Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: YwbTqnMYYhU9EuHGt786lfmcBaCI2iLNf6JCapwZTP0=
Subject key identifier: 18:4A:1E:AA:6C:27:B3:C7:73:EF:82:31:88:F5:28:29:15:A3:FC:BC
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019F92ED9AAC418FB2BEEFF82A33726DB023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1710
Signing time: Fri 24 Jul 2026 07:01:12 +0000
Manifest this update: Fri 24 Jul 2026 07:01:12 +0000
Manifest next update: Sat 25 Jul 2026 07:01:12 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: Mhwjl6THdP1v1NeHX0A4z1s79wFNaFRT2En3WqezNus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:9a:ac:41:8f:b2:be:ef:f8:2a:33:72:6d:b0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jul 24 07:01:12 2026 GMT
Not After : Jul 25 07:01:12 2026 GMT
Subject: CN=184a1eaa6c27b3c773ef823188f5282915a3fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:62:87:f9:9c:71:bc:f0:85:8e:7b:39:ea:
a1:de:c7:bd:50:97:b7:ff:46:79:c5:ad:aa:b4:f9:
e2:c9:b5:53:c5:6f:0d:c5:74:5a:e6:09:04:10:26:
3f:0c:64:cf:e3:d9:02:e4:e6:70:40:84:3c:56:9b:
99:0e:94:50:73:0e:06:2d:7f:54:5d:ad:22:52:11:
4a:3f:43:41:69:d2:4f:67:0e:62:16:d4:8b:c4:57:
cd:65:c7:27:3f:33:fa:c3:5e:c3:17:11:ba:30:b5:
fe:91:81:15:eb:21:85:1b:9a:98:0b:0d:49:f9:e5:
b0:97:4a:a6:59:05:0d:eb:f4:aa:8e:17:ad:c8:3a:
91:93:4e:41:09:b3:a7:ef:e4:82:71:40:98:cd:ba:
81:36:63:6c:11:bb:27:3a:90:a3:cc:a3:9b:a0:60:
d4:5e:9d:f2:d8:46:5d:05:6d:a3:70:2d:9e:02:27:
cf:86:6d:38:54:07:f9:24:f2:c0:27:b2:bb:17:1e:
39:5d:9a:a1:de:39:c7:8c:06:18:6c:4d:6e:01:67:
ab:93:68:a5:61:2e:07:68:a5:c7:e8:b4:3f:45:1d:
cb:dc:72:73:d1:9e:1b:19:2f:52:81:dd:18:84:c3:
d4:a5:38:54:8d:a2:3d:80:18:41:c0:02:05:a4:ca:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:1E:AA:6C:27:B3:C7:73:EF:82:31:88:F5:28:29:15:A3:FC:BC
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:65:e7:1f:22:77:0b:e0:44:cc:19:53:8a:d3:f3:c7:1e:1a:
65:3d:a1:81:a3:0f:34:0e:40:65:22:03:4a:68:b1:60:d1:d5:
a1:2c:fe:8f:5b:b8:e7:65:69:15:03:5d:e9:43:8c:ac:7e:1c:
56:15:c8:cb:45:16:5b:f7:e3:38:77:f6:df:20:66:c6:8d:6d:
4b:f7:8d:6c:81:4d:15:8d:39:d7:00:f2:77:35:f0:85:42:f3:
77:a1:52:a8:9d:72:08:72:c7:0f:dd:e4:d1:29:cd:ba:c4:f1:
9b:71:45:d0:77:7e:66:7c:58:43:32:fa:17:39:c9:e2:be:c4:
8c:fb:96:65:d3:3d:f6:d7:b4:3c:bc:2f:40:51:cc:d8:b0:a4:
9a:f0:3f:ca:c2:5e:16:fe:8c:c2:8a:a1:7d:55:fc:fc:3b:01:
b5:fd:6b:c2:16:6e:b1:b7:49:ec:78:72:df:02:c7:7e:87:45:
c2:1c:9b:fd:9e:0f:09:68:75:e6:c1:9f:30:98:39:4a:b4:13:
64:da:58:26:a2:d2:38:b9:61:c9:a1:e2:54:c2:b2:3a:58:9f:
7b:c6:e1:c4:1e:ff:03:95:e9:7c:36:e3:b5:74:a2:fe:2e:e1:
2b:c5:ec:c9:2c:e1:97:ea:a5:bb:cd:f9:bb:8a:d7:49:a9:79:
2f:18:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:02 2026 by rpki-client