Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: 55VzEQ3QW/id9rivrovqvNetUEbcBukmcBZ9St+Fk+0=
Subject key identifier: 8C:78:71:BE:44:AA:51:26:C9:D3:BA:0B:5D:76:E9:88:70:B9:7D:35
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019F9248912ED1F43778161D421C6920FC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 092A
Signing time: Fri 24 Jul 2026 04:00:56 +0000
Manifest this update: Fri 24 Jul 2026 04:00:56 +0000
Manifest next update: Sat 25 Jul 2026 04:00:56 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: PSQKgSMvKb73F+rMS/JnPujPJPys/a1eYDzsK8aqbR4=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:91:2e:d1:f4:37:78:16:1d:42:1c:69:20:fc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jul 24 04:00:56 2026 GMT
Not After : Jul 25 04:00:56 2026 GMT
Subject: CN=8c7871be44aa5126c9d3ba0b5d76e98870b97d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:80:cc:66:0a:ae:9b:53:6d:1d:37:27:2a:
8c:c7:10:1f:f1:06:d5:1b:f2:d7:5a:c8:63:6e:1f:
32:5a:ed:7f:52:ea:20:bf:50:a8:a2:fb:9d:d4:2b:
fb:03:3b:44:7f:e4:3d:ad:0f:f7:2c:ca:8d:3e:2d:
7b:22:3a:68:bc:ac:8b:6d:d5:f6:52:5a:30:24:23:
ed:4a:f4:e7:be:be:1a:ab:54:e5:0a:e2:8d:28:13:
ee:ce:05:ce:b9:63:d2:fc:f3:4d:10:4d:2d:aa:58:
e6:c1:80:e0:73:51:fd:a3:b5:c2:56:fa:a2:ab:fa:
e1:81:d2:e9:12:c2:01:38:7b:9f:c0:62:92:53:0b:
9a:9f:86:37:16:d1:8e:43:6b:75:06:1f:69:40:5a:
a8:44:86:93:2c:a4:63:17:85:50:b5:90:cc:e9:76:
22:94:0c:a6:6a:12:ef:14:3e:87:49:12:7b:7e:9e:
8c:e7:0a:9d:d0:08:40:26:f8:6f:15:1f:ed:71:c9:
29:8d:88:8a:25:79:9e:ef:4c:91:15:8e:96:96:48:
92:0a:06:47:89:78:ec:df:37:e3:b6:1e:8b:16:d3:
85:c2:19:8a:e3:f6:fd:05:bf:39:34:ad:3c:8c:11:
43:a6:f2:51:eb:58:27:8d:da:77:f8:86:67:4d:9d:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:78:71:BE:44:AA:51:26:C9:D3:BA:0B:5D:76:E9:88:70:B9:7D:35
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a3:f6:f5:33:57:5d:b1:af:4c:29:54:0c:48:01:4b:4b:22:
3e:1a:93:97:4f:22:91:e3:ee:bf:cb:59:91:b3:dd:1c:26:df:
61:e0:44:ba:0c:75:4d:6e:5b:b2:0a:57:a5:27:75:43:12:07:
53:2d:46:9a:d6:d4:f4:e3:16:90:b0:4a:79:84:61:b5:0e:b9:
da:99:32:bb:39:3f:13:7e:57:a6:ec:36:42:a3:44:ad:6d:13:
47:43:ea:f2:a6:98:7d:a7:f7:d5:19:57:66:05:eb:b2:2d:42:
c0:d4:ab:ff:8c:a0:40:32:85:3b:69:db:fb:69:03:90:77:d6:
6e:9d:da:b0:e8:ba:4d:f9:d9:fb:7d:9e:66:b4:c0:a8:ce:ed:
24:cb:cf:e1:b4:87:35:51:43:c9:1b:aa:bb:9a:42:3a:01:a1:
b1:b8:ac:7c:67:e0:48:77:38:80:d6:28:bf:fc:38:7a:f4:d4:
6d:24:26:e8:39:1a:a7:07:71:96:3d:9f:ec:2c:7a:81:3c:eb:
0e:af:eb:e2:d4:e8:f2:34:24:3e:18:71:cb:c8:67:fc:ac:6d:
5a:16:a7:38:6a:6b:17:cf:71:93:bb:fc:99:73:f0:4e:1f:3f:
21:43:b6:dd:98:ce:b8:f7:a6:f4:d9:06:4e:93:d5:5f:df:5d:
0c:56:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:29:22 2026 by rpki-client