Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: dyChNg1gVfFGdVemdX+bIVOviXVsArGvgi9sex4hPUo=
Subject key identifier: 21:4D:3E:01:DA:49:55:5E:DC:B2:5D:BF:5A:59:82:60:23:62:67:24
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019F9135F844BA58B7847958D805249E5ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 23:01:00 +0000
Manifest this update: Thu 23 Jul 2026 23:01:00 +0000
Manifest next update: Fri 24 Jul 2026 23:01:00 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: zBYu1uY4nsgR/QdSeE9Q4y6wOMdZbVvwItRF3tU2nBI=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f8:44:ba:58:b7:84:79:58:d8:05:24:9e:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Jul 23 23:01:00 2026 GMT
Not After : Jul 24 23:01:00 2026 GMT
Subject: CN=214d3e01da49555edcb25dbf5a59826023626724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:a3:b8:8e:42:69:f0:a9:22:6d:46:ad:ef:
4b:19:5c:76:44:be:69:cd:28:55:f1:d5:76:57:d8:
53:bb:22:d8:cd:80:f9:ec:94:a0:21:71:fb:55:25:
00:43:d0:bb:42:d1:e4:d6:1b:8a:3d:e7:75:05:9c:
e1:c1:9b:cf:63:f6:db:1d:77:b3:ae:02:11:22:37:
04:e7:3b:10:4d:23:5f:df:44:b1:6b:2d:6a:ea:b7:
2f:ec:58:1c:bf:30:31:f9:66:b8:2e:a3:5f:a7:ac:
cb:59:f9:5b:c5:9a:75:74:7f:3b:cc:ce:91:fe:16:
7a:a3:81:6d:1a:61:d4:fe:3f:4b:ce:4b:b7:3a:05:
80:6c:7d:18:ed:47:e8:9d:f6:84:78:62:89:65:6d:
8a:b7:e1:bf:fd:98:1c:bc:df:ae:3b:e8:58:e0:33:
0a:ad:a0:3f:81:00:11:3d:9e:d5:88:21:ac:87:ad:
a2:ee:8d:86:29:04:01:57:50:d5:1d:55:30:e6:31:
0d:3f:d8:a5:90:fe:c9:99:e6:50:e6:57:13:9f:c2:
31:8f:5a:42:dc:97:09:40:c4:36:6d:35:51:cf:13:
f3:ef:a1:22:90:04:29:99:eb:8b:75:f4:ce:d6:d7:
e9:c7:f0:52:a9:0d:8b:d4:1a:06:c9:38:31:12:2a:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:3E:01:DA:49:55:5E:DC:B2:5D:BF:5A:59:82:60:23:62:67:24
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:36:c5:ce:3b:df:07:d9:dd:c6:19:4c:e7:e0:cf:d2:89:
f5:8a:5d:c6:ae:04:a9:8c:8b:4b:4f:d1:31:e0:6d:a6:cd:79:
ce:19:cc:e9:77:5a:5b:b7:e0:97:1f:97:72:51:6c:5a:4a:37:
e5:14:9e:5e:6a:92:41:cf:a5:1a:80:18:e7:4d:6f:e1:c9:22:
b0:57:a9:fb:59:d6:4e:e9:d6:75:f0:22:da:c6:d6:5e:7d:79:
c7:67:08:4d:2c:1a:92:e1:bc:d2:05:f0:77:e3:40:6c:a4:7e:
b5:be:b8:98:3b:51:31:0a:4c:72:17:45:d5:4b:83:a3:aa:5c:
6d:4d:1d:24:bb:53:55:3b:0d:ad:5c:63:f2:98:51:3a:71:e7:
00:f2:d7:99:4f:8a:ac:17:97:94:3e:26:8d:e8:f4:04:92:e0:
d6:85:b3:0b:35:14:6f:83:6e:3f:3d:6f:51:bb:a4:a5:cc:ab:
d8:db:63:4c:80:9e:65:86:6b:ee:1e:b4:91:bc:ed:39:c6:04:
7c:4b:33:79:13:9b:ac:49:86:c3:b8:a2:c8:3a:53:51:54:05:
dc:2f:e9:be:89:ee:c7:ef:4d:5a:e7:90:85:23:ee:c5:3e:07:
1c:66:c6:a8:81:ab:17:1d:20:47:f4:d4:c2:37:bc:de:62:1c:
6b:8a:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:11 2026 by rpki-client