Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: S9bkr1OFcW8BgBfjyTeaekCuDcBWpsvyTK3LStA6vZE=
Subject key identifier: 2E:EA:5A:6A:E7:55:BF:1E:89:C5:AA:D5:1E:53:80:01:DE:1D:BB:69
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019F90C83589BD7F5917C460DBEC7378B359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 189F
Signing time: Thu 23 Jul 2026 21:01:07 +0000
Manifest this update: Thu 23 Jul 2026 21:01:07 +0000
Manifest next update: Fri 24 Jul 2026 21:01:07 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: RbI4uINVQJD9UGS6HaNcPJT9dXvdKfY4l4MDEWeMFcI=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:35:89:bd:7f:59:17:c4:60:db:ec:73:78:b3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jul 23 21:01:07 2026 GMT
Not After : Jul 24 21:01:07 2026 GMT
Subject: CN=2eea5a6ae755bf1e89c5aad51e538001de1dbb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:f0:b6:5f:75:c0:4b:37:05:4d:1b:31:1d:
7d:d5:cf:38:22:5e:ea:ae:bf:1d:e3:d4:15:60:2f:
fe:c6:a6:2e:6c:d5:b3:78:73:7c:06:46:a6:0e:e5:
68:c1:50:a5:1d:bd:37:1d:00:f2:f1:2b:64:1c:14:
41:04:c4:5f:9b:bb:ea:c4:74:2f:99:ab:e7:8b:ff:
5a:02:4e:ec:20:e3:e5:f9:4f:fc:de:8f:6d:00:de:
d8:dc:c2:f6:86:56:f7:d7:ce:5f:c3:4d:56:89:75:
ef:17:10:bc:13:34:f6:45:a2:80:47:c9:f7:c7:82:
6d:a3:f9:9d:f6:d8:06:8a:17:b6:11:63:98:60:fc:
5f:f4:d4:d6:f3:4b:62:e7:a5:25:ff:0d:2a:94:46:
43:b2:fc:c6:54:5e:0b:e1:ad:ab:58:2a:62:9e:37:
8b:85:d3:d4:43:aa:71:4e:73:60:fa:1d:66:5f:9d:
19:f2:4f:39:fb:38:ce:55:67:5d:2a:e2:34:56:30:
01:a0:9a:57:c0:fe:eb:e7:ab:51:9e:7a:6f:c3:93:
22:ed:33:0e:ee:17:16:ab:c7:37:43:93:3a:e2:09:
50:04:4f:0a:49:16:67:19:51:94:bc:00:aa:3e:02:
03:6e:39:d4:6d:be:55:b5:ca:aa:6f:f3:98:15:22:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:5A:6A:E7:55:BF:1E:89:C5:AA:D5:1E:53:80:01:DE:1D:BB:69
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:55:ab:a5:31:82:f9:3e:c8:cc:8b:b6:e1:51:21:ac:be:d1:
68:f9:a3:5f:83:b8:de:a7:55:1e:22:2d:1d:30:2f:1d:7a:be:
df:54:7d:de:25:40:34:85:0c:3b:9f:a2:e5:e4:57:af:81:e3:
be:13:09:5a:f5:a6:fa:43:7e:0d:81:44:93:84:a6:53:23:0e:
79:74:bd:ff:bd:12:6a:3c:3a:00:9f:54:dc:bc:73:97:d5:93:
55:af:e8:84:bb:ce:ea:84:70:1c:ec:ac:90:8c:d8:83:47:ea:
84:ab:48:db:14:91:53:d8:f2:c4:0b:6e:1b:4a:c6:b1:c4:03:
5f:df:3b:6e:b2:4d:9f:04:52:48:79:79:60:25:b1:32:90:96:
02:66:2f:5f:fd:bb:09:91:e0:bd:6f:66:3e:2c:e3:e7:7a:4b:
0e:15:f8:44:39:92:cc:72:76:a1:c0:ba:92:ff:9d:1c:d1:79:
1a:ac:ac:e1:40:a0:37:43:53:53:8b:b6:eb:57:43:a6:b1:dd:
86:28:06:22:43:7e:a8:ac:2a:0b:ae:59:27:5a:b2:22:bd:1f:
49:4c:5e:21:b5:12:a5:fe:05:51:c9:7b:b0:99:5b:b6:f3:ab:
83:a7:68:de:0a:63:49:d2:c8:41:d8:fa:c5:14:11:46:ae:2c:
c4:bb:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:12:08 2026 by rpki-client