ca:c1:97:59:ea:49:93:c0:b2:24:07:90:6b:
3d:44:dc:fa:2b:ea:55:ce:99:3c:08:5b:3d:19:41:a9:e0:dd:
2b:48:f7:a0:3e:88:8c:78:64:7f:d4:a0:92:bf:75:1e:00:a3:
ff:54:78:08:dd:16:4f:06:35:73:a6:b4:55:d5:b8:a2:39:c7:
5b:ad:01:79:52:82:9e:02:09:1d:78:20:95:f4:fb:8d:28:30:
e4:65:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:34 2026 by rpki-client