Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: Fch/U1vuhSEaVAxUXpT6paJHcyOgUW5lvE/4GuteZeQ=
Subject key identifier: B4:9D:DE:6D:4D:C5:24:D6:C6:EA:B9:CB:1A:68:8D:1B:92:32:30:66
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019F935BCD3DA93F39CD60ACDF8C2DEFEF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 03B6
Signing time: Fri 24 Jul 2026 09:01:34 +0000
Manifest this update: Fri 24 Jul 2026 09:01:34 +0000
Manifest next update: Sat 25 Jul 2026 09:01:34 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: QrijApqLwwncYRi7o381uiwXareUEqBPt+KzFz3/P80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:cd:3d:a9:3f:39:cd:60:ac:df:8c:2d:ef:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Jul 24 09:01:34 2026 GMT
Not After : Jul 25 09:01:34 2026 GMT
Subject: CN=b49dde6d4dc524d6c6eab9cb1a688d1b92323066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:85:49:de:00:dc:e1:f5:86:98:b1:24:da:
69:a3:05:1d:53:ad:fc:77:87:4a:a1:58:43:3a:60:
65:1e:c6:cf:af:23:ef:ae:a6:01:a6:a6:f3:3a:1d:
c9:31:16:79:c3:bc:a6:e7:b2:b8:43:52:15:2e:b7:
cb:43:fa:18:9d:95:31:3f:96:b7:28:c9:b9:d6:6d:
38:85:23:88:e9:3e:16:df:a4:ca:eb:31:5a:60:a5:
3e:6f:96:d0:02:d0:a1:49:48:8d:db:a8:c2:3a:7a:
ad:90:b9:7b:0e:47:6c:86:23:dc:37:8b:1b:b2:e8:
8f:f9:66:a4:6b:db:58:1f:7b:c3:2d:86:9c:07:d3:
96:b1:fa:f0:18:35:4f:36:77:50:62:fd:e9:11:82:
39:9a:a1:4b:a4:21:c4:84:c0:e3:dd:13:04:2d:ac:
be:6e:48:d9:db:d3:1c:20:b3:97:ad:81:bf:c8:b8:
b2:72:cb:26:b5:cc:ef:f4:87:5a:c9:d7:80:4f:7e:
0e:0c:20:26:12:8f:87:00:6d:bd:0d:d6:97:9c:5b:
92:1e:95:94:04:01:c4:48:a3:dd:a9:85:e8:21:6d:
d3:e7:0b:e5:a6:b3:e6:d6:6c:70:5e:de:78:c2:44:
ce:b7:0c:ea:92:ab:d0:28:1e:cc:82:a8:8a:9d:63:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:DE:6D:4D:C5:24:D6:C6:EA:B9:CB:1A:68:8D:1B:92:32:30:66
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d0:7e:01:7e:60:69:bf:71:af:29:78:aa:d8:69:15:dc:fe:
a3:bc:12:fe:89:f8:c1:e1:57:3b:50:62:54:0f:15:98:c4:7b:
b1:fa:db:9f:42:54:9a:a3:5d:38:b0:ba:97:d9:40:13:d8:17:
0f:71:5b:d3:40:f3:90:fd:67:24:07:3d:2c:be:4f:b4:74:a2:
c1:4c:43:89:d8:a8:33:4c:85:87:bc:a4:3f:fb:fb:07:6b:a8:
ca:35:ad:b8:15:e2:6f:2c:94:b7:26:b8:d5:e5:db:2c:ab:67:
fc:4b:86:82:c2:dc:4e:80:e6:6d:10:50:10:81:6c:16:a7:67:
13:71:20:63:71:fb:48:f9:73:18:31:8c:14:e0:bb:c4:72:11:
21:e6:f9:44:2d:c3:55:04:f5:fc:b8:5d:65:bd:fb:dd:c6:3f:
00:20:45:ad:43:d9:69:fc:68:df:3d:9b:92:30:c0:b4:bb:d5:
64:49:fd:ff:0a:c5:9e:ff:d5:b1:7c:35:7c:cb:3b:9a:74:f7:
5a:54:30:a8:b0:bb:9d:8a:0d:7f:d2:c1:82:dc:78:f8:b6:7b:
f6:41:19:c3:a4:f4:10:53:70:ad:eb:d9:5e:46:6a:cf:9d:42:
79:8a:78:29:d9:d4:c0:b6:e4:d9:92:c5:44:99:0d:c9:a8:c2:
15:74:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:57 2026 by rpki-client