Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: EtIs/I6aglkApUq2BYZUwj6qb9qHDf9qv2r0rpeqA10=
Subject key identifier: 72:AD:C1:EB:05:C4:12:43:8F:18:67:30:CB:7F:D2:EF:17:E5:C6:B8
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019F93C9235A4DC2450892120AE3D155F749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 139B
Signing time: Fri 24 Jul 2026 11:01:00 +0000
Manifest this update: Fri 24 Jul 2026 11:01:00 +0000
Manifest next update: Sat 25 Jul 2026 11:01:00 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: +KuMhzdy7c1yj/lVjND9xgBgnI49W9ErL6czEbGSpFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:23:5a:4d:c2:45:08:92:12:0a:e3:d1:55:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jul 24 11:01:00 2026 GMT
Not After : Jul 25 11:01:00 2026 GMT
Subject: CN=72adc1eb05c412438f186730cb7fd2ef17e5c6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:40:43:5b:a9:c3:77:94:4c:ee:21:01:1c:
2f:bd:d8:71:62:34:80:95:07:5a:e2:4b:c5:d9:b3:
f4:3a:d4:c9:16:20:9a:68:18:e1:83:e1:71:23:b5:
a8:41:0c:d2:75:75:b2:8f:13:cb:b5:2d:98:9b:ed:
ad:84:cf:86:53:df:aa:89:86:53:79:d4:4f:8b:99:
92:84:a3:6d:c3:32:78:2c:c7:71:cf:96:76:32:96:
38:2e:4b:fc:41:cd:34:7a:8d:b6:12:df:7d:95:bd:
68:c4:54:8f:5c:e6:5d:9b:37:7d:72:06:32:8f:60:
70:d2:cd:9a:cb:91:b4:e9:41:88:d0:b4:b8:57:3d:
c9:45:45:26:ae:a3:93:2b:c7:2d:2a:42:c1:14:f2:
d8:6d:51:b4:ea:b7:a6:5d:d5:c1:68:75:07:d0:7e:
56:44:34:83:1f:aa:7c:b4:90:51:fe:f6:06:11:c2:
d0:ea:51:a2:05:4d:a4:3d:43:06:ce:0e:cb:34:fc:
78:21:27:9e:8b:8f:ab:70:aa:06:4a:c0:45:4c:92:
ee:3f:7c:5a:ef:8d:77:5a:4b:23:1c:e6:1d:78:ec:
27:33:fb:e3:a2:08:f6:a2:3e:99:a7:a4:63:03:d9:
fd:bd:1c:b5:8a:67:e5:30:bb:62:a5:fd:8a:f9:46:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:C1:EB:05:C4:12:43:8F:18:67:30:CB:7F:D2:EF:17:E5:C6:B8
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1a:2c:65:41:cb:e6:65:fb:ab:9a:37:27:fe:83:1d:3d:5f:
cf:cd:3b:a9:5e:ac:f0:9c:a4:48:c5:4c:30:b9:80:a7:ff:be:
69:5a:40:0f:f7:1d:f8:ef:e5:98:e7:c1:ec:f5:4d:53:59:54:
0d:31:fb:8b:fb:38:1a:1d:51:fd:95:ad:f9:43:62:b1:94:68:
9a:30:21:53:12:22:2a:c9:46:60:44:76:46:ad:02:b8:92:8a:
f8:e3:be:31:37:de:38:35:22:50:50:04:01:4f:0c:65:12:a9:
08:8f:08:8f:4a:d4:0e:4e:75:f8:ec:65:ac:ba:43:c8:07:95:
b6:5b:77:8d:60:a0:27:f9:73:56:8e:b6:f2:2b:0b:1b:19:68:
fa:b0:c6:ed:f7:c4:e4:b6:4b:b7:3d:9c:20:8a:9c:9c:40:29:
4f:4e:bf:9d:6a:24:83:de:ca:66:df:0a:a1:00:ad:2f:6d:2b:
b5:40:a3:9b:50:b7:32:5c:50:d3:ef:46:71:a7:24:e9:12:5f:
b6:3d:91:db:13:18:f8:d2:b7:82:eb:3c:f2:71:54:c8:e6:db:
a8:0e:3e:f7:3e:1a:4a:1b:6a:2f:8e:54:55:37:74:15:2a:42:
5d:72:f8:2a:c0:08:49:b0:5b:e8:3d:22:43:11:28:69:80:d4:
d5:54:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:43 2026 by rpki-client