Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
File: oHkxBpr_ycmd5RjIJgYOGctHWmo.mft (raw, json)
Hash identifier: ZPhdHc7tBve7M38IVwFcwKNVWG4oQ3OvXem7qB2xm18=
Subject key identifier: CD:1F:F6:B9:CA:3E:5B:73:F7:5D:58:04:B8:FB:6D:16:BE:4A:44:F6
Authority key identifier: A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
Certificate issuer: /CN=a07931069affc9c99de518c826060e19cb475a6a
Certificate serial: 019FA1BBFFF53D7E57A369637A7A670936C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
Manifest number: 0178
Signing time: Mon 27 Jul 2026 04:01:20 +0000
Manifest this update: Mon 27 Jul 2026 04:01:20 +0000
Manifest next update: Tue 28 Jul 2026 04:01:20 +0000
Files and hashes: 1: 2nCCDGIY-zgjtBGd6Ratic4BUZk.roa (hash: ypGUracRtSQozaYCuAAYU3ve4jp+TLuRdz+sdn4iE+c=)
2: oHkxBpr_ycmd5RjIJgYOGctHWmo.crl (hash: pnUEErfdOYbgycVU8Aenc2g7sD388dHlyUwbQHRU/AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:ff:f5:3d:7e:57:a3:69:63:7a:7a:67:09:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07931069affc9c99de518c826060e19cb475a6a
Validity
Not Before: Jul 27 04:01:20 2026 GMT
Not After : Jul 28 04:01:20 2026 GMT
Subject: CN=cd1ff6b9ca3e5b73f75d5804b8fb6d16be4a44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:b1:da:20:ce:04:21:ac:78:33:ef:2d:8e:
98:19:66:b2:2c:f5:65:23:5e:14:c3:6a:a5:15:43:
73:f7:4d:22:7b:38:32:e1:01:a6:d2:d2:a8:88:89:
3d:74:06:25:02:0e:14:4b:88:5f:ed:71:c1:36:6b:
4b:dd:ff:8c:ff:e7:52:77:d8:af:57:d4:50:d1:b5:
42:d1:82:d9:b5:62:a0:2d:5d:e1:3b:b4:9d:f4:e2:
44:59:13:ba:71:09:36:07:f8:61:8f:e3:20:44:e1:
27:ec:4f:be:db:0a:f8:06:87:33:79:f9:45:28:6b:
a7:3d:81:39:72:64:58:af:5d:8f:26:f3:27:e1:cc:
aa:23:7b:7f:01:50:52:ea:cf:ee:e7:97:7b:b9:f5:
e6:a5:9e:41:25:c4:74:45:89:95:b7:01:9e:b8:f4:
0f:e4:79:58:46:62:9a:77:6e:87:ef:c9:01:2f:be:
1f:3e:e5:49:8c:78:b6:38:20:f7:07:52:c6:f0:e3:
92:7f:a7:28:90:0b:e5:a4:5b:41:2c:bb:99:c3:9d:
90:7e:ab:4e:0d:30:d3:85:89:4a:a7:08:5b:a2:75:
ce:44:10:68:08:73:67:4d:4e:88:6b:ef:85:07:25:
66:43:a1:64:e5:85:d9:0f:ed:e7:d9:25:db:a2:83:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:F6:B9:CA:3E:5B:73:F7:5D:58:04:B8:FB:6D:16:BE:4A:44:F6
X509v3 Authority Key Identifier:
keyid:A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:b7:27:a6:f0:bb:c7:ca:84:4a:d0:1f:1c:9a:d0:61:8a:
31:0d:1b:bc:3c:47:a0:34:a7:7c:01:76:36:60:e1:4e:76:bb:
