Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: No56XBNOrZgSxY2wRJ3XNOnink+0eA8qVx9gWaS8KxY=
Subject key identifier: 6C:E7:74:15:43:63:84:07:C8:1B:D3:31:77:A4:18:C7:30:2A:CD:78
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 019F92B5D00214F9AB23ED3108E45DF4CBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 18F9
Signing time: Fri 24 Jul 2026 06:00:16 +0000
Manifest this update: Fri 24 Jul 2026 06:00:16 +0000
Manifest next update: Sat 25 Jul 2026 06:00:16 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: HI4JmTovGw6RvzMUa4D/mCjsxCGEg4oyOrHtKKk7528=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:d0:02:14:f9:ab:23:ed:31:08:e4:5d:f4:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jul 24 06:00:16 2026 GMT
Not After : Jul 25 06:00:16 2026 GMT
Subject: CN=6ce7741543638407c81bd33177a418c7302acd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:f5:27:8e:ea:1a:8d:ae:06:00:fc:2d:f7:
ad:7e:13:24:e5:9c:95:81:c9:57:90:70:92:c6:7c:
3d:d0:63:bf:af:11:54:ae:12:fc:68:0f:fe:d3:fb:
ce:31:cf:24:27:49:5e:06:db:bd:96:ed:5c:d9:fb:
a4:de:03:9e:11:65:86:ac:68:fc:7e:2b:0d:cf:fd:
7f:0a:31:43:0b:fd:f9:35:b2:8d:d7:37:f7:4f:23:
03:6e:66:9f:f2:15:c7:01:68:cc:64:99:8a:b0:96:
ed:5b:19:78:68:1c:8a:33:98:7d:cc:3c:d9:e0:f3:
03:2c:46:ce:80:37:68:38:c3:a5:ef:2c:37:9e:e6:
59:1b:04:35:b8:2d:ce:00:f1:4b:22:30:3f:ba:fd:
e7:f9:26:0c:60:f8:38:36:74:43:f1:7f:03:f0:84:
8f:cb:34:92:85:9f:f0:04:0b:60:3d:fd:d4:e9:8f:
83:ce:b2:bc:d0:ed:12:bc:39:27:ec:f7:6b:39:f8:
49:a1:77:c3:ae:b2:43:db:ec:c3:80:d2:8c:b4:f2:
fe:e5:f9:92:80:48:8d:63:7b:c1:23:8a:48:47:c1:
0d:30:c6:56:7e:e0:7c:34:f2:a5:67:f7:b0:18:9d:
d6:78:0b:97:47:1f:60:cf:4c:c7:dc:df:3e:ad:b2:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E7:74:15:43:63:84:07:C8:1B:D3:31:77:A4:18:C7:30:2A:CD:78
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:17:ed:5d:52:0e:40:70:7c:fd:d4:e5:58:a3:36:7c:21:db:
2a:d6:6e:b0:f8:89:61:13:cb:94:93:49:95:1f:16:69:0c:d2:
28:8e:80:27:fb:a4:8c:66:49:e9:2f:56:7c:40:51:0f:9b:96:
47:5f:f6:4d:ba:f1:39:d6:19:db:f3:06:ac:2d:7b:c8:0e:d8:
31:60:4b:14:11:c5:73:bf:64:3c:29:c6:5f:e1:27:ed:34:66:
42:16:70:d1:c0:67:a7:e5:6b:17:a6:d6:fc:fa:c0:19:f2:da:
ca:ae:e3:06:a6:0d:0c:a0:df:f4:39:0d:57:8e:00:f8:e9:cc:
23:43:ee:6c:7c:df:fd:ae:01:b7:b8:42:c1:e1:06:1b:cc:a4:
f8:ea:c5:42:ee:c9:c6:3b:b4:fc:c5:8c:14:b2:3f:e3:69:c6:
61:5c:27:7f:c5:60:3f:68:0a:d7:43:0c:c7:40:39:f7:c8:3b:
ee:1d:b1:33:55:bf:e8:5d:dd:41:90:3f:26:30:ed:e7:85:80:
a3:e1:e4:d5:20:c9:42:fc:89:ec:2f:fd:42:25:2c:65:07:1c:
e7:30:9b:dc:6d:05:5c:2b:04:14:eb:7a:1a:7b:45:d2:08:7b:
dc:0e:77:89:11:60:82:a6:d1:52:5e:4b:46:6c:ad:fd:03:05:
88:5a:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:31 2026 by rpki-client