Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: OoihN4BIWOQDzueTd77Tqv1FxQYTdB8ZCVUVhAiI1Z4=
Subject key identifier: 2B:2F:87:F2:77:BE:BA:20:E1:61:20:B4:E6:66:5A:E6:E9:E0:51:30
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019F91A389A13586F336842D81C05FF2ABB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:00:41 +0000
Manifest this update: Fri 24 Jul 2026 01:00:41 +0000
Manifest next update: Sat 25 Jul 2026 01:00:41 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: fvULfOOY7JPH7HR1WpXM+1Mm9sCUF+b393VLRBt+I6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:89:a1:35:86:f3:36:84:2d:81:c0:5f:f2:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Jul 24 01:00:41 2026 GMT
Not After : Jul 25 01:00:41 2026 GMT
Subject: CN=2b2f87f277beba20e16120b4e6665ae6e9e05130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:66:cd:31:dd:e3:30:b2:eb:aa:78:b3:e3:
4c:ea:f1:7e:c0:bb:64:d2:ce:7f:32:a5:b3:df:2e:
b0:d7:c2:dc:40:7b:b3:cf:87:04:b4:70:8f:af:18:
8e:c4:d1:6a:b6:0c:73:e2:fe:0f:cc:00:6e:1e:4c:
7f:02:b3:35:9e:7f:03:57:c8:94:a7:a4:bf:5e:ff:
c5:88:60:eb:9c:a6:54:76:07:a1:25:04:74:2a:57:
ee:e4:88:6b:5f:39:7b:6e:c1:89:df:ad:13:1b:b2:
80:27:83:22:63:aa:1e:d1:58:15:0f:c9:4f:e6:b1:
ce:13:b0:34:27:6c:fc:93:86:91:ec:f2:d9:cf:1c:
e1:f2:1e:32:43:4f:3b:0f:51:c8:53:89:5b:a9:9b:
5b:1a:c7:ea:43:9d:4e:e1:a2:cd:97:62:e2:7e:25:
0b:ca:bd:f5:db:e1:84:31:62:5b:72:ac:85:eb:85:
27:db:97:3c:c0:61:04:55:5c:79:e0:a3:6e:ed:a8:
b4:c5:e3:7c:cb:62:a0:da:fb:7a:86:11:d0:c0:61:
cd:3e:d3:58:c0:c5:15:f6:7d:6a:94:0b:64:c1:82:
8c:a9:31:91:49:fc:11:1c:2e:33:b1:f3:6a:8d:b7:
b4:f6:1c:d4:4b:62:0d:10:3b:e8:a9:ac:b4:46:16:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:87:F2:77:BE:BA:20:E1:61:20:B4:E6:66:5A:E6:E9:E0:51:30
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e0:da:46:89:a5:96:9f:75:ba:f5:8a:8a:24:8a:74:62:1e:
01:fc:fa:b3:e0:7a:4d:b6:e5:f6:eb:3d:ca:1f:55:2e:6c:cb:
57:bc:9e:69:fd:29:e2:05:08:b2:0f:93:c1:f1:0d:f9:b2:e8:
34:75:05:85:b6:8b:12:22:27:94:ac:24:b7:d7:e5:81:1c:07:
23:82:58:e6:86:d6:a3:fd:4c:68:90:53:b5:5e:b8:59:2c:e6:
77:29:d2:d6:bd:b3:3f:d6:ef:3f:52:ad:9e:d8:d2:91:1b:c9:
eb:ea:2c:16:ab:66:9c:60:eb:9a:88:8f:7c:f5:d6:4b:c9:80:
6a:64:67:32:04:ff:25:18:69:2c:a5:c3:94:0c:51:75:fd:b5:
4a:59:e2:3c:5f:32:33:a5:f8:3d:ce:ea:c7:d9:49:ee:66:58:
8a:83:eb:86:9d:f5:33:2f:2e:bf:69:55:36:a4:99:0e:f0:87:
1b:4d:72:e9:54:20:65:b0:6a:95:0f:bb:fa:c3:76:e4:7f:78:
66:70:91:fd:ed:ba:de:e0:21:c5:7b:fd:ef:ba:bd:c3:a5:3d:
69:43:b1:bf:64:fe:57:84:22:36:3c:cb:a1:64:04:9d:c0:93:
a5:0d:66:5d:ed:c7:35:cd:b8:cd:3e:a3:4c:3e:29:d5:23:28:
54:76:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:47 2026 by rpki-client