Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: ysw0XsiUH7JRxnEp+poBFgjNXRxrOsnlkcYObOi48j0=
Subject key identifier: D1:E6:B1:F5:94:B1:D5:2D:91:7A:06:17:7E:2B:45:5B:1D:50:23:D9
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019FA9E293D0AE8C2DCFFBB6CA972A36A5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 19E5
Signing time: Tue 28 Jul 2026 18:00:26 +0000
Manifest this update: Tue 28 Jul 2026 18:00:26 +0000
Manifest next update: Wed 29 Jul 2026 18:00:26 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: ohhIzQgeSB4EEcnRfINCvUgxnz+YbOOAhdS1nQKQqP0=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:93:d0:ae:8c:2d:cf:fb:b6:ca:97:2a:36:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jul 28 18:00:26 2026 GMT
Not After : Jul 29 18:00:26 2026 GMT
Subject: CN=d1e6b1f594b1d52d917a06177e2b455b1d5023d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:c7:e0:0b:89:32:06:b5:d4:68:3c:28:45:
80:78:47:d6:a6:0a:d4:ce:89:c6:b8:6b:0b:d3:67:
59:17:ed:a9:c6:ba:f8:e6:cc:95:ee:d7:0f:db:4f:
22:1a:e3:9f:b7:2c:30:5c:70:aa:91:03:ac:bd:8f:
c7:d0:d5:f6:3d:0c:b2:25:77:2e:96:e9:6e:41:21:
d2:54:ed:aa:f9:8e:35:f6:ab:2d:c7:6d:84:07:09:
17:ea:d2:19:3e:82:00:18:8d:fe:d2:a2:70:39:f5:
c7:5f:a6:45:72:2d:0f:77:53:e2:7b:c8:f4:af:bd:
fb:22:1b:03:69:7d:a0:8e:3e:28:82:46:e6:66:6a:
d8:26:bb:a5:92:1f:7f:b2:28:2e:96:1b:9a:ff:18:
9c:78:12:21:fd:bb:90:37:7c:43:29:37:bb:3c:72:
48:28:f7:8e:bf:7e:09:3c:1e:87:27:f1:42:3d:7c:
78:e6:f9:b8:07:03:2c:08:a7:3d:b0:97:f6:a0:c3:
a6:0f:74:b6:b7:ca:d9:84:7c:21:1b:08:1f:fb:ed:
37:1a:21:12:da:2c:a9:7f:ef:32:8a:89:3f:d7:d8:
ed:1a:86:9d:9d:14:53:fd:dc:06:2c:cd:68:34:d0:
eb:3e:23:24:45:ce:52:86:fc:a4:c0:3d:09:9f:68:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:B1:F5:94:B1:D5:2D:91:7A:06:17:7E:2B:45:5B:1D:50:23:D9
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:32:e2:13:46:ba:15:0b:11:ae:9e:2f:e3:18:ee:d7:26:
a2:75:d1:ed:78:20:5c:0b:5f:15:dd:61:b3:7d:5f:bf:ef:6d:
da:10:ef:e4:53:93:31:1d:b0:99:6a:a0:11:1c:e7:4b:ff:d3:
50:ef:cf:2f:58:af:e0:d8:2c:00:c5:47:95:59:97:31:a2:ae:
98:63:63:1e:d6:3b:55:8a:b0:34:c4:d6:05:f6:3e:1b:d3:6c:
d4:fa:8c:a8:43:3b:0a:18:0f:64:c5:9e:5f:bd:b6:e1:be:d9:
d3:69:ef:df:87:ea:c0:d0:52:ed:08:0d:70:40:da:ff:d6:b8:
6c:0b:36:1a:30:49:a0:a3:41:2c:ba:da:f5:cc:50:0f:70:00:
55:27:d3:9c:11:49:85:d9:17:3b:d9:e2:8a:ec:b9:eb:51:e2:
4d:52:60:37:2c:ca:80:56:8a:86:03:1e:b8:64:06:6d:da:b4:
b1:5f:d1:8d:57:e4:bf:33:c6:8f:09:16:3d:5f:2a:f3:03:46:
50:0a:93:7f:06:07:35:d3:03:68:22:e3:3d:12:2c:6a:ff:0d:
e3:b9:b9:17:91:20:b4:a5:4d:b5:d0:d0:b7:89:4c:b5:17:b7:
37:2e:3e:dc:60:73:27:51:b9:2e:9d:07:15:7e:d5:ba:fb:f4:
25:97:ca:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4pPQrowtz/u2ypcqNqXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjYwNzI4MTgwMDI2WhcNMjYwNzI5MTgwMDI2WjAzMTEwLwYDVQQD
EyhkMWU2YjFmNTk0YjFkNTJkOTE3YTA2MTc3ZTJiNDU1YjFkNTAyM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMTH4AuJMga11Gg8KEWAeEfWpgrU
zonGuGsL02dZF+2pxrr45syV7tcP208iGuOftywwXHCqkQOsvY/H0NX2PQyyJXcu
luluQSHSVO2q+Y419qstx22EBwkX6tIZPoIAGI3+0qJwOfXHX6ZFci0Pd1Pie8j0
r737IhsDaX2gjj4ogkbmZmrYJrulkh9/sigulhua/xiceBIh/buQN3xDKTe7PHJI
KPeOv34JPB6HJ/FCPXx45vm4BwMsCKc9sJf2oMOmD3S2t8rZhHwhGwgf++03GiES
2iypf+8yiok/19jtGoadnRRT/dwGLM1oNNDrPiMkRc5ShvykwD0Jn2gQmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHmsfWUsdUtkXoGF34rRVsdUCPZMB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcigy4hNG
uhULEa6eL+MY7tcmonXR7XggXAtfFd1hs31fv+9t2hDv5FOTMR2wmWqgERznS//T
UO/PL1iv4NgsAMVHlVmXMaKumGNjHtY7VYqwNMTWBfY+G9Ns1PqMqEM7ChgPZMWe
X7224b7Z02nv34fqwNBS7QgNcEDa/9a4bAs2GjBJoKNBLLra9cxQD3AAVSfTnBFJ
hdkXO9niiuy561HiTVJgNyzKgFaKhgMeuGQGbdq0sV/RjVfkvzPGjwkWPV8q8wNG
UAqTfwYHNdMDaCLjPRIsav8N47m5F5EgtKVNtdDQt4lMtRe3Ny4+3GBzJ1G5Lp0H
FX7Vuvv0JZfK3Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:05 2026 by rpki-client