Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: 2PA71PtltvA+MQaH/3TE/Myq/rW2Zvt6UXVYr4hTSh4=
Subject key identifier: D7:5E:BB:B7:20:22:59:06:62:A0:CF:D3:5D:BB:9A:34:DC:EF:11:C2
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 019F93FF893EC10070C0DFBFAB1AC2CC49BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 1429
Signing time: Fri 24 Jul 2026 12:00:25 +0000
Manifest this update: Fri 24 Jul 2026 12:00:25 +0000
Manifest next update: Sat 25 Jul 2026 12:00:25 +0000
Files and hashes: 1: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: InnGIcN2iudhAx6aFdl8t/5pg3BnlbJ3W9ox3/alfe4=)
2: u-PjOq1WjK6PsqFBvXy59id7R_I.roa (hash: Pz8fOepb3H13pqdKO3L1FSkff2yUOqZGUk6QeB6m10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:89:3e:c1:00:70:c0:df:bf:ab:1a:c2:cc:49:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Jul 24 12:00:25 2026 GMT
Not After : Jul 25 12:00:25 2026 GMT
Subject: CN=d75ebbb72022590662a0cfd35dbb9a34dcef11c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fe:c5:02:a9:5c:f5:45:39:57:01:8c:56:2d:
84:f3:54:9b:f2:aa:90:20:c2:e3:20:7c:f8:ce:ee:
41:9f:07:c3:92:00:16:ff:3b:26:64:36:85:a2:c3:
25:5f:8e:2f:9f:f7:5f:2c:f1:47:56:93:02:ee:2c:
fd:97:c8:ef:52:95:aa:7f:3b:ca:f5:57:22:a1:1e:
e1:f2:ce:26:6c:e3:fb:52:e6:d5:e0:fd:23:8d:1f:
a4:7f:90:2e:e3:7c:d6:4e:5d:d9:77:a5:86:51:dc:
c5:f4:aa:23:d8:2d:4d:ae:02:a7:7b:64:84:46:24:
95:28:64:82:26:f7:b7:a7:4f:af:ac:8f:94:77:5e:
cb:c4:78:48:cd:03:7e:3c:9b:5e:eb:2d:83:27:6a:
25:fa:dc:9f:96:02:2a:93:66:39:b5:c9:6e:3c:1e:
b2:81:00:af:0e:8f:64:f1:d3:e0:fd:c6:ae:68:56:
6b:4b:f5:0c:32:bd:c1:6c:a0:32:cc:fa:86:12:89:
ca:79:e1:b6:29:cd:fe:f6:a6:40:e7:a0:5b:75:0c:
5d:cc:f8:92:7a:56:06:5a:0f:d7:af:66:94:fa:c6:
6d:c8:b1:f5:ba:78:ca:82:0c:6a:10:fb:ce:6d:63:
24:ed:75:61:d6:e3:2a:9e:c4:ce:e7:03:4a:83:61:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:BB:B7:20:22:59:06:62:A0:CF:D3:5D:BB:9A:34:DC:EF:11:C2
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ec:51:c7:1b:2f:06:c2:06:b6:ed:02:fe:cf:3e:4b:06:45:
5c:25:ba:42:11:7a:31:b1:95:59:fe:23:41:1b:2b:77:69:34:
5e:97:40:4a:82:a7:8a:79:bc:57:de:8a:1f:43:7f:79:bb:5a:
1f:c6:e1:ed:c8:ab:08:5c:2a:56:3e:ba:81:b7:b3:27:55:3d:
4f:8c:08:70:11:f1:d0:53:be:66:42:13:2f:4f:e8:9d:c2:e8:
2c:4d:d1:3d:56:c9:e9:56:19:05:43:f6:68:04:1b:96:f9:31:
d7:22:0d:d9:f2:10:36:c3:48:3f:ec:24:d2:a6:b1:dc:6b:83:
0e:02:73:17:bd:a3:fd:d6:22:07:1d:ba:ed:a1:28:dd:56:a2:
91:bb:69:e0:33:4c:05:35:3e:ac:42:a4:ed:c9:04:cd:74:6a:
40:2e:fb:0d:56:4f:f7:cd:b0:07:af:8e:f4:88:83:15:53:14:
27:8b:50:b9:14:66:c7:56:14:99:77:e9:11:79:d1:a5:3f:18:
b2:32:55:37:88:9d:bb:ab:9b:08:26:70:19:5f:dc:d6:69:e9:
c7:e5:e5:f0:7e:25:d5:d7:03:ce:7d:cb:17:16:00:20:a4:13:
63:22:26:84:21:40:66:2a:f2:47:66:38:6a:4f:d7:bb:63:7d:
26:d9:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:56 2026 by rpki-client