Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: buJzMbV+Ro1xNc5Y6vxIAHyhaBhxjk6cBALYS3q1BZg=
Subject key identifier: A7:19:C9:00:CA:E8:6E:32:2E:47:5D:AB:2C:CA:A9:97:0D:2B:9A:D4
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 019F85D61A663F7379A519E2323E2B0684FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 1143
Signing time: Tue 21 Jul 2026 18:00:28 +0000
Manifest this update: Tue 21 Jul 2026 18:00:28 +0000
Manifest next update: Wed 22 Jul 2026 18:00:28 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: C52Li7avSPP7XT9eFB7/edH98nhgqx1J9W+kkdeFOmo=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:1a:66:3f:73:79:a5:19:e2:32:3e:2b:06:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Jul 21 18:00:28 2026 GMT
Not After : Jul 22 18:00:28 2026 GMT
Subject: CN=a719c900cae86e322e475dab2ccaa9970d2b9ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:12:6b:94:a1:8e:cf:98:e4:bb:99:a5:9d:
85:6d:83:ba:87:b6:7a:ec:27:de:7e:4c:4c:d3:3e:
15:8b:a0:00:b1:86:90:7a:4e:73:bd:4a:03:a7:eb:
c9:b9:ac:cb:e2:80:3a:b4:0f:33:cb:37:1c:56:3d:
63:c0:77:c9:c0:9c:f0:74:e2:fb:b7:d7:91:37:28:
2e:5b:39:a1:d8:2f:7b:96:10:76:fd:fd:1a:c2:66:
d9:a6:45:96:07:14:cb:8d:f4:54:ce:a8:c9:6c:05:
13:50:5a:c0:5f:b6:f9:d0:f5:17:a1:9a:1e:57:db:
91:54:2d:d6:4a:90:2f:67:81:d3:c4:94:4b:a1:3b:
c6:57:75:42:12:d8:06:f0:7b:e1:4b:6f:3a:45:fe:
1b:46:8d:54:07:cc:52:12:be:60:c0:29:ad:33:8d:
df:09:c5:71:20:d1:61:e6:4f:1d:05:99:91:98:dc:
8d:26:e7:10:e8:f7:76:97:e0:dd:39:dc:7c:2f:98:
31:94:79:f2:6a:8d:03:f9:6e:c8:a3:f2:c4:a9:bb:
13:2f:7d:80:45:7f:4c:42:18:13:5f:3e:39:e2:37:
4e:a6:ee:59:ca:59:2c:c4:64:d9:b0:11:a3:2b:b2:
d9:16:93:f6:d2:ff:17:f1:56:a2:47:5e:12:9d:c8:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:C9:00:CA:E8:6E:32:2E:47:5D:AB:2C:CA:A9:97:0D:2B:9A:D4
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:42:f7:55:49:46:04:98:3f:21:c8:83:c5:6d:b4:63:a5:
7a:3f:95:dc:ce:f1:02:61:57:69:78:16:c6:97:67:65:01:67:
6e:af:b3:0e:f8:06:f5:90:60:b3:f3:e2:bc:52:05:31:bf:7a:
1c:f0:8c:64:13:2d:ea:a6:5d:86:85:40:72:23:99:1f:bf:4d:
6a:c8:40:3e:33:af:d8:32:76:f6:ea:79:94:fb:0c:40:46:71:
89:66:5d:71:1c:47:fd:c6:d6:21:8b:42:da:ba:cf:22:40:50:
ad:ac:7b:b7:d7:f7:9f:f1:c1:18:e9:f8:ae:2d:fd:c4:76:c2:
28:2a:e6:ca:70:4e:83:3d:31:a3:ed:77:7d:82:51:db:b0:1f:
16:22:f0:77:c2:9b:54:e4:f9:13:96:4a:0c:0e:9d:9e:0a:72:
d6:51:dd:e6:c3:50:78:18:9a:2b:90:10:f4:92:66:ed:e8:fd:
b6:5d:d3:e8:21:1d:a8:ce:d5:da:26:8f:89:9c:43:42:ec:86:
10:a9:ad:25:c6:4b:c0:d2:66:59:3b:ae:db:5d:96:c8:5b:c7:
04:65:a4:73:42:a5:9e:65:72:59:81:c1:7a:04:80:e7:bc:7e:
98:48:0f:03:ee:95:ad:e8:54:3b:42:90:50:f0:56:3f:31:ae:
29:be:f8:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1hpmP3N5pRniMj4rBoT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OWRjMTM2MTlhYWJhN2YyMjJjZWFjYjA1ZjFiYmFjNTli
ZDNhOWEwHhcNMjYwNzIxMTgwMDI4WhcNMjYwNzIyMTgwMDI4WjAzMTEwLwYDVQQD
EyhhNzE5YzkwMGNhZTg2ZTMyMmU0NzVkYWIyY2NhYTk5NzBkMmI5YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEwSa5Shjs+Y5LuZpZ2FbYO6h7Z6
7CfefkxM0z4Vi6AAsYaQek5zvUoDp+vJuazL4oA6tA8zyzccVj1jwHfJwJzwdOL7
t9eRNyguWzmh2C97lhB2/f0awmbZpkWWBxTLjfRUzqjJbAUTUFrAX7b50PUXoZoe
V9uRVC3WSpAvZ4HTxJRLoTvGV3VCEtgG8HvhS286Rf4bRo1UB8xSEr5gwCmtM43f
CcVxINFh5k8dBZmRmNyNJucQ6Pd2l+DdOdx8L5gxlHnyao0D+W7Io/LEqbsTL32A
RX9MQhgTXz454jdOpu5ZylksxGTZsBGjK7LZFpP20v8X8VaiR14SncimwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcZyQDK6G4yLkddqyzKqZcNK5rUMB8GA1UdIwQY
MBaAFDmdwTYZqrp/IizqywXxu6xZvTqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTkt
MDAzMmZkYzU0NTBiLzEvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTktMDAzMmZkYzU0NTBi
LzEvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWadC91VJ
RgSYPyHIg8VttGOlej+V3M7xAmFXaXgWxpdnZQFnbq+zDvgG9ZBgs/PivFIFMb96
HPCMZBMt6qZdhoVAciOZH79NashAPjOv2DJ29up5lPsMQEZxiWZdcRxH/cbWIYtC
2rrPIkBQrax7t9f3n/HBGOn4ri39xHbCKCrmynBOgz0xo+13fYJR27AfFiLwd8Kb
VOT5E5ZKDA6dngpy1lHd5sNQeBiaK5AQ9JJm7ej9tl3T6CEdqM7V2iaPiZxDQuyG
EKmtJcZLwNJmWTuu212WyFvHBGWkc0KlnmVyWYHBegSA57x+mEgPA+6VrehUO0KQ
UPBWPzGuKb74QA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:47 2026 by rpki-client