Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: d7Bl2wWgoMMP3kvi9MF79G5Zna06bmfGdCgNnIttg+A=
Subject key identifier: CF:CA:E2:FC:6B:03:A2:E7:8E:4D:8E:DF:68:2B:D9:B9:21:F0:13:A5
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019F927F911D96A4D47EE138B72B95C233A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 01EC
Signing time: Fri 24 Jul 2026 05:01:01 +0000
Manifest this update: Fri 24 Jul 2026 05:01:01 +0000
Manifest next update: Sat 25 Jul 2026 05:01:01 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: LOoGYX11JyuA9nmnLr/yWCrX/mR/b1T8azFEg62syjU=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:91:1d:96:a4:d4:7e:e1:38:b7:2b:95:c2:33:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Jul 24 05:01:01 2026 GMT
Not After : Jul 25 05:01:01 2026 GMT
Subject: CN=cfcae2fc6b03a2e78e4d8edf682bd9b921f013a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:c0:62:85:98:a8:b1:04:50:1a:93:a9:df:
8d:e6:9e:bb:e8:da:fb:3b:13:f5:4f:51:76:2b:9e:
0c:f6:9e:58:52:ce:4c:a6:a3:4c:47:8f:07:40:44:
ef:f5:cb:f9:1c:de:8a:c7:ad:20:5f:37:ad:b7:e0:
a0:7f:2f:37:08:ef:72:2b:b0:20:05:18:fa:e6:2e:
e0:15:55:f6:fb:8a:07:fc:bd:7a:59:25:c0:67:ce:
6f:d6:e0:c1:da:9b:a9:0f:07:a3:98:3f:a4:1d:7c:
9a:de:b6:6f:15:7c:52:21:8b:1c:01:8b:89:d2:c1:
cf:1c:70:2c:32:25:69:2e:f5:cd:8d:1c:fe:c9:8e:
f9:29:9f:53:0e:e0:f8:2c:57:26:3b:49:0d:7e:f2:
23:72:d6:95:a5:fb:3e:ba:12:84:31:ba:8d:18:de:
0f:82:4e:18:c4:22:3b:f4:a8:40:8b:0c:a4:61:de:
3b:29:0c:97:3a:e1:72:7c:15:ca:35:a0:03:08:cd:
ea:26:67:1f:54:04:a5:8d:2f:e5:9f:3d:22:f1:4f:
a6:29:5f:16:cb:be:ac:5d:7e:ae:84:df:7b:ca:29:
8e:9e:bb:a7:02:64:64:bc:2c:c1:9a:11:bd:b2:0c:
45:66:bb:67:33:79:98:96:a2:b5:31:7e:a7:da:47:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:E2:FC:6B:03:A2:E7:8E:4D:8E:DF:68:2B:D9:B9:21:F0:13:A5
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:ac:46:29:dd:85:ec:d3:dc:a7:64:d3:f6:3c:c3:14:b8:
e1:00:cb:bc:75:cd:cb:4d:da:1e:c9:07:af:2a:de:24:e4:dc:
e7:7b:70:fd:8f:44:26:cf:eb:c8:0f:6a:8e:06:36:98:51:29:
a5:7d:51:9b:40:21:c7:54:f1:e7:2f:d0:47:14:0a:46:60:30:
e6:f5:af:c4:82:dc:8a:9d:d7:f0:bf:7c:c0:fa:32:9c:62:58:
ca:ac:d7:9e:7a:c3:f5:08:35:0a:b1:e3:24:a1:01:f7:8f:c6:
7f:e2:a5:6b:ad:14:62:2d:56:80:6b:67:b1:39:90:71:b2:4c:
c0:61:7e:91:75:e8:ef:fa:55:2d:55:39:f9:54:a2:8e:ae:0f:
c6:52:83:59:0c:d6:6b:7d:11:27:89:d6:d4:5d:da:4a:0f:55:
1b:38:07:8a:64:13:39:4a:5d:58:de:bc:30:aa:d5:1d:0f:c4:
52:a3:80:0b:e9:5c:52:df:fd:9c:70:1c:23:85:3d:89:8c:2b:
8c:e8:59:7d:62:6a:93:b3:f8:fd:11:83:75:b6:e0:1b:96:da:
ce:67:57:16:4d:76:e1:17:e4:e9:88:c0:7d:83:0b:27:af:ff:
8f:29:42:e0:b9:53:b1:4c:94:73:1d:55:9f:dd:01:0f:dd:99:
ba:27:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:21 2026 by rpki-client