
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
File: oLwReyvH4FrFwOs1FaF0GBMP3oI.mft (raw, json)
Hash identifier: uS3D1Z/3DZKNpyDdVIQRc1CITGLjkgoyDT/Os9NgyG0=
Subject key identifier: 59:63:82:1F:7C:6C:E7:C0:55:5F:A8:53:FF:A4:A9:E9:C1:57:C1:28
Authority key identifier: A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
Certificate issuer: /CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Certificate serial: 019FAC76BB786D87AFED8C721C77D77F2B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:29 +0000
Manifest this update: Wed 29 Jul 2026 06:01:29 +0000
Manifest next update: Thu 30 Jul 2026 06:01:29 +0000
Files and hashes: 1: MMGfobkcPvFzzP7MQZnUAsVVZp8.roa (hash: WGW0WSapBDRofWXt8DtNDTEwEorTNTg8AzDt4Ue2MDI=)
2: oLwReyvH4FrFwOs1FaF0GBMP3oI.crl (hash: xES1uQAEQI6SnbuDAQZNCYYSFH0acnTAh7ovG3iMoBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:bb:78:6d:87:af:ed:8c:72:1c:77:d7:7f:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Validity
Not Before: Jul 29 06:01:29 2026 GMT
Not After : Jul 30 06:01:29 2026 GMT
Subject: CN=5963821f7c6ce7c0555fa853ffa4a9e9c157c128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:2d:95:e0:3d:5f:55:8d:3d:9e:5e:82:30:
6e:e1:90:9c:ed:0e:49:37:6d:cc:a2:29:b7:ea:c0:
fa:50:4f:18:4f:ea:0f:44:5b:94:46:f0:e2:79:9b:
cd:0b:7c:b5:d1:4c:82:8c:a0:53:b0:72:36:9c:2c:
7d:6f:11:13:d7:50:80:67:7b:8a:e1:67:2e:68:f1:
63:f4:a0:02:45:0e:df:d3:20:f8:2f:c3:9c:c3:96:
e0:b7:35:b3:33:ee:8b:91:54:79:85:15:be:b3:1f:
4c:08:25:cb:e9:42:de:17:32:c6:42:16:1e:49:16:
cf:67:d5:55:87:79:3d:54:32:f1:43:de:3d:cc:71:
76:e2:4d:48:b5:ed:31:56:75:b1:40:34:94:05:61:
ee:16:0a:98:b6:47:e2:44:ee:f1:5f:97:d3:7e:78:
4f:f8:7d:de:03:af:fd:36:16:0c:7c:5e:c0:6d:39:
ab:c3:fa:af:cb:7e:e8:38:a3:8e:3c:a6:40:a0:e6:
33:75:e5:e4:11:b0:33:87:cb:9d:3f:30:fc:aa:b9:
92:91:d7:c2:d9:ad:6f:17:6a:fd:53:6e:c2:dd:21:
67:d4:c7:a9:9d:4c:87:c6:f4:24:5d:5a:35:4a:7d:
a0:bf:3a:a8:48:f1:41:10:d0:a1:de:23:ac:b9:f1:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:82:1F:7C:6C:E7:C0:55:5F:A8:53:FF:A4:A9:E9:C1:57:C1:28
X509v3 Authority Key Identifier:
keyid:A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:df:05:c6:29:6f:21:75:b3:67:21:0e:1b:8e:95:49:05:
c1:c2:12:01:0d:73:af:11:77:f1:31:fd:b7:6f:31:e3:6a:57:
76:9a:b4:67:ae:49:54:29:b8:b1:eb:70:a7:48:84:01:18:de:
e8:64:03:a9:69:d1:46:36:36:6d:08:b7:77:58:ac:39:b6:fe:
2f:a3:49:3a:1e:c1:49:c1:1f:dd:5b:87:56:c6:c1:c1:d6:af:
3c:d1:1c:a4:62:0d:b0:5c:3c:aa:69:05:bf:10:d7:04:83:ca:
4b:1c:92:c2:1b:90:d4:21:25:fb:a9:7c:bb:c8:11:3b:a1:0f:
ee:4d:9b:64:2a:e3:3a:3e:83:80:e4:87:93:ac:26:0a:04:6e:
0b:1e:9a:8b:8e:fc:67:6a:95:6e:08:29:46:cb:07:6f:ea:2c:
8b:90:c3:75:1c:64:55:f6:aa:e8:4a:27:fb:1d:4a:3c:34:c4:
e8:99:72:8e:ab:6e:05:73:5e:14:2f:9a:34:b3:21:07:86:22:
2f:61:33:8a:a1:dc:d8:6f:1a:40:0c:16:2e:39:86:ff:ed:c1:
07:e6:f0:a2:bb:71:b8:f5:a1:13:8f:dd:2a:2f:90:f9:72:96:
c0:7d:94:76:e2:05:9d:f5:ef:5a:16:70:9a:39:03:cb:c8:d0:
25:a7:63:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdrt4bYev7YxyHHfXfysxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmMxMTdiMmJjN2UwNWFjNWMwZWIzNTE1YTE3NDE4MTMw
ZmRlODIwHhcNMjYwNzI5MDYwMTI5WhcNMjYwNzMwMDYwMTI5WjAzMTEwLwYDVQQD
Eyg1OTYzODIxZjdjNmNlN2MwNTU1ZmE4NTNmZmE0YTllOWMxNTdjMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWUtleA9X1WNPZ5egjBu4ZCc7Q5J
N23Moim36sD6UE8YT+oPRFuURvDieZvNC3y10UyCjKBTsHI2nCx9bxET11CAZ3uK
4WcuaPFj9KACRQ7f0yD4L8Ocw5bgtzWzM+6LkVR5hRW+sx9MCCXL6ULeFzLGQhYe
SRbPZ9VVh3k9VDLxQ949zHF24k1Ite0xVnWxQDSUBWHuFgqYtkfiRO7xX5fTfnhP
+H3eA6/9NhYMfF7AbTmrw/qvy37oOKOOPKZAoOYzdeXkEbAzh8udPzD8qrmSkdfC
2a1vF2r9U27C3SFn1MepnUyHxvQkXVo1Sn2gvzqoSPFBENCh3iOsufH8wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFljgh98bOfAVV+oU/+kqenBV8EoMB8GA1UdIwQY
MBaAFKC8EXsrx+BaxcDrNRWhdBgTD96CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0x3UmV5dkg0RnJGd09zMUZhRjBHQk1QM29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEt
MTljNGZmMTg3N2JiLzEvb0x3UmV5dkg0RnJGd09zMUZhRjBHQk1QM29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEtMTljNGZmMTg3N2Ji
LzEvb0x3UmV5dkg0RnJGd09zMUZhRjBHQk1QM29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC7fBcYp
byF1s2chDhuOlUkFwcISAQ1zrxF38TH9t28x42pXdpq0Z65JVCm4setwp0iEARje
6GQDqWnRRjY2bQi3d1isObb+L6NJOh7BScEf3VuHVsbBwdavPNEcpGINsFw8qmkF
vxDXBIPKSxySwhuQ1CEl+6l8u8gRO6EP7k2bZCrjOj6DgOSHk6wmCgRuCx6ai478
Z2qVbggpRssHb+osi5DDdRxkVfaq6Eon+x1KPDTE6JlyjqtuBXNeFC+aNLMhB4Yi
L2EziqHc2G8aQAwWLjmG/+3BB+bwortxuPWhE4/dKi+Q+XKWwH2UduIFnfXvWhZw
mjkDy8jQJadjww==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:16 2026 by rpki-client