Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: CscH9lc/wvg4mS+igIhjmaSsKfnZWMJLszoAmeZLJ+g=
Subject key identifier: 3B:7D:55:7C:39:4B:A4:9B:EF:DF:4B:8A:2D:12:6B:1C:F1:CC:DE:83
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019FAB63DBF7BEAA7562E703BAC86DF14C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 19D1
Signing time: Wed 29 Jul 2026 01:01:16 +0000
Manifest this update: Wed 29 Jul 2026 01:01:16 +0000
Manifest next update: Thu 30 Jul 2026 01:01:16 +0000
Files and hashes: 1: 6vVSpTChTKj56P_S9G3QSGEzPpI.roa (hash: oBJVrXqcl3ZmvttgmWCt09AlKEv4UiFRHlZlA6agM0s=)
2: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: QDF93yYmkGAt2nWsiGAsHCMIziIDcg+8PQEQlZueB9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:db:f7:be:aa:75:62:e7:03:ba:c8:6d:f1:4c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Jul 29 01:01:16 2026 GMT
Not After : Jul 30 01:01:16 2026 GMT
Subject: CN=3b7d557c394ba49befdf4b8a2d126b1cf1ccde83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:86:15:5a:06:24:73:97:13:5d:40:fd:02:
2b:89:cb:d7:ed:8c:b4:b8:6f:15:04:5d:21:13:26:
46:f2:f3:d7:b7:23:82:d3:45:29:58:65:d2:bc:a0:
0d:01:2b:39:21:ac:3a:e1:81:cc:c5:41:b4:18:9c:
47:77:59:e2:7d:74:b3:e4:68:79:10:4f:e1:7b:31:
1b:6e:7a:f2:24:68:0c:9f:a3:6f:46:ab:e0:05:0b:
80:64:15:99:88:54:8e:c7:d2:37:d8:57:fb:96:f9:
6f:15:be:8a:5f:ba:20:bd:67:e9:f9:52:ea:9b:18:
95:58:9b:b7:d0:a5:54:a5:15:60:bb:2e:64:95:43:
71:ee:fc:1e:ac:4a:59:7c:e0:1f:51:32:1f:5f:d4:
38:06:3b:7d:5e:44:e8:15:68:bf:7a:fe:e2:4b:c8:
73:b6:78:dd:da:7b:c8:05:24:52:77:ea:58:c1:97:
1c:86:8b:76:ea:a5:91:ac:15:18:b7:68:a4:b0:b0:
7c:e3:78:92:97:43:b1:17:a4:b9:e8:a6:92:38:ab:
d6:34:69:12:fb:84:13:4f:f4:b9:ff:ce:67:99:d0:
7e:47:e2:14:eb:90:1b:82:09:bc:df:d8:75:3f:cb:
24:1d:c8:06:d2:61:64:eb:83:37:9a:c6:92:1c:e2:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:55:7C:39:4B:A4:9B:EF:DF:4B:8A:2D:12:6B:1C:F1:CC:DE:83
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a4:7f:93:4b:2a:46:1a:0b:5c:e6:a1:a0:bc:bf:b4:3c:13:
e9:a7:1a:98:83:3c:69:10:eb:56:73:f6:de:52:0d:21:07:d5:
66:79:e2:7e:fb:9b:98:d0:ff:fa:cc:83:d1:f9:74:97:a2:02:
0f:35:e7:dd:07:93:0f:cd:81:3d:55:6b:9e:8c:66:f8:31:e2:
04:04:08:e3:41:ba:82:48:a8:50:a6:f9:a6:8c:d9:c4:2f:af:
a6:37:7c:b9:08:ef:46:8e:76:25:d6:c1:f7:32:fd:29:06:7d:
ed:df:bd:63:3c:3c:14:41:d5:56:4f:64:07:63:9a:1c:98:0b:
36:f7:48:5b:87:16:e2:a3:53:33:2e:0c:76:1c:e8:30:cb:87:
b1:87:bd:3b:a1:49:43:31:6f:ec:b0:25:03:b6:69:51:e8:9a:
5b:40:9f:f4:f0:03:9b:ed:fe:00:b7:09:fb:d5:0d:11:89:2d:
13:bc:fa:92:02:a8:1d:3d:41:b5:e7:b7:40:1a:e6:c3:41:36:
de:83:04:f9:dc:9d:b1:6c:62:0e:75:ed:20:f7:2c:c7:4c:5e:
1e:7d:8e:f5:2a:db:e1:e6:8d:a1:f9:a0:81:db:9f:15:e4:80:
f8:3a:d9:26:f9:66:7a:9d:b7:cb:c0:39:6b:13:0a:3b:02:7a:
65:34:21:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY9v3vqp1YucDusht8UwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj
NTVhZjkwHhcNMjYwNzI5MDEwMTE2WhcNMjYwNzMwMDEwMTE2WjAzMTEwLwYDVQQD
EygzYjdkNTU3YzM5NGJhNDliZWZkZjRiOGEyZDEyNmIxY2YxY2NkZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BqGFVoGJHOXE11A/QIricvX7Yy0
uG8VBF0hEyZG8vPXtyOC00UpWGXSvKANASs5Iaw64YHMxUG0GJxHd1nifXSz5Gh5
EE/hezEbbnryJGgMn6NvRqvgBQuAZBWZiFSOx9I32Ff7lvlvFb6KX7ogvWfp+VLq
mxiVWJu30KVUpRVguy5klUNx7vwerEpZfOAfUTIfX9Q4Bjt9XkToFWi/ev7iS8hz
tnjd2nvIBSRSd+pYwZcchot26qWRrBUYt2iksLB843iSl0OxF6S56KaSOKvWNGkS
+4QTT/S5/85nmdB+R+IU65Abggm839h1P8skHcgG0mFk64M3msaSHOK9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDt9VXw5S6Sb799Lii0SaxzxzN6DMB8GA1UdIwQY
MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt
Nzg4ZjVhNTgwNDRmLzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm
LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKR/k0sq
RhoLXOahoLy/tDwT6acamIM8aRDrVnP23lINIQfVZnnifvubmND/+syD0fl0l6IC
DzXn3QeTD82BPVVrnoxm+DHiBAQI40G6gkioUKb5pozZxC+vpjd8uQjvRo52JdbB
9zL9KQZ97d+9Yzw8FEHVVk9kB2OaHJgLNvdIW4cW4qNTMy4MdhzoMMuHsYe9O6FJ
QzFv7LAlA7ZpUeiaW0Cf9PADm+3+ALcJ+9UNEYktE7z6kgKoHT1Btee3QBrmw0E2
3oME+dydsWxiDnXtIPcsx0xeHn2O9Srb4eaNofmggdufFeSA+DrZJvlmep23y8A5
axMKOwJ6ZTQhTQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:32 2026 by rpki-client