Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: pvMgbzl/I/m6Aj7L/BlJ2mcXvzjgcbGbagxLdL4BFgE=
Subject key identifier: 4A:E0:71:C4:89:CB:ED:D9:DA:79:8A:4A:7E:EC:97:B2:56:E7:8C:4A
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019FAAF5701324821CA8C490835301A09735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:00:39 +0000
Manifest this update: Tue 28 Jul 2026 23:00:39 +0000
Manifest next update: Wed 29 Jul 2026 23:00:39 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: /G59tggcSzquqgnJpdRgVpQYFKKyNJ2/08/+GBLxSws=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:70:13:24:82:1c:a8:c4:90:83:53:01:a0:97:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Jul 28 23:00:39 2026 GMT
Not After : Jul 29 23:00:39 2026 GMT
Subject: CN=4ae071c489cbedd9da798a4a7eec97b256e78c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:f9:c2:e4:69:06:90:7e:53:de:fb:ea:7d:
de:7d:7a:08:8c:a5:bc:eb:e0:5e:94:84:0c:8d:dc:
ff:f9:b0:86:60:2b:92:1e:f3:5b:a5:d1:77:ac:29:
e7:00:0e:67:4e:0e:6f:0e:52:b2:34:2b:fb:bd:00:
cc:2f:e4:f2:b9:b6:40:27:85:e0:25:8e:5d:35:55:
6b:a3:a1:05:37:33:4e:91:5c:29:f8:30:a3:23:3b:
45:fc:87:a7:11:e9:d4:f2:e9:21:0a:16:e0:52:ee:
3d:d8:c9:c7:0e:db:3e:6a:57:76:5f:73:47:d4:d0:
0b:9d:85:1b:60:63:41:72:60:b7:ff:7b:b2:5d:c0:
4e:46:52:b3:05:9a:5e:6b:44:b3:e0:1b:c1:db:88:
1b:59:1c:0c:85:4f:0c:6e:92:d4:6f:f3:4c:e4:ca:
39:9d:2f:d5:07:18:0f:1f:2f:f2:25:ce:f4:03:3a:
39:09:bf:e9:8e:9f:d8:b3:e6:52:2a:93:68:20:88:
1d:5d:81:6e:d0:da:14:70:f3:2e:e1:62:ac:59:8f:
e4:f7:e5:19:c8:fb:47:44:20:4e:f3:96:f6:fa:b0:
44:52:9b:a0:51:86:50:1f:0c:57:a1:2e:81:fc:bb:
b6:06:ab:f3:fd:3c:f8:fb:19:48:8d:c3:c0:24:af:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:71:C4:89:CB:ED:D9:DA:79:8A:4A:7E:EC:97:B2:56:E7:8C:4A
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:24:87:dd:9a:8f:c3:7d:ba:9f:d8:b3:95:09:1e:eb:b4:
ec:c9:68:1b:a0:90:05:f1:38:f9:79:3a:e4:51:32:63:be:52:
e3:64:f7:5c:a2:0a:2c:71:b3:13:1e:e2:13:38:7e:ca:3b:7c:
db:d6:e9:23:52:7b:f3:c3:df:fb:1f:9d:78:31:bc:52:c0:42:
6e:74:7f:f2:70:f5:1b:74:f9:35:74:9f:3c:0b:10:eb:3c:a8:
28:3a:14:97:fb:a7:0d:d4:75:f2:9a:e7:52:1d:c1:42:5f:13:
2f:62:8c:c2:aa:1b:18:ac:49:53:d2:63:68:1f:0c:c2:1b:7a:
b3:aa:b7:2d:b6:c9:6d:2a:ef:76:b2:49:8a:15:fc:e3:69:be:
50:75:12:43:cb:a0:8e:35:c5:57:b5:07:eb:98:38:56:e9:7c:
0b:b3:90:8d:bb:d2:66:15:f2:84:b2:44:38:92:af:d6:04:0f:
88:f6:42:33:d2:ad:ac:8a:5d:f6:03:ad:45:b1:3f:48:ee:47:
d3:d0:ae:fc:8c:72:c0:57:7d:a5:4e:c7:58:be:ad:cf:56:23:
af:ca:30:64:16:83:12:d4:4e:c4:f4:37:94:9f:71:3a:fa:c4:
23:e4:92:22:5b:6f:6f:99:fe:1a:27:e6:af:46:ca:ee:07:ff:
da:b0:1d:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9XATJIIcqMSQg1MBoJc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm
NDEzNTIwHhcNMjYwNzI4MjMwMDM5WhcNMjYwNzI5MjMwMDM5WjAzMTEwLwYDVQQD
Eyg0YWUwNzFjNDg5Y2JlZGQ5ZGE3OThhNGE3ZWVjOTdiMjU2ZTc4YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJD5wuRpBpB+U9776n3efXoIjKW8
6+BelIQMjdz/+bCGYCuSHvNbpdF3rCnnAA5nTg5vDlKyNCv7vQDML+TyubZAJ4Xg
JY5dNVVro6EFNzNOkVwp+DCjIztF/IenEenU8ukhChbgUu492MnHDts+ald2X3NH
1NALnYUbYGNBcmC3/3uyXcBORlKzBZpea0Sz4BvB24gbWRwMhU8MbpLUb/NM5Mo5
nS/VBxgPHy/yJc70Azo5Cb/pjp/Ys+ZSKpNoIIgdXYFu0NoUcPMu4WKsWY/k9+UZ
yPtHRCBO85b2+rBEUpugUYZQHwxXoS6B/Lu2Bqvz/Tz4+xlIjcPAJK8CtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErgccSJy+3Z2nmKSn7sl7JW54xKMB8GA1UdIwQY
MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt
YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz
LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2Ekh92a
j8N9up/Ys5UJHuu07MloG6CQBfE4+Xk65FEyY75S42T3XKIKLHGzEx7iEzh+yjt8
29bpI1J788Pf+x+deDG8UsBCbnR/8nD1G3T5NXSfPAsQ6zyoKDoUl/unDdR18prn
Uh3BQl8TL2KMwqobGKxJU9JjaB8Mwht6s6q3LbbJbSrvdrJJihX842m+UHUSQ8ug
jjXFV7UH65g4Vul8C7OQjbvSZhXyhLJEOJKv1gQPiPZCM9KtrIpd9gOtRbE/SO5H
09Cu/IxywFd9pU7HWL6tz1Yjr8owZBaDEtROxPQ3lJ9xOvrEI+SSIltvb5n+Gifm
r0bK7gf/2rAdEg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:53:24 2026 by rpki-client