Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: NB+6ZCnvJeW+8b+6pKLtjBBIAkAgPn6ql0Yf8oUTcqQ=
Subject key identifier: E9:CE:2D:FA:F4:E9:3B:90:53:B1:B8:4C:09:A5:47:7E:DE:21:E5:93
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019F92B67222C9263B9EEF2457FCDEB200D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0EFC
Signing time: Fri 24 Jul 2026 06:00:58 +0000
Manifest this update: Fri 24 Jul 2026 06:00:58 +0000
Manifest next update: Sat 25 Jul 2026 06:00:58 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: mRYD7hsh8nkYj2pFq7Ru2kXdgou7UtcZDfVs4OWMCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:72:22:c9:26:3b:9e:ef:24:57:fc:de:b2:00:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Jul 24 06:00:58 2026 GMT
Not After : Jul 25 06:00:58 2026 GMT
Subject: CN=e9ce2dfaf4e93b9053b1b84c09a5477ede21e593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:5d:86:ac:18:63:e8:18:c7:ae:81:58:15:
ea:82:db:c8:c1:f4:99:42:83:0e:c9:39:de:18:b6:
9c:1a:63:04:9b:1d:05:4c:f6:7f:08:aa:78:39:e3:
95:c9:a2:e8:36:19:cc:7f:a8:48:72:ab:98:c0:71:
6b:cb:22:91:65:73:83:f1:13:91:aa:9e:dc:5f:f4:
be:3f:8c:d2:95:ea:9f:90:28:59:0b:4d:fd:77:c2:
f0:18:f3:e1:4c:70:5c:0b:bb:cf:8a:44:b8:71:c9:
bf:83:be:d8:87:89:36:df:be:39:2f:7b:7c:77:67:
ec:a9:ec:1d:36:03:b5:9e:13:33:95:fb:bb:2f:5b:
29:f5:72:85:09:69:d9:93:db:21:90:a8:22:8f:78:
79:03:1e:8b:6b:99:da:a1:e4:06:b5:1b:ab:88:60:
22:69:00:0e:96:d8:f9:7e:9d:c4:00:5b:c0:ec:b7:
ce:0b:69:88:ee:11:b9:f8:f9:8a:20:76:7d:df:94:
56:e8:b4:c4:ba:fe:67:3a:4a:5c:ef:cd:e1:2a:eb:
51:24:55:32:25:8a:e4:68:56:04:ab:7c:1c:b3:3f:
ee:5e:36:f9:a9:4e:e0:9d:25:77:50:4b:74:28:4e:
7f:0c:3f:10:39:0e:64:8a:87:c7:ef:b5:c0:12:a8:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:2D:FA:F4:E9:3B:90:53:B1:B8:4C:09:A5:47:7E:DE:21:E5:93
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:ba:c1:39:17:eb:f8:72:dd:ac:a1:e3:e5:25:23:5f:6a:
b7:15:a6:61:c0:82:2e:02:d0:f0:5b:88:04:fa:be:6f:bb:b6:
f2:c7:69:8b:2c:a1:c6:99:5e:07:42:45:db:0b:00:54:f6:9a:
2b:bc:f4:ad:f3:d3:1e:f8:80:c5:62:70:af:a0:bd:5a:9a:26:
31:3f:42:ed:c8:f6:58:7e:6e:6b:d3:a5:d0:b6:dc:f4:8b:49:
f6:df:b8:51:3a:ba:52:9f:92:62:7b:ee:48:9b:58:06:43:e6:
16:58:85:54:56:e5:74:57:bd:48:4d:c2:3c:e1:45:d6:19:a4:
9c:29:60:d1:a2:35:b4:a3:ab:2d:2b:f0:d7:77:66:14:63:8a:
42:2c:4a:40:92:11:6d:6a:91:76:7b:bf:67:d2:4d:1d:21:f0:
1f:bc:21:8b:d3:c0:53:4e:40:0a:e8:eb:7d:d1:28:0b:b3:04:
8d:7a:43:42:15:a7:79:f7:fd:d8:34:9e:e8:4c:3a:6e:48:4b:
4e:83:c2:ad:53:e6:20:57:50:9d:16:39:32:69:21:85:70:ff:
db:17:62:84:6e:71:51:47:7d:ca:62:8f:40:cb:03:8e:dc:2b:
95:53:14:04:1d:cd:4e:4a:68:7b:69:c8:81:57:09:38:62:4c:
00:5c:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:58 2026 by rpki-client