Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: 40pO1KS0cyS06qN0v5JZcOlEaPnDaDdrYoahJhPCkDY=
Subject key identifier: BB:BB:DC:63:60:B4:2E:32:11:EF:28:8B:59:12:7C:AF:8E:A9:E4:62
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019FA14DCA00BE62C67C72ACE15D12E97FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 02:00:57 +0000
Manifest this update: Mon 27 Jul 2026 02:00:57 +0000
Manifest next update: Tue 28 Jul 2026 02:00:57 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: 6EnQYnJorj0SIi77eleXQIFqZ5z8A0VVCfcvOjb53xE=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ca:00:be:62:c6:7c:72:ac:e1:5d:12:e9:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Jul 27 02:00:57 2026 GMT
Not After : Jul 28 02:00:57 2026 GMT
Subject: CN=bbbbdc6360b42e3211ef288b59127caf8ea9e462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:25:2b:cc:3a:8c:e0:b5:14:5c:4f:f3:5d:
a3:2a:15:bb:fd:d0:be:c7:1a:9f:d4:f4:6e:65:be:
ff:df:5f:d6:ee:ae:92:d8:19:9b:eb:5b:cb:81:3a:
9e:7a:f4:db:d5:e8:ed:c3:64:51:a2:d8:bf:f9:53:
7b:40:57:42:dc:4a:9b:18:cd:30:fa:d0:c5:76:14:
53:3f:52:4f:44:03:a3:33:47:d1:f8:98:19:64:c1:
4c:b0:46:e0:8a:cf:86:df:dc:db:31:b8:2a:28:58:
c4:2c:b4:2f:f7:97:85:bf:d9:56:85:8d:72:96:40:
b5:42:13:e6:27:86:5a:b4:1e:ce:45:65:fc:de:d0:
35:72:48:6a:26:a5:09:75:42:65:42:96:b3:8f:e8:
ea:5e:d3:d4:b2:59:14:13:4d:40:89:c0:09:ab:2e:
3e:29:32:3b:af:4a:c7:17:bb:ed:0b:57:e1:1e:34:
db:32:ed:69:63:fe:99:05:72:50:0a:a1:d8:08:a7:
c3:2c:fe:30:80:2e:d1:0d:de:a4:e1:6a:6e:d5:35:
26:60:c6:e2:4a:29:c2:df:73:29:bf:ea:9c:64:6e:
f1:30:65:d8:c9:4d:a4:4b:95:7c:98:3b:83:85:87:
03:fb:e4:22:91:51:d2:83:6c:ee:f9:6c:a3:b2:da:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:DC:63:60:B4:2E:32:11:EF:28:8B:59:12:7C:AF:8E:A9:E4:62
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:a2:e0:f7:06:8a:e1:35:c7:7f:55:21:d8:5e:e2:a7:70:
9b:8a:9f:13:dd:97:ce:00:26:b6:5b:dc:8c:f6:94:49:9d:83:
25:3f:d8:93:a0:8e:6c:97:b3:61:17:dc:c8:ff:9a:32:8c:8f:
2d:81:53:bc:69:b9:4c:f8:7a:ec:ea:2d:63:75:f1:08:14:b5:
4f:bc:fe:de:c3:94:40:8a:33:61:92:26:26:66:2f:15:27:64:
c8:51:e7:03:97:71:5f:76:69:a3:7f:f5:12:78:8b:05:6d:7f:
f3:ab:25:1a:71:ae:10:6d:4d:99:c9:1c:fb:f0:ea:8e:99:88:
4d:17:bc:82:7b:bf:8d:2c:34:39:e5:39:bf:1d:37:e9:45:d6:
98:aa:75:25:18:3b:4c:0a:03:20:bf:8d:fe:32:ca:74:c7:51:
02:55:49:15:98:ad:79:89:3c:b2:4f:92:4d:1d:ac:ea:06:c8:
8d:78:32:15:96:e2:a6:63:69:63:f4:1f:de:34:97:00:5f:2a:
2a:5d:a9:bb:b7:83:37:c3:da:5e:e9:07:20:b6:52:96:7b:a9:
7f:47:c6:80:78:f9:b4:38:55:86:86:19:37:4e:1d:7d:53:1a:
24:9f:c8:f0:3e:22:97:85:cb:cb:aa:2d:3b:50:0f:ac:6d:ec:
eb:6f:cc:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTcoAvmLGfHKs4V0S6X+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm
NDEzNTIwHhcNMjYwNzI3MDIwMDU3WhcNMjYwNzI4MDIwMDU3WjAzMTEwLwYDVQQD
EyhiYmJiZGM2MzYwYjQyZTMyMTFlZjI4OGI1OTEyN2NhZjhlYTllNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJklK8w6jOC1FFxP812jKhW7/dC+
xxqf1PRuZb7/31/W7q6S2Bmb61vLgTqeevTb1ejtw2RRoti/+VN7QFdC3EqbGM0w
+tDFdhRTP1JPRAOjM0fR+JgZZMFMsEbgis+G39zbMbgqKFjELLQv95eFv9lWhY1y
lkC1QhPmJ4ZatB7ORWX83tA1ckhqJqUJdUJlQpazj+jqXtPUslkUE01AicAJqy4+
KTI7r0rHF7vtC1fhHjTbMu1pY/6ZBXJQCqHYCKfDLP4wgC7RDd6k4Wpu1TUmYMbi
SinC33Mpv+qcZG7xMGXYyU2kS5V8mDuDhYcD++QikVHSg2zu+WyjstqUuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu73GNgtC4yEe8oi1kSfK+OqeRiMB8GA1UdIwQY
MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt
YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz
LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0ei4PcG
iuE1x39VIdhe4qdwm4qfE92XzgAmtlvcjPaUSZ2DJT/Yk6CObJezYRfcyP+aMoyP
LYFTvGm5TPh67OotY3XxCBS1T7z+3sOUQIozYZImJmYvFSdkyFHnA5dxX3Zpo3/1
EniLBW1/86slGnGuEG1Nmckc+/DqjpmITRe8gnu/jSw0OeU5vx036UXWmKp1JRg7
TAoDIL+N/jLKdMdRAlVJFZiteYk8sk+STR2s6gbIjXgyFZbipmNpY/Qf3jSXAF8q
Kl2pu7eDN8PaXukHILZSlnupf0fGgHj5tDhVhoYZN04dfVMaJJ/I8D4il4XLy6ot
O1APrG3s62/MvA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:32 2026 by rpki-client