Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: lzvBWAUcs9sCj1DDTPVyx0NZybQ04svnnt7oIkwAjzw=
Subject key identifier: 0B:91:95:A2:08:0B:BA:25:8F:73:4A:D9:6C:96:01:37:0A:D3:D3:05
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019F8FEC3D9B703348A72B28DAF1AF49205B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1608
Signing time: Thu 23 Jul 2026 17:00:51 +0000
Manifest this update: Thu 23 Jul 2026 17:00:51 +0000
Manifest next update: Fri 24 Jul 2026 17:00:51 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: OOhll6Q3M5xXit2FiQo0F0M5yriHTx7h/CBxcmbxNP8=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:3d:9b:70:33:48:a7:2b:28:da:f1:af:49:20:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Jul 23 17:00:51 2026 GMT
Not After : Jul 24 17:00:51 2026 GMT
Subject: CN=0b9195a2080bba258f734ad96c9601370ad3d305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:7b:73:f6:88:4e:47:2c:7b:6d:b2:3c:84:
af:5d:15:99:a6:a9:7c:1f:31:81:c2:89:31:e0:f4:
78:34:0e:af:19:be:a2:a2:d2:3f:82:3e:84:43:9e:
b6:d3:0e:4d:d7:a2:59:53:4f:1c:f2:2c:c2:5d:bc:
fc:2f:8d:71:1d:6a:f7:9c:e1:a0:3b:12:64:50:c5:
a0:1b:59:8b:34:15:47:1d:c9:3a:31:bf:91:b2:00:
db:40:6e:97:f5:08:8e:50:99:4f:c3:b6:8a:90:c0:
09:40:63:52:7c:68:72:74:d5:84:28:78:7f:ca:2d:
be:96:de:29:e9:4f:0e:bf:87:7d:01:c3:d9:c4:3b:
cd:ae:30:b7:9c:8f:f1:29:a3:c4:0a:1d:f2:ba:b0:
5f:a2:c9:e7:2a:e1:4f:06:08:f8:5b:61:50:f0:ff:
e4:c8:b3:37:a3:88:41:c6:0c:d0:25:04:66:ef:69:
cd:83:f4:9e:31:cf:0a:2f:f3:fc:de:8e:73:2f:d9:
66:93:42:af:28:f5:c9:70:c6:50:62:b7:fe:49:29:
2f:ae:c8:93:31:c6:7a:4d:8a:9c:41:d5:17:05:d0:
a3:c2:b0:f5:f2:76:b6:fa:01:cf:e5:7e:03:ba:a9:
26:97:80:37:ae:b9:68:18:c0:c4:5d:5f:ee:8f:85:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:95:A2:08:0B:BA:25:8F:73:4A:D9:6C:96:01:37:0A:D3:D3:05
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:04:89:b8:59:7b:66:6f:2f:43:cc:35:d3:99:de:32:58:
af:26:5a:6f:10:fc:76:5c:52:f0:ff:6c:e6:6c:bd:28:33:0c:
e3:91:5f:be:47:ef:43:49:c5:3b:29:30:66:06:87:63:46:35:
de:14:ab:07:eb:b1:d5:67:6c:ec:98:36:03:ef:81:63:18:e4:
be:bc:ca:f4:bb:1a:39:1a:1c:3f:8e:2d:a7:ef:5d:b5:0a:1c:
4e:f4:7c:d3:44:90:bd:c5:16:a3:45:69:77:a8:e6:26:3e:c9:
68:ba:23:b1:91:ee:6b:e7:51:a9:fb:1e:3c:c4:48:92:01:b3:
b3:fe:a5:70:f1:cd:c0:ce:01:7f:e6:24:83:8e:35:14:38:1e:
d7:94:0c:af:3a:5c:b7:17:39:3d:25:28:b1:80:33:2f:0c:d0:
07:58:3c:41:2c:e5:9c:1f:cc:6d:30:ed:4e:08:85:b4:d4:88:
94:84:ca:8e:bf:10:41:e8:37:5a:a0:1a:ac:f2:eb:ff:76:03:
c2:4a:fb:d8:61:fc:5f:76:c7:39:c6:66:13:51:fc:56:c9:73:
ab:69:b6:20:58:06:20:64:75:73:b3:83:cf:68:78:bc:98:f4:
71:bb:b7:08:3e:ea:da:a5:ca:54:12:0f:d1:65:37:6c:11:01:
95:6e:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:41 2026 by rpki-client