Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: DV7ZO/guvXLccMayCesUWpM+s7DznjeOd7Qk1Q61Ot8=
Subject key identifier: 5D:E1:5D:9B:65:1F:D4:C6:76:D2:55:B8:42:71:60:CC:7B:97:21:C5
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019F90C79CB290C38C33D220BB2BCB34D547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 19D8
Signing time: Thu 23 Jul 2026 21:00:28 +0000
Manifest this update: Thu 23 Jul 2026 21:00:28 +0000
Manifest next update: Fri 24 Jul 2026 21:00:28 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: UyRFxO4ktQWRWXHFs/MAZlN1tSP/4GulJU3VYuHQ8Vw=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9c:b2:90:c3:8c:33:d2:20:bb:2b:cb:34:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jul 23 21:00:28 2026 GMT
Not After : Jul 24 21:00:28 2026 GMT
Subject: CN=5de15d9b651fd4c676d255b8427160cc7b9721c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:af:a0:8e:25:f3:17:c5:ca:3b:31:e3:56:
0e:93:88:0a:18:04:fa:fc:2c:e8:01:ab:6b:49:ad:
cf:ed:aa:17:9b:58:b4:76:41:f5:0c:3e:09:67:f7:
6d:76:8d:9a:4d:45:50:38:6e:04:ca:85:00:24:77:
f5:a5:ca:f6:28:67:d3:86:dd:6d:7c:17:bb:6f:9b:
bd:1b:4b:c7:b8:35:a6:ec:73:81:87:0a:40:0e:54:
2a:5f:1e:1e:8b:0d:e7:dd:bb:72:6c:aa:ab:3b:09:
72:00:37:95:21:00:d7:d4:76:b5:43:aa:83:75:59:
83:13:7a:ce:71:08:25:2c:f9:ce:ac:e1:01:a9:45:
6a:40:87:65:8e:7d:d7:2d:54:10:a8:6b:76:62:8b:
46:a2:bf:9d:1b:d4:88:e3:e5:3b:e7:d3:92:af:68:
93:a9:78:12:fd:bd:62:07:7d:3b:74:55:19:e6:90:
b2:1f:74:bc:aa:57:45:19:3b:79:06:f4:a0:41:3b:
76:5b:8e:1d:f6:3a:c7:f6:9b:de:b9:23:4f:f5:87:
ce:f4:f6:af:c1:12:df:79:6b:ce:89:31:75:57:3d:
c8:12:72:59:fc:77:50:08:52:24:93:b2:e9:e5:d4:
74:f4:88:10:5c:2f:54:39:0b:54:79:95:32:6b:35:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:5D:9B:65:1F:D4:C6:76:D2:55:B8:42:71:60:CC:7B:97:21:C5
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:75:b7:8a:c2:5f:ee:4d:d4:cd:c2:41:b9:55:24:1d:10:
c6:ea:1b:35:77:dd:42:d7:18:72:a9:a3:7d:68:86:14:db:e1:
93:18:59:df:a3:76:10:fa:e9:8f:26:5e:2b:b6:3f:43:3e:81:
38:30:55:f8:ec:d1:3c:06:53:be:93:09:81:29:ae:90:b7:22:
52:40:d9:85:6f:5e:c8:7e:48:19:91:27:09:5a:5a:86:02:17:
37:23:33:14:dc:21:0a:c5:ca:27:11:f5:f7:be:49:6a:43:44:
4b:df:c3:6d:12:1a:e0:c7:d5:53:83:cc:67:76:3b:3c:21:b0:
d5:25:5b:b1:2c:a3:7c:23:8f:b6:fb:07:78:d0:8e:18:00:ac:
c2:83:79:db:b7:10:dd:cc:c2:c9:e0:c9:d7:42:ad:a7:d4:20:
f8:31:08:a8:77:64:5b:b8:dc:27:8a:e4:c3:7c:0c:51:78:ec:
3c:12:e1:b5:19:eb:c6:8c:c5:99:94:c9:38:bf:15:87:3d:7f:
95:76:b2:2d:05:5c:a3:c4:84:3d:59:69:f9:97:ce:c4:0f:63:
ea:9c:25:0f:a0:a7:71:03:24:3f:58:aa:5a:63:cd:29:46:5a:
f4:d8:c4:b5:14:cc:d1:12:25:14:41:46:a8:09:31:dd:f5:22:
35:46:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:41 2026 by rpki-client