Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: vCpSBVL2/GKRtndrQ7YDg3YufAk/fm3tsgJcwDEFBV8=
Subject key identifier: E8:21:8B:6E:CF:BD:2B:BA:56:05:9B:FF:20:AD:F2:3E:87:27:C4:CC
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 019FA9E2E2C43060CFF19F387C960C0A6FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 0116
Signing time: Tue 28 Jul 2026 18:00:46 +0000
Manifest this update: Tue 28 Jul 2026 18:00:46 +0000
Manifest next update: Wed 29 Jul 2026 18:00:46 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: UU2QcUIq0+hzlSI8u5zKKbxqjO3Kvf3YKvLyClKQRbc=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e2:c4:30:60:cf:f1:9f:38:7c:96:0c:0a:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Jul 28 18:00:46 2026 GMT
Not After : Jul 29 18:00:46 2026 GMT
Subject: CN=e8218b6ecfbd2bba56059bff20adf23e8727c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:06:39:cd:cc:86:45:10:40:4b:75:a1:e8:
35:5d:7a:be:8f:2c:af:0f:db:3b:0e:f0:c3:69:a5:
53:da:b7:04:85:8d:9b:21:63:34:2c:a7:56:75:43:
36:e1:80:40:62:aa:c9:d9:ae:21:df:a5:9b:0f:e7:
ed:7c:8d:36:6d:68:8a:fa:53:41:c6:f6:41:7f:b6:
cf:81:60:d2:9d:52:5a:b8:4e:6c:98:26:a0:34:0f:
9d:34:b0:8e:94:5b:b6:89:1b:07:42:65:a7:b0:4b:
4e:f6:b4:eb:cd:4a:77:97:18:0f:8f:c5:13:38:5c:
81:9b:9d:90:ad:f7:d6:b8:69:c6:19:29:c7:09:75:
26:82:39:4b:30:a7:6c:f6:09:9a:0a:db:c2:2c:02:
47:89:d1:74:fe:c2:f4:6a:09:13:26:0b:0a:27:d4:
60:6c:26:f8:91:3b:3b:4f:04:12:d7:48:99:fd:40:
6e:a2:19:1a:86:94:58:84:5c:cf:d4:01:cd:ab:fc:
6d:ec:95:cd:49:43:37:3c:6a:7a:72:f9:93:d8:9f:
93:30:93:14:e5:94:a8:be:a8:49:82:1a:f7:a8:20:
82:5d:1c:4a:d7:01:a9:52:fa:be:f5:9f:af:a7:0a:
5f:36:db:f5:36:2d:69:d1:c0:6c:06:a0:e1:57:a5:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:8B:6E:CF:BD:2B:BA:56:05:9B:FF:20:AD:F2:3E:87:27:C4:CC
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:44:77:c9:d8:8f:02:a2:7d:cc:32:6d:4a:9f:f1:e7:62:
e9:9b:88:48:10:24:b0:ec:87:d9:b6:8d:d7:39:6d:7f:8f:b4:
47:34:2e:4c:ae:a8:29:72:a8:6d:6f:71:10:d4:9f:54:12:bd:
9e:41:f4:bc:02:09:57:14:08:6b:28:ea:81:fe:3e:af:a6:f0:
11:a2:12:13:56:dd:10:1f:69:d4:3c:c5:5a:7f:3e:a8:b5:04:
d3:13:15:ba:90:d9:03:0b:f5:fd:ae:90:88:3e:e7:18:e9:d4:
9d:16:c3:e2:f2:53:5a:77:84:ce:eb:e5:84:bb:f9:29:3c:ce:
50:85:89:1c:31:90:36:d5:11:4a:6a:b4:42:1d:77:f8:94:ae:
ea:2e:f7:ff:10:0c:df:ee:94:7a:7c:dd:24:0b:5a:fc:63:b8:
f6:7b:c8:3e:0e:35:65:4d:06:14:ec:44:8e:1b:f6:62:03:62:
38:29:97:ce:0f:02:72:78:ab:33:1e:f5:0e:d9:da:60:a0:16:
06:3a:b4:d4:6e:9d:de:fa:ad:17:2f:64:91:e9:00:b0:eb:dd:
cc:2b:f7:bc:60:36:4b:f3:16:8a:3d:62:5a:dc:cd:2e:83:e3:
e3:a0:75:62:14:ea:c1:d4:5d:49:fb:ce:a6:24:88:b8:62:66:
a1:b0:e5:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4uLEMGDP8Z84fJYMCm/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzFkN2I5N2EwNzY3NjEyMmY3MmU0NjUwOTFkMjM2MDZh
ZTY2YTIwHhcNMjYwNzI4MTgwMDQ2WhcNMjYwNzI5MTgwMDQ2WjAzMTEwLwYDVQQD
EyhlODIxOGI2ZWNmYmQyYmJhNTYwNTliZmYyMGFkZjIzZTg3MjdjNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXkGOc3MhkUQQEt1oeg1XXq+jyyv
D9s7DvDDaaVT2rcEhY2bIWM0LKdWdUM24YBAYqrJ2a4h36WbD+ftfI02bWiK+lNB
xvZBf7bPgWDSnVJauE5smCagNA+dNLCOlFu2iRsHQmWnsEtO9rTrzUp3lxgPj8UT
OFyBm52QrffWuGnGGSnHCXUmgjlLMKds9gmaCtvCLAJHidF0/sL0agkTJgsKJ9Rg
bCb4kTs7TwQS10iZ/UBuohkahpRYhFzP1AHNq/xt7JXNSUM3PGp6cvmT2J+TMJMU
5ZSovqhJghr3qCCCXRxK1wGpUvq+9Z+vpwpfNtv1Ni1p0cBsBqDhV6UL9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOghi27PvSu6VgWb/yCt8j6HJ8TMMB8GA1UdIwQY
MBaAFKIx17l6B2dhIvcuRlCR0jYGrmaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pIWHVYb0haMkVpOXk1R1VKSFNOZ2F1WnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zNjY2ZWQtMWY4MS00ZmU5LWFhMzIt
NzVjMjkwNjc1NDBhLzEvb2pIWHVYb0haMkVpOXk1R1VKSFNOZ2F1WnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zNjY2ZWQtMWY4MS00ZmU5LWFhMzItNzVjMjkwNjc1NDBh
LzEvb2pIWHVYb0haMkVpOXk1R1VKSFNOZ2F1WnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayZEd8nY
jwKifcwybUqf8edi6ZuISBAksOyH2baN1zltf4+0RzQuTK6oKXKobW9xENSfVBK9
nkH0vAIJVxQIayjqgf4+r6bwEaISE1bdEB9p1DzFWn8+qLUE0xMVupDZAwv1/a6Q
iD7nGOnUnRbD4vJTWneEzuvlhLv5KTzOUIWJHDGQNtURSmq0Qh13+JSu6i73/xAM
3+6UenzdJAta/GO49nvIPg41ZU0GFOxEjhv2YgNiOCmXzg8CcnirMx71DtnaYKAW
Bjq01G6d3vqtFy9kkekAsOvdzCv3vGA2S/MWij1iWtzNLoPj46B1YhTqwdRdSfvO
piSIuGJmobDlQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:35:50 2026 by rpki-client