Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: QfZlapBQMYxmOSvP5wVlr9IZqoAZR1yKoYVfv+4JXQc=
Subject key identifier: 9F:5D:4E:76:1A:9E:C1:F6:1E:83:6D:5F:9F:9C:26:E8:B5:1E:EB:10
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019F83434F691FB368ABB0C83E29695F095E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 012F
Signing time: Tue 21 Jul 2026 06:00:54 +0000
Manifest this update: Tue 21 Jul 2026 06:00:54 +0000
Manifest next update: Wed 22 Jul 2026 06:00:54 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: j/cl3+KYqPxaLq8Ip+KSWa2T8ece/dVj+HcTSK+A+EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:4f:69:1f:b3:68:ab:b0:c8:3e:29:69:5f:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Jul 21 06:00:54 2026 GMT
Not After : Jul 22 06:00:54 2026 GMT
Subject: CN=9f5d4e761a9ec1f61e836d5f9f9c26e8b51eeb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:b5:03:20:ff:53:be:76:0c:77:aa:91:3b:
ab:a6:de:82:2d:af:b5:f3:93:dc:19:6d:87:35:9e:
f9:50:8b:3b:64:4b:1e:db:e2:88:c1:16:72:ed:58:
6c:ac:e0:1c:ad:e0:4a:9e:08:e1:d5:d6:a1:ee:c9:
88:c6:9d:70:90:0d:60:2d:49:41:de:24:a9:d0:15:
32:55:97:05:80:90:e4:25:4d:8a:c1:7a:c4:9e:aa:
89:ac:f2:82:6e:24:db:ae:22:ea:4c:1c:76:53:31:
be:35:5c:b4:07:b2:3f:a7:3b:96:6f:a8:ea:76:4a:
9f:6b:41:51:d1:2c:64:1f:ea:c6:cf:a7:c4:cc:f4:
07:98:34:90:69:da:cb:59:bc:b5:dd:5c:28:47:18:
5c:f4:e0:9a:f8:54:4d:14:3c:60:50:75:ae:f9:1d:
70:12:58:95:d8:43:48:75:7a:29:4e:88:cd:14:1f:
21:cc:e9:48:7c:49:26:3a:0b:26:e1:e1:64:d7:a8:
f4:49:9d:6c:b7:9e:d5:83:aa:a9:f8:64:dd:14:85:
1e:67:fd:99:a8:26:33:ed:e4:8d:7a:cd:aa:aa:ff:
60:39:a4:ee:6c:29:9f:cb:8f:08:17:d2:6d:4e:80:
0e:6b:4d:31:0a:3d:b0:a9:1c:bf:8c:a4:0b:39:06:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:4E:76:1A:9E:C1:F6:1E:83:6D:5F:9F:9C:26:E8:B5:1E:EB:10
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:74:39:5d:13:b9:f0:33:3c:18:a5:8f:38:81:2d:b9:9c:a2:
9e:1f:0c:03:98:5a:63:04:97:bd:80:0a:06:c0:5e:37:a4:90:
9f:fe:53:71:ab:1a:3c:7a:d5:bd:08:0a:b9:9d:5a:b1:fe:7b:
3b:7c:cd:71:56:d5:de:59:b8:e2:55:b4:6a:82:f9:63:eb:5c:
28:f8:27:e6:17:db:94:6e:2d:26:48:a5:da:f1:95:8d:14:06:
da:74:61:ca:db:cc:df:b6:e4:5b:84:83:7e:b2:51:e4:75:13:
e2:d9:5a:e2:dc:ac:d2:f3:35:61:e9:b7:34:6e:1b:1d:e6:64:
90:db:d6:54:fb:2b:2a:34:07:3a:c1:74:51:96:73:77:aa:9b:
84:c3:06:f3:ca:24:c5:0b:8c:e5:c4:15:0e:ac:bc:db:e1:1b:
29:04:16:ae:35:92:2c:d7:7b:90:35:9d:0d:35:2d:17:33:ef:
72:8c:59:c7:17:90:f9:9c:50:2c:66:8d:6a:27:e4:3e:03:1b:
dc:51:3b:40:f7:19:33:93:fa:23:41:e9:28:2d:3d:64:74:0f:
f6:57:9b:51:af:04:0d:99:a4:78:f9:f8:85:5d:13:bd:9a:e1:
49:72:c2:d7:82:69:c4:2f:18:37:68:13:08:85:d1:71:66:52:
3f:c2:58:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DQ09pH7Noq7DIPilpXwleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNmJkMzA4Zjc0MzI4OGFmNGNjMjExOTk3M2VjOGRjMDI4
OTM3ZjAwHhcNMjYwNzIxMDYwMDU0WhcNMjYwNzIyMDYwMDU0WjAzMTEwLwYDVQQD
Eyg5ZjVkNGU3NjFhOWVjMWY2MWU4MzZkNWY5ZjljMjZlOGI1MWVlYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpS1AyD/U752DHeqkTurpt6CLa+1
85PcGW2HNZ75UIs7ZEse2+KIwRZy7VhsrOAcreBKngjh1dah7smIxp1wkA1gLUlB
3iSp0BUyVZcFgJDkJU2KwXrEnqqJrPKCbiTbriLqTBx2UzG+NVy0B7I/pzuWb6jq
dkqfa0FR0SxkH+rGz6fEzPQHmDSQadrLWby13VwoRxhc9OCa+FRNFDxgUHWu+R1w
EliV2ENIdXopTojNFB8hzOlIfEkmOgsm4eFk16j0SZ1st57Vg6qp+GTdFIUeZ/2Z
qCYz7eSNes2qqv9gOaTubCmfy48IF9JtToAOa00xCj2wqRy/jKQLOQZu5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9dTnYansH2HoNtX5+cJui1HusQMB8GA1UdIwQY
MBaAFKBr0wj3QyiK9MwhGZc+yNwCiTfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMWY1MzAtMzk3Ny00OGI4LWFlOGQt
YmE0MWJjMTk2MGQ4LzEvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jMWY1MzAtMzk3Ny00OGI4LWFlOGQtYmE0MWJjMTk2MGQ4
LzEvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnQ5XRO5
8DM8GKWPOIEtuZyinh8MA5haYwSXvYAKBsBeN6SQn/5TcasaPHrVvQgKuZ1asf57
O3zNcVbV3lm44lW0aoL5Y+tcKPgn5hfblG4tJkil2vGVjRQG2nRhytvM37bkW4SD
frJR5HUT4tla4tys0vM1Yem3NG4bHeZkkNvWVPsrKjQHOsF0UZZzd6qbhMMG88ok
xQuM5cQVDqy82+EbKQQWrjWSLNd7kDWdDTUtFzPvcoxZxxeQ+ZxQLGaNaifkPgMb
3FE7QPcZM5P6I0HpKC09ZHQP9lebUa8EDZmkePn4hV0TvZrhSXLC14JpxC8YN2gT
CIXRcWZSP8JYgg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:14:33 2026 by rpki-client