Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: Jbkdk0xE18p8izapIAPNrgc2/2CUeFsFQM09+Cik84g=
Subject key identifier: 96:D0:3A:02:B8:FC:D7:FB:CA:86:41:66:73:A0:A0:4D:C6:4C:E8:80
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 019F927F2EF595EF97A9CAB6528C7E6E3FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 14C7
Signing time: Fri 24 Jul 2026 05:00:36 +0000
Manifest this update: Fri 24 Jul 2026 05:00:36 +0000
Manifest next update: Sat 25 Jul 2026 05:00:36 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: +e5C+Af2ZhGHM29ufMaM6dLouxNh45ew2KzkLxSxs2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:2e:f5:95:ef:97:a9:ca:b6:52:8c:7e:6e:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jul 24 05:00:36 2026 GMT
Not After : Jul 25 05:00:36 2026 GMT
Subject: CN=96d03a02b8fcd7fbca86416673a0a04dc64ce880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:ad:18:57:ae:57:3c:24:83:d3:a5:99:ec:
ec:19:29:5a:d5:ac:4d:b1:5e:12:a3:50:af:4f:57:
a2:ff:19:69:d4:73:5e:45:0f:81:2b:c2:0e:90:1a:
ca:50:9d:34:14:85:7e:e1:b2:2d:94:e0:f2:05:2e:
87:b7:9a:92:b4:5d:4f:c7:5d:5f:cc:3b:33:01:99:
54:d2:6e:7c:6b:d6:54:de:12:d7:80:59:e7:f4:d4:
d6:47:77:2e:6f:5b:4b:6b:c2:47:72:2e:a2:84:2f:
d2:30:ba:aa:28:b2:9c:cc:bb:e4:c9:c8:30:55:43:
51:53:40:d1:e7:d5:a5:6d:0d:b9:87:7a:4f:41:a0:
aa:d9:b1:79:10:e7:14:ea:d2:05:99:e9:87:1a:a0:
3c:db:b4:51:16:b2:3b:f9:06:b8:61:4a:34:31:d2:
41:27:45:eb:4f:33:8e:6b:3e:3e:5a:f5:d5:f4:b5:
b2:2d:4e:85:2c:8b:03:8d:42:25:1c:3d:5b:bf:d2:
16:fd:09:f7:83:aa:6b:e0:a2:13:6d:33:7d:1c:71:
87:52:73:ce:5f:cc:d3:a4:d6:a8:23:7b:a3:92:5b:
ba:af:fd:80:e5:02:9f:98:eb:78:44:87:54:11:76:
f9:b8:8c:48:70:05:6a:3c:5b:88:52:45:39:48:b7:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:3A:02:B8:FC:D7:FB:CA:86:41:66:73:A0:A0:4D:C6:4C:E8:80
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:0a:13:56:5e:b9:3e:37:b2:f1:13:21:64:24:a4:21:22:
c9:61:7d:4e:86:ce:dd:88:99:b5:0d:2c:3a:56:7e:78:1e:4d:
83:b4:91:5c:dc:98:22:da:94:95:b1:77:36:f3:5d:b0:66:05:
4e:97:89:dc:ba:80:ba:b8:7c:69:bf:5c:6c:ea:72:5d:53:97:
d2:29:7d:9b:74:fb:70:74:71:fe:2c:18:70:59:1a:ee:33:8d:
5d:3e:86:3b:be:3c:71:5d:d3:97:ff:c7:99:44:af:06:c7:3d:
5e:90:36:e0:ba:e1:66:83:c0:9c:76:7d:4f:29:71:12:1f:fb:
e1:48:5e:d8:fe:5c:07:09:98:a2:ab:69:70:2b:5a:12:9e:91:
07:60:e3:4f:31:9d:86:4c:59:e1:5a:b6:a7:fa:c3:fc:1c:97:
33:da:c3:58:21:93:a8:f9:be:3d:1a:50:5a:2c:4a:5b:74:75:
dc:53:25:2d:51:58:87:24:09:a0:df:93:c7:ac:7f:aa:1a:d6:
e4:e9:82:21:d6:2b:f9:b0:31:8b:e7:49:3e:4e:dd:fd:d9:72:
4e:e1:bb:f3:3a:e9:ef:9a:64:e1:cd:5e:a6:45:fd:f2:fe:c5:
ad:bf:62:ab:37:18:bc:e1:3a:6c:5a:4c:95:a0:36:b7:bc:00:
94:4d:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:47 2026 by rpki-client