Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: AHjvApyzVzfUOFk+MbqC4P1fCNPTHnHR5zrnYDOlxX8=
Subject key identifier: CD:FE:A8:2C:F5:DE:68:A4:C2:C0:F1:78:3F:A8:3B:69:B2:E7:C6:DC
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019FABD1985EEEEFEC6939688B6A07BBAB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 107A
Signing time: Wed 29 Jul 2026 03:01:07 +0000
Manifest this update: Wed 29 Jul 2026 03:01:07 +0000
Manifest next update: Thu 30 Jul 2026 03:01:07 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: qhOTPIbXA0U6TENd0pOCV3eenVdGho1VZZMUckuYk/0=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:98:5e:ee:ef:ec:69:39:68:8b:6a:07:bb:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 29 03:01:07 2026 GMT
Not After : Jul 30 03:01:07 2026 GMT
Subject: CN=cdfea82cf5de68a4c2c0f1783fa83b69b2e7c6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:de:b2:0d:41:09:a1:de:65:d5:53:0e:55:
00:a5:07:fc:2c:e5:86:e6:4d:76:3f:ca:37:22:a6:
dd:ba:d9:c0:60:e9:7d:cd:be:c8:84:81:71:8c:3c:
01:9a:f0:69:cd:b7:e6:84:ba:6a:c9:47:b7:9b:b6:
5d:f8:63:9c:49:02:25:db:4f:8c:1f:77:ac:d4:a2:
b5:b7:d9:2e:1b:27:6e:be:4e:14:bb:ff:26:f5:e4:
3a:22:fd:ac:16:94:e2:b5:ef:b2:48:56:d1:65:34:
c2:42:5b:fb:00:01:96:a6:de:93:d4:17:f1:5a:af:
97:bf:32:4f:dd:82:fd:f9:4a:44:50:9f:80:a5:16:
42:39:c5:2c:d8:33:4e:05:eb:68:35:43:da:40:86:
8e:5a:88:ee:29:6e:04:a7:38:d2:52:45:b6:81:d8:
b0:0b:b8:b0:81:ba:44:6d:e4:fc:f0:cf:a4:5c:90:
9e:dc:18:c7:49:fe:b3:aa:1e:4f:52:5c:1f:69:e8:
51:b2:8d:c2:63:44:18:76:3f:d4:92:fc:f0:41:23:
24:73:1c:21:5e:59:dc:bd:8d:b5:29:5b:68:6c:8b:
2f:dc:8a:c9:e2:9d:1b:29:87:e0:f2:12:4f:07:21:
1d:7e:bc:83:3f:f5:e0:6a:be:b6:39:1f:6f:5b:ac:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:A8:2C:F5:DE:68:A4:C2:C0:F1:78:3F:A8:3B:69:B2:E7:C6:DC
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:be:05:92:b8:fd:ff:d6:d7:24:32:5b:01:e3:ac:dc:81:
60:9f:c8:8e:45:e3:07:9d:f9:31:e0:f3:2e:a0:0d:32:3c:8f:
94:0b:9a:0d:5e:27:a4:89:8f:c4:49:59:25:cc:3b:13:1c:64:
b8:9a:e0:df:31:06:2c:f5:2a:e3:ab:65:27:0d:9e:8d:ef:e0:
a5:c2:d3:3c:64:76:0f:68:33:44:b5:80:2e:b0:77:f4:b8:6a:
9e:25:df:9d:37:57:c2:a3:a0:75:8e:62:5c:3a:1c:5f:7c:53:
e2:ea:0c:11:dd:b3:d0:c2:57:41:b4:b4:2a:9f:42:c0:ba:04:
d3:39:7d:ca:da:34:0a:30:8f:6e:b1:ec:9d:a5:42:d0:7a:e9:
a1:cb:35:60:0c:4d:e1:bd:6a:f1:be:e0:1d:af:03:f4:35:73:
e1:c6:6b:9f:9a:3e:4a:c5:34:55:1f:7b:a8:28:70:3e:1e:a0:
54:3f:e9:85:ce:b5:f9:f6:bb:47:f6:09:00:82:e3:72:3e:23:
f8:8a:98:47:6e:d0:67:43:6c:a4:d8:27:5b:d3:04:92:15:14:
5d:01:46:4e:ba:c8:77:99:d5:27:c2:3b:57:61:48:86:2c:51:
09:2d:01:10:72:26:a3:fc:1e:87:7a:d6:b3:32:ad:1c:6f:eb:
71:50:fe:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0Zhe7u/saTloi2oHu6uEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy
ZDFkNTIwHhcNMjYwNzI5MDMwMTA3WhcNMjYwNzMwMDMwMTA3WjAzMTEwLwYDVQQD
EyhjZGZlYTgyY2Y1ZGU2OGE0YzJjMGYxNzgzZmE4M2I2OWIyZTdjNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluPesg1BCaHeZdVTDlUApQf8LOWG
5k12P8o3IqbdutnAYOl9zb7IhIFxjDwBmvBpzbfmhLpqyUe3m7Zd+GOcSQIl20+M
H3es1KK1t9kuGyduvk4Uu/8m9eQ6Iv2sFpTite+ySFbRZTTCQlv7AAGWpt6T1Bfx
Wq+XvzJP3YL9+UpEUJ+ApRZCOcUs2DNOBetoNUPaQIaOWojuKW4EpzjSUkW2gdiw
C7iwgbpEbeT88M+kXJCe3BjHSf6zqh5PUlwfaehRso3CY0QYdj/UkvzwQSMkcxwh
XlncvY21KVtobIsv3IrJ4p0bKYfg8hJPByEdfryDP/Xgar62OR9vW6y+kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3+qCz13mikwsDxeD+oO2my58bcMB8GA1UdIwQY
MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt
ODc2YTlkNzYyOWY2LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2
LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxK+BZK4
/f/W1yQyWwHjrNyBYJ/IjkXjB535MeDzLqANMjyPlAuaDV4npImPxElZJcw7Exxk
uJrg3zEGLPUq46tlJw2eje/gpcLTPGR2D2gzRLWALrB39LhqniXfnTdXwqOgdY5i
XDocX3xT4uoMEd2z0MJXQbS0Kp9CwLoE0zl9yto0CjCPbrHsnaVC0Hrpocs1YAxN
4b1q8b7gHa8D9DVz4cZrn5o+SsU0VR97qChwPh6gVD/phc61+fa7R/YJAILjcj4j
+IqYR27QZ0NspNgnW9MEkhUUXQFGTrrId5nVJ8I7V2FIhixRCS0BEHImo/weh3rW
szKtHG/rcVD+CA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:50 2026 by rpki-client