Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: dwxyqe/O2GlySjx7rJDVxJZ/EasKbvz3goMMMkzscgg=
Subject key identifier: 5B:9B:5F:E2:B0:C8:3E:F6:A1:90:79:86:8E:DD:50:EB:2D:D5:28:5F
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019F94DBA9B4E372E91A3E1124E15DA4DB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 16:00:51 +0000
Manifest this update: Fri 24 Jul 2026 16:00:51 +0000
Manifest next update: Sat 25 Jul 2026 16:00:51 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: zSR2EDEl6v3kKvujpUR7aeCCFBX1Fwrps6kk9nrIKrs=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:a9:b4:e3:72:e9:1a:3e:11:24:e1:5d:a4:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jul 24 16:00:51 2026 GMT
Not After : Jul 25 16:00:51 2026 GMT
Subject: CN=5b9b5fe2b0c83ef6a19079868edd50eb2dd5285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:06:83:5b:a9:bd:fe:5f:70:99:2b:44:88:
7b:ae:1d:69:66:f5:f6:07:3e:0c:54:f7:3c:99:8e:
57:de:61:c6:59:97:55:68:d0:94:d3:67:90:c5:7c:
58:c9:0e:21:5b:d9:44:57:11:87:d5:1a:e6:ac:3b:
a1:c8:20:6d:fd:26:f8:39:fb:cd:4b:13:32:02:77:
4d:1c:c8:9e:fa:c2:f2:bd:6a:b2:a2:05:7d:e8:87:
32:f5:29:5d:6c:8a:a6:61:4b:f6:12:f3:37:4e:05:
69:3a:b3:64:a5:35:72:f5:67:75:d1:64:14:bf:eb:
2b:c2:45:87:5c:2e:f7:46:a8:be:8c:5e:d1:30:58:
64:c2:aa:e5:d9:34:21:3a:74:bf:c1:f1:48:6c:2c:
23:62:41:b6:29:f7:fd:54:bf:10:14:77:58:eb:bf:
27:7b:d5:70:a4:fc:79:94:30:72:45:b1:d0:dc:1a:
7e:80:44:0e:23:72:42:2e:7b:b0:6d:3b:03:c1:e5:
d3:85:6f:d2:74:73:30:a7:75:9e:38:a0:33:40:92:
2c:a9:58:00:90:a8:eb:d7:29:4e:66:de:9c:f5:15:
84:69:ba:75:63:cf:7c:0d:b4:1f:b3:74:e9:66:ff:
07:45:d0:f2:df:ac:aa:8f:39:4b:3d:88:14:a2:12:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:5F:E2:B0:C8:3E:F6:A1:90:79:86:8E:DD:50:EB:2D:D5:28:5F
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:bf:80:5c:1a:d3:8f:c9:e7:b5:76:3f:3a:63:2b:cc:36:
70:76:15:f9:3c:c8:0b:dd:48:f9:79:c0:09:22:d7:b5:65:b8:
cf:cf:4f:5c:13:db:5f:bc:93:51:95:a4:05:fb:66:e1:e1:d7:
c8:4c:05:4f:a2:eb:d5:6b:91:ec:bc:e7:62:c2:dd:73:e3:18:
e3:8f:32:e7:95:b4:79:e0:c8:a6:b6:c7:63:2f:99:89:a7:6e:
a2:45:c9:2d:ae:e4:1a:10:6b:3a:7b:e3:b6:da:64:7c:63:a1:
75:71:cc:41:7b:da:55:b6:4c:1e:27:ff:9d:36:03:52:3a:c1:
16:21:df:94:a5:b4:02:67:81:78:0a:5e:79:43:20:3a:47:ea:
56:fa:9f:1f:73:0e:8b:34:d7:d7:a8:4e:73:f5:66:2d:fc:ff:
64:ca:5c:d1:3f:68:f4:fe:01:b5:96:ee:91:a5:07:71:ff:83:
0f:5b:9e:6d:9c:88:af:f9:78:65:4a:8f:2e:56:51:53:75:16:
a2:fc:23:8a:2d:84:6c:39:bd:ba:78:e0:60:d3:69:70:51:09:
de:12:f7:1d:ef:7a:3f:1c:51:95:74:cf:a0:ee:69:c2:95:f5:
ab:22:93:8e:94:97:b5:5b:6f:bc:1e:8b:d0:d8:7b:c1:19:17:
cf:ff:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:04:08 2026 by rpki-client