Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: YQP5jTc5e4YgpIwI5oQunUTHCqS9afuQB2Ht8072mJ0=
Subject key identifier: 4A:A4:CF:35:6A:B5:EA:78:14:D9:89:7E:86:B2:8C:18:88:5C:9E:6B
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019F85321A9428B97C707E7FA32FBAED0D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 1066
Signing time: Tue 21 Jul 2026 15:01:20 +0000
Manifest this update: Tue 21 Jul 2026 15:01:20 +0000
Manifest next update: Wed 22 Jul 2026 15:01:20 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: hrakvWZx4kFQWOtrkiMFqpd0mmf9AvGbzA93cCLTdhk=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:32:1a:94:28:b9:7c:70:7e:7f:a3:2f:ba:ed:0d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 21 15:01:20 2026 GMT
Not After : Jul 22 15:01:20 2026 GMT
Subject: CN=4aa4cf356ab5ea7814d9897e86b28c18885c9e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:3b:f5:ae:1c:dd:af:e8:9c:4e:a6:02:c2:
35:e7:97:09:25:da:39:6e:cb:50:dd:6a:fa:d0:0a:
c7:c3:98:26:a6:28:f0:71:5e:11:08:5a:bf:ef:ba:
e0:ce:4f:0a:c1:e7:30:10:27:c6:50:4e:45:7a:69:
43:00:cd:30:9e:0b:8c:d9:64:21:43:1d:89:d7:05:
aa:7b:b8:93:89:99:14:6b:fe:d6:ab:15:75:f9:6f:
a8:92:d5:20:58:96:5a:63:a6:5f:b6:90:aa:b2:0b:
18:01:e7:89:59:d0:6e:f8:03:56:a4:a6:3f:91:8a:
3f:28:4f:7c:06:bd:17:55:f4:be:ec:e1:6c:74:ab:
3b:bf:92:ab:0c:00:04:15:17:5d:3d:e4:c8:c7:62:
6c:1b:53:d9:b6:2d:67:e0:e3:ef:a1:c2:a8:c6:32:
ae:9a:3b:1c:95:9d:75:c5:a6:fc:40:40:f6:93:87:
e3:7d:82:0a:db:45:a0:2a:35:b8:42:c7:95:c0:d8:
ff:50:a6:c6:10:87:fa:51:0f:6a:b4:b9:af:de:75:
81:3e:ea:bc:75:6c:94:61:3a:b5:04:09:5a:a3:c5:
43:1f:3f:33:86:4f:16:43:a4:4d:91:9d:bd:8f:12:
d0:c0:35:c8:2b:4f:b3:aa:d7:bb:b0:3a:0c:69:90:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:CF:35:6A:B5:EA:78:14:D9:89:7E:86:B2:8C:18:88:5C:9E:6B
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e9:99:17:7d:9a:a3:a1:00:eb:ac:41:5d:75:05:5a:24:67:
ac:4c:06:76:1d:13:34:85:5a:c0:05:84:c1:ca:1d:3c:18:56:
52:f3:00:86:7f:1c:e2:b8:7b:86:a4:aa:88:98:55:86:80:9d:
19:49:49:be:21:e9:e8:61:13:89:6c:e0:2b:87:9d:81:e5:e2:
5d:87:5d:f6:54:29:61:32:15:4b:d2:b3:1a:47:5f:3a:29:98:
79:b3:09:1e:d1:e8:dc:e5:e6:06:11:de:f6:41:17:da:ea:2f:
12:b5:5a:fe:f3:ba:df:5c:12:4a:cb:cd:13:9d:6e:6a:f4:fb:
c0:83:64:f7:4d:b0:2e:71:bb:41:fc:81:8c:33:f5:03:b2:34:
2c:81:db:bd:f2:1c:55:40:c9:84:ab:54:10:dc:e8:9e:c4:e3:
18:c3:68:79:58:a0:15:08:79:c4:b5:13:1b:61:92:b5:cd:17:
ea:ce:1d:db:f8:d5:9c:1e:ff:78:08:b6:6f:f8:fa:c4:61:48:
da:79:94:cf:19:2b:1d:6d:ee:3f:70:54:5b:bd:70:a4:a9:2e:
4c:3e:12:fa:cd:7d:1e:a9:f1:39:9d:99:1d:9e:04:0b:55:55:
44:bb:ee:c1:e1:22:5b:0e:f4:88:b1:e5:95:71:92:09:05:98:
45:cd:44:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMhqUKLl8cH5/oy+67Q0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy
ZDFkNTIwHhcNMjYwNzIxMTUwMTIwWhcNMjYwNzIyMTUwMTIwWjAzMTEwLwYDVQQD
Eyg0YWE0Y2YzNTZhYjVlYTc4MTRkOTg5N2U4NmIyOGMxODg4NWM5ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O479a4c3a/onE6mAsI155cJJdo5
bstQ3Wr60ArHw5gmpijwcV4RCFq/77rgzk8KwecwECfGUE5FemlDAM0wnguM2WQh
Qx2J1wWqe7iTiZkUa/7WqxV1+W+oktUgWJZaY6ZftpCqsgsYAeeJWdBu+ANWpKY/
kYo/KE98Br0XVfS+7OFsdKs7v5KrDAAEFRddPeTIx2JsG1PZti1n4OPvocKoxjKu
mjsclZ11xab8QED2k4fjfYIK20WgKjW4QseVwNj/UKbGEIf6UQ9qtLmv3nWBPuq8
dWyUYTq1BAlao8VDHz8zhk8WQ6RNkZ29jxLQwDXIK0+zqte7sDoMaZA2hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqkzzVqtep4FNmJfoayjBiIXJ5rMB8GA1UdIwQY
MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt
ODc2YTlkNzYyOWY2LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2
LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEemZF32a
o6EA66xBXXUFWiRnrEwGdh0TNIVawAWEwcodPBhWUvMAhn8c4rh7hqSqiJhVhoCd
GUlJviHp6GETiWzgK4edgeXiXYdd9lQpYTIVS9KzGkdfOimYebMJHtHo3OXmBhHe
9kEX2uovErVa/vO631wSSsvNE51uavT7wINk902wLnG7QfyBjDP1A7I0LIHbvfIc
VUDJhKtUENzonsTjGMNoeVigFQh5xLUTG2GStc0X6s4d2/jVnB7/eAi2b/j6xGFI
2nmUzxkrHW3uP3BUW71wpKkuTD4S+s19HqnxOZ2ZHZ4EC1VVRLvuweEiWw70iLHl
lXGSCQWYRc1ExA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:51 2026 by rpki-client