Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: RgN0e9SBuBWp9Jwut5PsWhjKKQjCmgmEhWxIVrBnhhM=
Subject key identifier: C5:F1:92:BA:BF:72:A8:84:89:10:7D:64:91:2D:71:BD:6E:67:C0:02
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 019F90907E8A4D96A88B090BE210267CB5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 20:00:16 +0000
Manifest this update: Thu 23 Jul 2026 20:00:16 +0000
Manifest next update: Fri 24 Jul 2026 20:00:16 +0000
Files and hashes: 1: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: r9NrCWWziPwJSDuy0gabKZi0Blrs3u1ArKx4WgFc5RY=)
2: _In4h_FwuHoLeAhLdOO_0gDal3g.roa (hash: 5CWj3iN4WCDtTiUEN45Kg99lLjsQ7Kch3A5A4xC3N5U=)
3: fLkAXt4--q3hoUBnohxzj2MtAHQ.asa (hash: nUzSBJOLVdQVJSdyNI1NiKj8o8Pa7JnmM7atYEeGT2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:7e:8a:4d:96:a8:8b:09:0b:e2:10:26:7c:b5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Jul 23 20:00:16 2026 GMT
Not After : Jul 24 20:00:16 2026 GMT
Subject: CN=c5f192babf72a88489107d64912d71bd6e67c002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:35:51:0e:5c:48:89:de:cc:01:cf:82:57:
33:69:77:bb:b4:e3:ff:e7:1a:b1:8b:34:f1:7b:3e:
02:a3:4f:6c:bd:0b:62:d0:68:dc:b6:ab:09:5a:f7:
25:58:1c:37:a5:af:c0:9e:71:f5:53:ac:57:3f:f4:
21:cb:d1:0f:f7:7f:06:c4:1c:4c:95:f0:7f:89:4d:
91:58:61:cd:6f:73:9c:d9:4d:e1:c9:c6:61:82:7c:
d6:5e:d2:cd:13:9c:a9:63:12:85:13:49:cb:cf:b8:
72:3a:b4:e2:03:2d:5b:ce:28:ae:08:ba:57:eb:8c:
70:cb:52:54:cf:1f:a8:95:ed:6a:f4:eb:d1:8c:89:
c1:6d:54:ec:bf:d0:6e:09:d9:42:eb:7d:bf:76:5d:
14:f5:9e:38:a9:27:71:88:da:2f:5a:00:01:2f:a3:
8b:fd:0f:55:ab:dc:5b:96:23:9e:41:13:0c:6a:9e:
45:36:f0:44:0f:9b:9d:7c:7a:fc:d1:7d:fa:08:f6:
4e:56:61:5f:a1:f3:5a:ac:57:40:2d:00:ae:58:09:
39:4e:79:87:99:65:40:49:f9:c4:57:1b:e1:8b:25:
29:b0:fb:a5:ca:57:cd:60:47:67:d9:99:86:a0:d3:
f4:73:1f:35:4d:31:09:b2:99:fc:8f:50:e9:30:ea:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:92:BA:BF:72:A8:84:89:10:7D:64:91:2D:71:BD:6E:67:C0:02
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c6:50:7f:86:34:70:1a:15:62:46:e8:4d:38:73:8e:05:40:
5a:f4:e8:a4:29:09:88:6d:48:dc:71:01:b3:36:ae:44:3c:97:
66:f6:ea:ee:44:9a:da:98:2a:be:d3:a5:0d:ca:6e:e4:54:e6:
9d:9f:a6:f0:94:85:2a:35:47:a2:98:86:1c:9d:fe:40:08:b5:
25:bc:45:f5:5b:fb:13:69:07:10:66:87:bd:33:d3:03:9d:08:
65:41:9f:e9:e9:b6:7e:da:dd:53:9a:0e:33:cf:84:79:71:aa:
4d:13:07:83:57:98:c7:8f:a5:8d:b7:fb:92:47:98:ca:99:d1:
9c:1c:18:86:bb:f6:0c:a4:88:8b:79:ab:3c:f5:a8:14:c1:c7:
a9:34:c3:6f:be:93:d2:5f:30:53:4d:a7:1d:4e:b3:1f:28:3c:
50:04:d4:d9:b6:26:d6:3b:6b:af:91:67:19:87:c0:dd:48:89:
b7:2f:0b:68:04:e0:6e:0a:53:cd:1b:fc:af:9e:72:a2:31:c4:
be:fe:34:7a:62:7b:62:42:ee:26:54:66:c2:d5:2b:34:08:a4:
2e:8e:ba:f8:1f:22:ca:e6:ef:57:cd:9d:6e:51:d0:31:e2:40:
fd:1a:e8:79:55:b3:84:ab:27:6b:33:e9:f8:1b:42:78:e8:95:
9c:a8:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:14 2026 by rpki-client