72:a5:ee:03:03:2f:1a:1f:16:e3:78:b7:46:2f:de:f8:b1:bd:
57:68:13:e5:e5:43:65:b1:5f:b8:c1:e0:ca:fb:9c:6c:65:9c:
de:50:a0:55:b8:1c:0b:f0:c5:75:27:b6:73:8a:27:d8:6d:07:
61:fa:d8:53:6c:a3:7e:7c:e5:3f:e6:c8:cb:74:b5:91:12:63:
1c:85:1c:83:57:e5:3e:ec:12:b9:86:9e:54:25:12:7e:22:11:
5e:b5:ec:9a:43:65:6b:be:39:9b:a2:e9:91:2d:ea:56:79:6d:
44:33:16:3b:23:95:6e:33:68:ed:49:42:7e:5d:96:5c:a4:9a:
d6:ae:0f:1c:55:a1:17:dd:0c:1e:79:9b:60:81:bc:63:ce:1b:
fa:3f:b6:65:47:aa:34:13:80:9a:da:d9:34:8d:c0:3f:4b:8a:
22:2b:ec:6a:62:69:68:40:9e:b8:53:d6:c9:f5:14:7c:6f:30:
36:87:d5:df:36:e1:cf:9d:48:34:b5:d7:4a:28:fb:fa:41:a8:
ea:3b:2e:5a:c2:90:83:e5:4e:0a:b3:2f:c5:aa:59:e7:41:91:
7e:53:15:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu//1PX5Xo2ljenpnCTbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzkzMTA2OWFmZmM5Yzk5ZGU1MThjODI2MDYwZTE5Y2I0
NzVhNmEwHhcNMjYwNzI3MDQwMTIwWhcNMjYwNzI4MDQwMTIwWjAzMTEwLwYDVQQD
EyhjZDFmZjZiOWNhM2U1YjczZjc1ZDU4MDRiOGZiNmQxNmJlNGE0NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiax2iDOBCGseDPvLY6YGWayLPVl
I14Uw2qlFUNz900iezgy4QGm0tKoiIk9dAYlAg4US4hf7XHBNmtL3f+M/+dSd9iv
V9RQ0bVC0YLZtWKgLV3hO7Sd9OJEWRO6cQk2B/hhj+MgROEn7E++2wr4BoczeflF
KGunPYE5cmRYr12PJvMn4cyqI3t/AVBS6s/u55d7ufXmpZ5BJcR0RYmVtwGeuPQP
5HlYRmKad26H78kBL74fPuVJjHi2OCD3B1LG8OOSf6cokAvlpFtBLLuZw52QfqtO
DTDThYlKpwhbonXORBBoCHNnTU6Ia++FByVmQ6Fk5YXZD+3n2SXbooM/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0f9rnKPltz911YBLj7bRa+SkT2MB8GA1UdIwQY
MBaAFKB5MQaa/8nJneUYyCYGDhnLR1pqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hreEJwcl95Y21kNVJqSUpnWU9HY3RIV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MjRkMDYtODcwZi00YjRkLWFkNzUt
MTU4NzZkOTUyMjc1LzEvb0hreEJwcl95Y21kNVJqSUpnWU9HY3RIV21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MjRkMDYtODcwZi00YjRkLWFkNzUtMTU4NzZkOTUyMjc1
LzEvb0hreEJwcl95Y21kNVJqSUpnWU9HY3RIV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo23J6bw
u8fKhErQHxya0GGKMQ0bvDxHoDSnfAF2NmDhTna7cqXuAwMvGh8W43i3Ri/e+LG9
V2gT5eVDZbFfuMHgyvucbGWc3lCgVbgcC/DFdSe2c4on2G0HYfrYU2yjfnzlP+bI
y3S1kRJjHIUcg1flPuwSuYaeVCUSfiIRXrXsmkNla745m6LpkS3qVnltRDMWOyOV
bjNo7UlCfl2WXKSa1q4PHFWhF90MHnmbYIG8Y84b+j+2ZUeqNBOAmtrZNI3AP0uK
IivsamJpaECeuFPWyfUUfG8wNofV3zbhz51INLXXSij7+kGo6jsuWsKQg+VOCrMv
xapZ50GRflMV7Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:01 2026 by rpki-client