Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
File: oYM1MM41ev8SGjHmyY4f6RM7sCM.mft (raw, json)
Hash identifier: mU2SmIcwe7Uj3WLsvyWf55/OqdovyhWCRObpsPsv+MQ=
Subject key identifier: 16:DC:E2:B9:FC:53:1F:F5:04:A0:3B:14:E3:ED:83:5A:8F:74:30:94
Authority key identifier: A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
Certificate issuer: /CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Certificate serial: 019F85D6DA61F234C044CAC787D8D9DB91C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:18 +0000
Manifest this update: Tue 21 Jul 2026 18:01:18 +0000
Manifest next update: Wed 22 Jul 2026 18:01:18 +0000
Files and hashes: 1: oYM1MM41ev8SGjHmyY4f6RM7sCM.crl (hash: kJow9XLIss9HJIhipkA8UaLc9qaKn9SLzwae6B58q2Q=)
2: vZuspMqoseBbPHNG2fmOMxJAoRk.roa (hash: O8Akdsdgsu3O3BLQ4nDzeqQ7DRsdv1T4urleIjReCIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:da:61:f2:34:c0:44:ca:c7:87:d8:d9:db:91:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Validity
Not Before: Jul 21 18:01:18 2026 GMT
Not After : Jul 22 18:01:18 2026 GMT
Subject: CN=16dce2b9fc531ff504a03b14e3ed835a8f743094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:a5:fa:92:95:8b:04:3d:46:f0:fa:26:5c:
c9:bd:8e:63:86:f4:2e:25:25:e8:f2:e6:c0:09:e2:
b1:73:fe:4a:bd:b2:4f:d8:b8:a9:1e:c0:16:cf:8f:
d9:57:08:31:74:c9:e0:6f:4c:fb:da:96:5e:b4:c6:
1e:e4:29:b8:d8:c4:96:42:57:a6:f4:a3:b8:22:02:
c3:ba:7d:4e:8d:2d:84:05:70:3b:14:c9:6d:e0:3f:
5f:3a:c3:e3:ee:d1:56:fe:94:6d:16:db:07:e1:96:
42:ea:d2:fd:2a:ea:ea:1b:86:94:6e:d6:b8:d8:1e:
f8:26:20:58:91:48:df:fd:ac:90:1c:6a:ca:d4:b0:
aa:f2:e7:ae:35:77:62:c0:73:be:47:c7:29:2f:ec:
29:19:3f:51:b7:e7:29:27:91:72:6d:7a:83:7e:df:
2c:e7:92:1f:81:c4:c5:c7:49:9f:41:79:f3:ee:43:
4c:de:83:8a:ce:40:6c:cf:19:44:92:71:cd:e2:c6:
a4:a1:7d:fc:d2:ea:80:8c:73:3e:73:0a:95:ea:06:
df:39:2c:ae:15:a0:1f:c1:7d:cf:5e:ac:53:03:7d:
60:88:10:07:9a:bc:77:ca:42:c7:1e:83:ca:6b:aa:
56:9e:d9:a9:f0:1a:5a:14:20:8e:67:5b:7c:40:cd:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:E2:B9:FC:53:1F:F5:04:A0:3B:14:E3:ED:83:5A:8F:74:30:94
X509v3 Authority Key Identifier:
keyid:A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:56:6a:1a:ff:04:1d:58:e5:65:d2:b4:1f:fc:fc:b3:98:b6:
c9:87:6a:a0:76:00:c7:06:3a:79:37:09:90:b7:c9:ea:e1:f1:
62:f2:47:af:62:60:71:2a:84:ff:89:69:63:49:69:56:e4:7b:
39:e8:1c:30:74:f3:ce:7e:f6:ef:f9:99:8d:9c:cc:2f:fb:c0:
24:e4:f5:35:59:72:14:ad:bd:7e:e7:c8:08:07:e9:04:07:9e:
e9:e6:73:0f:56:d6:d2:d5:df:63:57:37:dd:76:95:74:fb:8e:
a1:5a:56:75:e9:5e:71:cc:f1:1e:ea:ac:a7:21:c0:a2:91:c4:
3e:5d:de:4b:21:58:83:f4:af:4f:6d:87:7a:82:c8:5f:52:52:
ec:70:79:23:d9:c9:27:7d:b2:5f:86:be:8e:ed:d8:c6:66:28:
d9:be:cd:1c:0c:7d:10:70:10:ec:98:47:8d:eb:b2:78:8b:79:
29:9a:53:bc:09:b6:c3:ee:68:a0:c3:36:68:54:89:d9:07:56:
da:8a:49:f4:fc:53:76:65:14:1b:24:0f:a4:b5:2b:b3:82:90:
5d:6f:26:47:a1:05:3a:61:27:e3:4e:d0:bd:d8:dd:37:64:bc:
70:85:48:55:29:a2:72:e6:93:a1:76:fe:ef:e8:8b:7a:47:0e:
d9:48:fb:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1tph8jTARMrHh9jZ25HEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODMzNTMwY2UzNTdhZmYxMjFhMzFlNmM5OGUxZmU5MTMz
YmIwMjMwHhcNMjYwNzIxMTgwMTE4WhcNMjYwNzIyMTgwMTE4WjAzMTEwLwYDVQQD
EygxNmRjZTJiOWZjNTMxZmY1MDRhMDNiMTRlM2VkODM1YThmNzQzMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sql+pKViwQ9RvD6JlzJvY5jhvQu
JSXo8ubACeKxc/5KvbJP2LipHsAWz4/ZVwgxdMngb0z72pZetMYe5Cm42MSWQlem
9KO4IgLDun1OjS2EBXA7FMlt4D9fOsPj7tFW/pRtFtsH4ZZC6tL9KurqG4aUbta4
2B74JiBYkUjf/ayQHGrK1LCq8ueuNXdiwHO+R8cpL+wpGT9Rt+cpJ5FybXqDft8s
55IfgcTFx0mfQXnz7kNM3oOKzkBszxlEknHN4sakoX380uqAjHM+cwqV6gbfOSyu
FaAfwX3PXqxTA31giBAHmrx3ykLHHoPKa6pWntmp8BpaFCCOZ1t8QM3fkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbc4rn8Ux/1BKA7FOPtg1qPdDCUMB8GA1UdIwQY
MBaAFKGDNTDONXr/Ehox5smOH+kTO7AjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lNMU1NNDFldjhTR2pIbXlZNGY2Uk03c0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt
NzFhMjdlZjgxNzg2LzEvb1lNMU1NNDFldjhTR2pIbXlZNGY2Uk03c0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2
LzEvb1lNMU1NNDFldjhTR2pIbXlZNGY2Uk03c0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1ZqGv8E
HVjlZdK0H/z8s5i2yYdqoHYAxwY6eTcJkLfJ6uHxYvJHr2JgcSqE/4lpY0lpVuR7
OegcMHTzzn727/mZjZzML/vAJOT1NVlyFK29fufICAfpBAee6eZzD1bW0tXfY1c3
3XaVdPuOoVpWdelecczxHuqspyHAopHEPl3eSyFYg/SvT22HeoLIX1JS7HB5I9nJ
J32yX4a+ju3YxmYo2b7NHAx9EHAQ7JhHjeuyeIt5KZpTvAm2w+5ooMM2aFSJ2QdW
2opJ9PxTdmUUGyQPpLUrs4KQXW8mR6EFOmEn407QvdjdN2S8cIVIVSmicuaToXb+
7+iLekcO2Uj7gg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:50 2026 by rpki-client