Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: +tUrh8p6/DiUwCpLlgZ31divjkFjb5iVgj6PskcDf6w=
Subject key identifier: 7E:03:A1:E9:C4:42:FC:1C:74:29:91:C5:D0:10:F8:B1:39:EA:76:B0
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 019F92B5E3496F35D1D4CA359B76A9DBC1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 06:00:21 +0000
Manifest this update: Fri 24 Jul 2026 06:00:21 +0000
Manifest next update: Sat 25 Jul 2026 06:00:21 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: 6U0x7VjVIlpWgo7gZ7V0DRdmikSjS6CWhyNiAai8MjM=)
2: tEwvrvMSMdRpreRXE8vIUxCdrWU.roa (hash: LuQrZ1Bsydhnn8JYLfrtQ2fDEieRiuf7PuXKlQlzF0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e3:49:6f:35:d1:d4:ca:35:9b:76:a9:db:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jul 24 06:00:21 2026 GMT
Not After : Jul 25 06:00:21 2026 GMT
Subject: CN=7e03a1e9c442fc1c742991c5d010f8b139ea76b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:c0:7d:14:5a:a6:f2:b7:e5:f2:8b:f4:90:
95:86:0b:64:80:8f:ac:4a:1e:d6:c7:d5:95:91:53:
57:7e:a6:f5:82:70:7e:e1:e3:1f:e9:83:e3:aa:9b:
04:e5:08:c7:88:b0:4e:72:71:b0:1c:93:56:27:2e:
ce:41:fc:3f:af:68:d8:19:6e:35:f1:ce:7e:e1:87:
ea:93:47:23:a2:d0:27:e5:7a:86:62:a8:06:54:f2:
e6:ce:75:5b:cb:23:58:62:cd:85:cb:61:40:2f:ec:
99:01:33:0d:41:3c:c8:1d:1e:01:84:46:66:84:32:
49:91:25:70:bd:24:cf:ae:3f:b9:34:f3:37:37:08:
e8:82:f5:bd:5e:82:2f:18:5b:d3:70:8e:7c:0d:7c:
cd:d1:3c:f7:0c:72:05:6c:12:ea:3b:dd:88:70:eb:
0d:04:ac:e7:43:c8:96:bb:d2:b1:1e:c6:1e:da:cc:
eb:3f:ae:da:d7:9e:db:4f:31:17:00:03:4a:a1:fe:
0d:ba:50:0c:84:9b:31:8d:32:d0:e3:ee:0a:da:54:
f5:d1:14:7d:f2:6c:0b:2b:86:02:d0:6a:16:69:83:
f8:36:6d:29:84:1b:2e:2e:74:3f:df:36:fd:b5:b9:
c4:87:71:c8:1e:d0:0c:85:38:a9:f9:c5:46:d8:f1:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:A1:E9:C4:42:FC:1C:74:29:91:C5:D0:10:F8:B1:39:EA:76:B0
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9c:0e:8a:1f:d2:92:c9:cc:53:95:a0:e7:9c:a0:98:13:88:
68:8a:9d:d4:11:a6:6a:7d:10:88:5c:24:60:68:09:c0:50:93:
98:a1:2e:7b:13:55:55:17:62:b1:e0:71:7e:58:4d:59:60:d4:
e7:31:81:b1:ac:d0:87:e3:ff:af:2d:7b:9c:22:40:86:02:5c:
6f:7a:80:23:9a:da:72:34:bd:c3:af:31:d9:1d:da:78:13:33:
63:f4:af:75:6d:ed:96:56:9e:bf:85:f9:e9:72:a4:77:14:c5:
cc:8c:20:b6:41:50:e9:56:5c:53:05:b6:7a:8f:59:26:68:2a:
d8:cb:a7:8e:9d:bf:fc:81:0a:74:6b:e3:97:b3:ca:fa:da:c5:
20:9a:0d:e4:a6:af:b4:40:2b:8a:28:cd:6e:22:26:de:74:09:
da:ef:1c:98:a0:e0:dc:81:a2:53:99:21:93:12:d1:6d:cb:76:
c5:a1:7b:e4:60:42:f5:a8:8c:4a:20:e5:de:18:09:0c:d3:4d:
4c:72:67:43:53:69:b6:c6:22:3c:d2:dc:43:37:e1:79:e6:cb:
54:16:44:4c:55:d6:77:b6:67:a4:cf:cf:ce:06:86:24:b5:e0:
20:80:f5:c8:4a:55:9e:38:ee:be:11:a8:19:e5:2a:ff:d9:15:
bb:d3:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:53 2026 by rpki-client