Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft (raw, json)
Hash identifier: G4N8q5rmBxkKymN6R6EB/w0PdpUdl4Mg4YlboRALNAk=
Subject key identifier: 46:67:3E:D3:C9:D0:25:C5:FD:DA:04:5A:3D:7A:D4:32:1F:2D:BF:D6
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 019F954A0FEA7BEEED4D7F663DA79889DC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:26 +0000
Manifest this update: Fri 24 Jul 2026 18:01:26 +0000
Manifest next update: Sat 25 Jul 2026 18:01:26 +0000
Files and hashes: 1: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (hash: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=)
2: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl (hash: /TmG6X+NkhTiffQ8l2HpTnXeB2AURVZLjcdcm61NYO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:0f:ea:7b:ee:ed:4d:7f:66:3d:a7:98:89:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Jul 24 18:01:26 2026 GMT
Not After : Jul 25 18:01:26 2026 GMT
Subject: CN=46673ed3c9d025c5fdda045a3d7ad4321f2dbfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:9f:30:37:94:60:39:9f:33:66:5d:4a:3c:
70:55:78:62:8e:ca:9f:e6:f7:a8:cc:c4:29:e7:1d:
6a:26:42:aa:f0:e3:c5:31:0b:c0:bd:44:c7:08:bf:
ce:f5:a7:01:59:ef:ff:b6:58:1f:3f:af:49:77:5b:
0d:fe:29:79:25:6d:7a:6e:47:5e:92:45:9c:0f:54:
1a:e9:63:78:4e:d9:2d:10:87:29:ed:2f:55:8c:fc:
e0:e1:06:b5:80:10:64:1c:7b:55:36:ad:bb:8b:57:
23:68:cf:45:64:52:7b:01:d5:fd:b9:5a:7d:c0:99:
b2:dd:67:09:82:72:2b:05:64:ed:49:6f:ed:dc:3b:
9b:a2:5d:ca:13:a1:c5:ee:e3:77:2a:d8:3c:a2:df:
ea:af:52:eb:b9:b5:d4:f5:cd:32:4b:db:d8:bd:19:
0f:01:cb:ef:03:0f:15:1a:6b:60:c2:84:35:94:29:
af:ee:e8:05:29:f6:51:6a:12:ed:5c:4e:95:08:ef:
46:18:c1:48:d4:65:bc:27:fb:88:8b:60:e9:7a:7a:
14:2e:b4:81:54:55:d6:bd:bf:d4:9f:b6:97:b0:6d:
3b:df:36:0b:3b:d2:ea:53:ec:87:2f:24:3b:dd:00:
05:eb:70:a9:7c:e5:b2:37:74:a7:c8:e7:53:b7:16:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:3E:D3:C9:D0:25:C5:FD:DA:04:5A:3D:7A:D4:32:1F:2D:BF:D6
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d9:d3:c5:cb:34:4a:10:86:3e:cf:23:77:d0:77:41:8f:45:
2c:e1:bd:ec:8c:58:7c:0c:5c:aa:b6:fb:60:1b:e6:92:d0:0f:
f7:02:a8:55:b9:4b:12:e6:49:14:81:42:5c:a4:f3:f0:23:9a:
b3:94:c0:91:bb:de:6e:2d:03:fb:d0:40:8a:a8:01:4e:de:d2:
26:4a:85:f0:63:ea:96:5c:1a:cb:82:27:d0:aa:19:54:92:09:
6c:56:5a:b2:0b:29:4b:32:63:06:35:bd:e9:87:11:2f:45:83:
54:09:9b:12:72:51:67:ba:d7:38:dd:3c:07:e3:a4:9d:f4:89:
cd:40:75:ad:00:5b:76:77:77:e8:83:a5:8c:0e:52:b9:a4:6f:
35:dd:a1:db:db:53:7f:0d:89:d0:aa:ee:c2:f3:43:aa:ab:f8:
b1:85:e7:1d:e6:a0:e8:17:41:3f:46:2d:bb:83:35:56:84:5a:
fa:a2:30:74:00:e0:9e:7f:38:e1:19:15:d9:56:91:ac:ec:ca:
af:3d:48:65:1c:bf:21:c0:7a:5a:f4:e1:a2:b8:dd:32:eb:a9:
3d:e2:a0:7b:38:56:ff:30:85:38:3b:6e:0c:c5:39:2c:8f:f2:
3b:a4:44:bd:c9:d4:dd:5a:1e:d1:14:64:d0:29:cb:34:7f:d8:
25:88:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:53 2026 by rpki-client