Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: +8zSt0h7ZGjGdwJLmIFLRXdxWEtdLBQ4zVl2V7N8Ll0=
Subject key identifier: 37:AC:F1:D2:1F:0D:A7:9E:8E:A9:FE:1A:96:4B:8C:40:AC:FE:79:D7
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019FCD147325BFBC2BFE5980740563C396F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 112A
Signing time: Tue 04 Aug 2026 14:01:37 +0000
Manifest this update: Tue 04 Aug 2026 14:01:37 +0000
Manifest next update: Wed 05 Aug 2026 14:01:37 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 1zpkb4f+f623mGiz4yAivI67HjJKPbKF7ey4SE2hu+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:14:73:25:bf:bc:2b:fe:59:80:74:05:63:c3:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Aug 4 14:01:37 2026 GMT
Not After : Aug 5 14:01:37 2026 GMT
Subject: CN=37acf1d21f0da79e8ea9fe1a964b8c40acfe79d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:cf:25:b2:c4:fc:af:2b:d0:eb:35:97:d6:
51:0d:8e:fa:b9:4a:ea:96:3b:2c:68:97:c3:86:16:
3a:10:82:04:e6:74:b2:9e:e2:27:89:4f:51:12:48:
2d:5d:52:44:20:ab:ed:64:68:61:88:c5:65:e6:f0:
83:90:f5:a3:04:12:f1:7e:f2:62:89:3a:b8:9e:d5:
62:7b:53:04:98:43:bc:5e:c7:18:4e:2c:43:5e:9e:
1f:c6:2f:72:9d:31:b1:97:5e:b0:3a:33:56:9a:d2:
2a:44:b8:70:05:29:fb:bb:fe:e9:91:c8:0c:c0:c8:
7f:50:cf:02:df:e6:b8:eb:42:d3:6a:c5:bb:7f:b2:
7a:f2:f3:22:f1:15:7a:38:ec:e1:23:80:fa:fd:07:
3d:3f:6d:17:3f:a9:33:a2:ed:65:62:e7:c0:ef:b0:
72:8b:49:d8:2d:e0:89:08:bd:67:d3:0c:6d:d1:62:
e9:17:e0:96:24:1f:f0:c3:69:fa:d1:c5:2b:d1:1c:
15:65:e8:57:05:01:01:3e:6a:3b:46:8c:23:76:23:
bc:2b:da:dd:f7:96:e7:db:6f:42:aa:ca:dd:a8:75:
5c:ad:f3:bf:1e:c3:a3:29:b4:d2:44:a6:03:1c:71:
c7:83:6e:7f:a7:3e:21:4f:d3:96:33:4e:23:c7:40:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:F1:D2:1F:0D:A7:9E:8E:A9:FE:1A:96:4B:8C:40:AC:FE:79:D7
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2e:48:87:89:47:48:93:31:32:1f:b7:98:3a:58:64:53:04:
2b:6c:d6:6f:8e:8f:85:25:d4:39:a0:df:db:36:8b:ae:53:4f:
24:ef:89:6f:54:29:61:37:ec:71:ba:c9:d1:aa:b8:e6:4c:6e:
07:93:6b:45:c4:f7:ee:f1:c3:7d:6b:84:03:2d:44:cb:35:f5:
06:53:e2:ad:82:cc:86:a6:7d:39:da:f5:e9:e5:01:26:99:3e:
94:87:bd:ed:2d:0d:32:19:d6:eb:69:a4:98:17:2a:36:03:f2:
44:1e:fa:a0:9c:00:6f:88:54:4b:74:4d:93:53:03:29:c7:8c:
31:47:4c:e3:82:1d:35:14:9d:26:7c:5f:25:7d:e2:35:86:62:
7c:3b:55:90:bf:7d:70:d3:94:7e:66:a5:1b:03:df:ba:6c:1f:
74:3b:51:45:91:6a:47:09:7f:eb:b6:14:43:c4:ef:fc:3f:fd:
de:e2:7e:71:fe:fd:80:ff:96:26:90:dc:6b:5c:fe:ed:54:2f:
b0:8b:db:54:65:a1:1b:cd:d4:eb:c4:c9:94:c0:99:e2:61:c9:
4c:35:df:13:26:d3:82:a2:72:b9:0d:94:e0:25:49:72:d2:82:
c2:09:b5:be:a0:e5:bd:46:e9:e3:82:d1:ba:d8:b5:dc:56:16:
7c:a8:74:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/NFHMlv7wr/lmAdAVjw5bxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjYwODA0MTQwMTM3WhcNMjYwODA1MTQwMTM3WjAzMTEwLwYDVQQD
EygzN2FjZjFkMjFmMGRhNzllOGVhOWZlMWE5NjRiOGM0MGFjZmU3OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5PPJbLE/K8r0Os1l9ZRDY76uUrq
ljssaJfDhhY6EIIE5nSynuIniU9REkgtXVJEIKvtZGhhiMVl5vCDkPWjBBLxfvJi
iTq4ntVie1MEmEO8XscYTixDXp4fxi9ynTGxl16wOjNWmtIqRLhwBSn7u/7pkcgM
wMh/UM8C3+a460LTasW7f7J68vMi8RV6OOzhI4D6/Qc9P20XP6kzou1lYufA77By
i0nYLeCJCL1n0wxt0WLpF+CWJB/ww2n60cUr0RwVZehXBQEBPmo7RowjdiO8K9rd
95bn229CqsrdqHVcrfO/HsOjKbTSRKYDHHHHg25/pz4hT9OWM04jx0CQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDes8dIfDaeejqn+GpZLjECs/nnXMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi5Ih4lH
SJMxMh+3mDpYZFMEK2zWb46PhSXUOaDf2zaLrlNPJO+Jb1QpYTfscbrJ0aq45kxu
B5NrRcT37vHDfWuEAy1EyzX1BlPirYLMhqZ9Odr16eUBJpk+lIe97S0NMhnW62mk
mBcqNgPyRB76oJwAb4hUS3RNk1MDKceMMUdM44IdNRSdJnxfJX3iNYZifDtVkL99
cNOUfmalGwPfumwfdDtRRZFqRwl/67YUQ8Tv/D/93uJ+cf79gP+WJpDca1z+7VQv
sIvbVGWhG83U68TJlMCZ4mHJTDXfEybTgqJyuQ2U4CVJctKCwgm1vqDlvUbp44LR
uti13FYWfKh01g==
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:17:25 2026 by rpki-client