Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier: 73aWCUqBBQh3klQOaZqKXBIIYx8h7+1BP8GGdMfUj+o=
Subject key identifier: 8E:36:DA:A7:69:E5:94:2F:96:48:17:A6:BD:8F:C0:6B:46:5C:6A:DF
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 019F95126B261E7ACF72AB4098F2837BC0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number: 068D
Signing time: Fri 24 Jul 2026 17:00:40 +0000
Manifest this update: Fri 24 Jul 2026 17:00:40 +0000
Manifest next update: Sat 25 Jul 2026 17:00:40 +0000
Files and hashes: 1: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: vtQtDpUf3DkIM7Fh1i6YFkhp+BoQ8X32+KZg/dDAe9U=)
2: qkKMvBvdUjtoHS7LZo_ml5EWjhU.roa (hash: OdU1OVMFb9qYyAUFIV2T8Avxl/qa1QKVRGQ2UMicsP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:6b:26:1e:7a:cf:72:ab:40:98:f2:83:7b:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: Jul 24 17:00:40 2026 GMT
Not After : Jul 25 17:00:40 2026 GMT
Subject: CN=8e36daa769e5942f964817a6bd8fc06b465c6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:c9:89:84:57:a7:d6:57:d0:76:c7:c3:88:
84:ad:38:6b:90:5a:56:c1:6b:46:f2:ea:cb:37:4e:
bf:5d:da:99:e4:9c:b5:3e:a0:e7:f6:9f:27:df:70:
d8:d6:c8:54:e9:d1:f8:6c:02:4e:78:b9:6f:c9:7c:
c9:5b:e6:d4:e1:c4:23:bf:0d:e9:15:0b:ab:6f:e0:
99:a5:0f:91:3a:e5:ee:79:04:d1:e8:25:92:d6:69:
ca:cc:fd:46:5e:78:bd:f4:7e:5b:b8:52:98:fe:ec:
fd:32:74:b7:22:af:de:f7:2c:43:c7:96:42:0c:7b:
8b:dd:42:35:04:2f:4b:2c:99:48:95:c4:17:9b:78:
92:b7:a9:a7:3d:81:84:fc:0f:d9:53:fe:c9:32:4f:
40:b6:52:19:79:f1:db:b6:40:1b:dc:a7:af:67:ae:
0b:bb:a1:71:79:9d:74:f0:1c:61:4a:8a:c8:33:8d:
b4:58:f8:d9:e0:96:ed:69:0c:05:3a:6b:b3:aa:f6:
34:00:8d:36:c6:c3:24:39:42:3a:33:2d:76:22:6a:
31:76:11:74:31:fa:91:02:84:ed:a4:8d:10:31:a7:
0f:b4:78:a8:1a:3e:64:97:44:30:70:d0:51:e3:db:
d6:db:aa:8d:50:68:28:1c:1f:ee:4b:20:5c:8a:93:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:DA:A7:69:E5:94:2F:96:48:17:A6:BD:8F:C0:6B:46:5C:6A:DF
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:47:5b:61:5f:8d:ea:87:cc:16:6c:f2:17:37:74:63:57:df:
df:23:51:06:96:35:77:15:52:bd:3c:9a:56:2b:6e:ac:42:56:
a9:07:ba:85:42:56:d3:f1:fe:b3:a3:bf:ec:32:0b:dd:ab:24:
6f:dc:76:56:ce:ec:6a:23:a7:02:db:ce:a4:d2:1e:cf:a8:4a:
6d:73:f0:a1:01:da:9e:eb:98:23:1b:18:ad:23:e4:4c:fb:01:
fa:eb:65:b5:17:fe:e9:43:8f:79:d7:04:e6:49:cf:ea:a1:c3:
af:c1:9e:2b:ab:5e:23:c7:8b:28:b9:b3:c6:2b:42:1d:b9:73:
5c:4f:00:aa:70:9a:bd:1b:45:b6:46:5c:1b:05:0f:15:1b:dc:
bc:f0:20:0f:35:74:58:4a:a2:2b:bc:5e:97:0c:6a:c1:b4:26:
2d:14:cf:d8:a1:94:82:0b:b9:62:cb:a9:b6:ad:a5:23:21:3c:
db:5b:48:14:32:a3:b4:c8:34:7e:01:1f:d5:a8:11:3a:8d:f6:
56:43:5f:db:0b:93:ad:04:9b:e3:9a:c0:c3:f5:eb:99:2f:28:
34:9c:c5:b3:50:9f:15:da:ca:a5:9e:ba:fb:8c:4d:e0:9a:f7:
c0:67:7d:72:75:fc:99:58:6d:d7:f7:d6:63:b0:09:bd:0c:28:
5e:e7:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:48 2026 by rpki-client