Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: u8OrjL+lpux7Poy6hsBApx4DEeUwB7JqKxHgtQ29s7c=
Subject key identifier: 1D:EE:1F:47:98:5E:D4:AB:99:9A:B7:10:C9:30:6A:99:E5:7D:92:8A
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 019FAC76B0FA77E7797BF053E93BA157E460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 1157
Signing time: Wed 29 Jul 2026 06:01:27 +0000
Manifest this update: Wed 29 Jul 2026 06:01:27 +0000
Manifest next update: Thu 30 Jul 2026 06:01:27 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: BZRaRz+gqwJIOtuZsoGI5tJ63DA1EEJ8wMgwYnUHAnM=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:b0:fa:77:e7:79:7b:f0:53:e9:3b:a1:57:e4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Jul 29 06:01:27 2026 GMT
Not After : Jul 30 06:01:27 2026 GMT
Subject: CN=1dee1f47985ed4ab999ab710c9306a99e57d928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:db:74:ef:c3:e7:27:70:d4:23:0f:09:08:
bc:41:76:75:a3:cc:23:0a:25:8b:e5:d2:7e:ad:25:
3f:8a:02:55:ae:ce:e6:30:9e:b0:e4:9c:40:e4:04:
8b:a4:a5:ef:83:ac:be:38:16:bf:02:a4:b2:32:2d:
54:29:fe:ce:13:b7:1d:cd:f5:1e:49:bc:c0:35:55:
a9:27:e8:fd:90:05:4e:28:6f:4f:cc:b9:1e:b4:30:
86:8e:e8:57:16:0d:94:2b:bb:df:34:61:0a:7c:9d:
39:cf:bf:66:94:22:bf:2b:e3:3b:c8:0c:e5:f0:0a:
e5:43:4e:ac:e8:60:a6:2c:58:1e:41:29:cf:5f:6d:
0f:cc:1b:76:e5:4a:8c:9d:8b:f8:85:43:4c:51:46:
d5:83:8a:95:44:31:74:b6:5c:4d:65:97:67:0d:4b:
f6:b0:5f:db:e1:7c:ed:92:d0:01:50:ba:d0:10:13:
f9:85:7f:54:a8:d9:45:3f:d5:a8:61:a0:d6:6a:91:
dc:58:55:80:f4:bc:7a:a4:50:4e:78:ff:70:28:f7:
f2:3e:82:60:8a:02:55:6f:9e:f6:9b:df:d2:f0:d1:
cf:b2:a6:e6:03:67:22:9e:a9:77:0c:23:5d:11:46:
f6:7b:0d:a0:ae:c2:69:3b:cd:93:73:21:3d:bf:b2:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EE:1F:47:98:5E:D4:AB:99:9A:B7:10:C9:30:6A:99:E5:7D:92:8A
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:68:e0:cb:d1:c4:b1:ac:9b:ce:c8:97:3d:8f:30:ec:80:86:
7a:cd:0b:45:7f:90:74:8c:3b:74:14:9d:af:3a:ee:f3:da:4a:
fb:c2:0e:c4:c7:71:29:b6:e3:44:d9:4f:4f:b9:45:63:f3:a7:
32:df:57:1b:05:cb:82:bc:aa:91:e5:c2:61:fb:00:fe:92:78:
5a:58:79:a2:85:1d:80:aa:78:6f:02:24:c8:7a:39:fa:cc:0c:
8d:ee:11:af:70:a4:37:b2:71:52:e3:40:47:41:81:1e:bf:87:
6c:14:da:1e:f6:e7:b3:3b:6c:8b:34:4f:4c:a3:48:e9:6a:20:
a0:64:32:62:7a:f4:c0:66:ef:48:ba:7b:44:b0:28:90:34:f5:
a6:9b:8f:6f:f1:02:f5:9e:2a:f9:63:24:51:b6:eb:c4:81:d8:
17:b3:13:af:de:a6:e6:d3:02:e4:46:c4:16:f7:7b:42:b0:83:
10:99:a0:ca:2a:ac:db:28:75:94:e5:9a:0d:78:a4:5c:6f:72:
33:5f:ed:e3:72:d4:96:fd:ff:85:2c:4b:fa:b0:69:a0:14:ee:
31:fa:61:95:26:f1:4f:65:09:9c:e4:49:4d:aa:9b:fb:f3:76:
8d:bc:b6:39:7f:6b:b6:e3:00:88:03:13:05:af:48:15:dd:17:
2f:f6:e8:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdrD6d+d5e/BT6TuhV+RgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OWRjMTM2MTlhYWJhN2YyMjJjZWFjYjA1ZjFiYmFjNTli
ZDNhOWEwHhcNMjYwNzI5MDYwMTI3WhcNMjYwNzMwMDYwMTI3WjAzMTEwLwYDVQQD
EygxZGVlMWY0Nzk4NWVkNGFiOTk5YWI3MTBjOTMwNmE5OWU1N2Q5MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzTbdO/D5ydw1CMPCQi8QXZ1o8wj
CiWL5dJ+rSU/igJVrs7mMJ6w5JxA5ASLpKXvg6y+OBa/AqSyMi1UKf7OE7cdzfUe
SbzANVWpJ+j9kAVOKG9PzLketDCGjuhXFg2UK7vfNGEKfJ05z79mlCK/K+M7yAzl
8ArlQ06s6GCmLFgeQSnPX20PzBt25UqMnYv4hUNMUUbVg4qVRDF0tlxNZZdnDUv2
sF/b4XztktABULrQEBP5hX9UqNlFP9WoYaDWapHcWFWA9Lx6pFBOeP9wKPfyPoJg
igJVb572m9/S8NHPsqbmA2cinql3DCNdEUb2ew2grsJpO82TcyE9v7LEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3uH0eYXtSrmZq3EMkwapnlfZKKMB8GA1UdIwQY
MBaAFDmdwTYZqrp/IizqywXxu6xZvTqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTkt
MDAzMmZkYzU0NTBiLzEvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTktMDAzMmZkYzU0NTBi
LzEvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2jgy9HE
saybzsiXPY8w7ICGes0LRX+QdIw7dBSdrzru89pK+8IOxMdxKbbjRNlPT7lFY/On
Mt9XGwXLgryqkeXCYfsA/pJ4Wlh5ooUdgKp4bwIkyHo5+swMje4Rr3CkN7JxUuNA
R0GBHr+HbBTaHvbnsztsizRPTKNI6WogoGQyYnr0wGbvSLp7RLAokDT1ppuPb/EC
9Z4q+WMkUbbrxIHYF7MTr96m5tMC5EbEFvd7QrCDEJmgyiqs2yh1lOWaDXikXG9y
M1/t43LUlv3/hSxL+rBpoBTuMfphlSbxT2UJnORJTaqb+/N2jby2OX9rtuMAiAMT
Ba9IFd0XL/bolA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:01 2026 by rpki-client