Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: tHkG3E1ZKybojEORXkzs86FHLH4WyQ24yByK9c+GeU8=
Subject key identifier: DA:B6:D8:2D:48:10:16:EF:54:02:1D:E1:44:31:F5:EF:0C:B2:E6:72
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019F9211374177DAA92A33BD1E08EF3F63C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 02F7
Signing time: Fri 24 Jul 2026 03:00:29 +0000
Manifest this update: Fri 24 Jul 2026 03:00:29 +0000
Manifest next update: Sat 25 Jul 2026 03:00:29 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: oe9sHtxLNEZLpIooNMb22FqreHNZWLcIGRmUU3vyb3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:37:41:77:da:a9:2a:33:bd:1e:08:ef:3f:63:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Jul 24 03:00:29 2026 GMT
Not After : Jul 25 03:00:29 2026 GMT
Subject: CN=dab6d82d481016ef54021de14431f5ef0cb2e672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:5d:93:ac:c0:a5:0e:35:b2:7c:2b:b0:c8:
a8:02:61:7e:ff:0f:dc:28:c1:0b:5a:8c:8b:33:8f:
a5:2d:ee:03:0a:0f:19:3c:dd:8b:fb:85:dd:2b:96:
bc:c8:48:4a:98:9a:41:cc:26:68:46:9e:e7:34:f8:
66:19:45:c7:1d:79:ce:6d:5d:d4:f3:7a:90:8a:5d:
33:c7:07:1e:ce:3b:9e:ce:10:d9:c9:ca:cb:86:49:
bc:a2:da:59:32:14:b8:ad:75:19:b8:ad:23:0b:8a:
2e:ea:82:2f:ef:79:60:9a:94:30:2c:d7:00:b5:75:
ba:f0:03:10:36:0d:9e:fd:a1:eb:5c:b3:a3:52:e1:
02:d4:20:10:b2:1f:b6:c3:6b:6a:b2:51:9e:d2:bb:
87:3d:0d:44:05:45:93:a7:cd:a4:b0:7f:31:14:e3:
0b:3b:df:fb:c9:e8:00:e2:fe:ae:1f:1a:5b:18:37:
44:af:b4:82:1b:c0:a1:7c:67:c3:c8:f3:b8:d9:61:
a8:2b:03:8e:8f:eb:af:fe:27:1a:dc:53:61:20:bb:
0b:7d:b6:52:b2:e1:b6:21:b7:48:47:67:43:e4:97:
de:32:d0:da:03:77:f7:7f:2e:2f:e0:63:ec:ad:f4:
c7:cf:c3:b6:2e:27:2f:77:d5:d9:69:76:eb:45:b1:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:D8:2D:48:10:16:EF:54:02:1D:E1:44:31:F5:EF:0C:B2:E6:72
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:87:73:9d:c4:17:42:15:11:1c:d1:63:ff:dc:77:ac:45:48:
79:b6:22:97:ba:ed:c5:38:44:74:37:4c:20:13:54:e7:0f:9d:
f0:de:25:bc:cb:5b:87:8e:0c:ca:9b:6e:9a:a5:4d:52:1a:5d:
71:2e:32:6f:cd:73:c8:0c:db:e9:3b:e1:93:5a:5a:39:1a:c5:
f6:a7:cf:91:47:2c:11:78:21:ad:42:0e:9d:c6:7d:bf:9e:69:
30:40:a5:ac:9d:f9:75:3a:ae:16:0d:ae:53:9e:81:71:5b:c7:
e3:0f:96:69:e2:bf:a0:7d:d0:96:43:16:7f:02:3c:45:34:4c:
11:ca:b4:93:6d:8d:00:fb:d1:98:26:a4:48:1d:94:8d:7d:b5:
54:ff:e4:ac:24:c0:fe:d6:26:30:cf:36:56:5d:36:50:19:47:
6b:af:ae:df:78:e1:a9:48:2a:92:1c:ff:59:2b:f7:ce:b0:5e:
1b:7f:14:38:34:64:8d:50:ea:1f:51:c1:85:a8:87:24:20:3f:
a4:b8:48:89:0c:c1:e9:9d:35:45:94:d7:1c:81:2f:19:a4:19:
4a:fa:ad:b4:01:9b:cb:77:a3:ab:98:5e:67:17:09:b9:f9:7f:
29:7f:b9:9e:bd:1f:dc:0d:67:7b:36:46:f8:c6:28:ba:ff:9d:
68:7d:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:13 2026 by rpki-client