Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: lBRU5xksa7vPLDeZN+dcsSNzFJ+WZiHqD4EgytufGwE=
Subject key identifier: D5:87:B5:44:93:2F:43:C7:31:10:D9:AD:D2:7A:31:C7:F1:15:CF:30
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019FA2CDD4900E223828EEBE61597974A2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 1960
Signing time: Mon 27 Jul 2026 09:00:26 +0000
Manifest this update: Mon 27 Jul 2026 09:00:26 +0000
Manifest next update: Tue 28 Jul 2026 09:00:26 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: 5vENhQ3RBCEF7rGcaZAQX3JzIb/7g9VrGMWG5qflZ/k=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:d4:90:0e:22:38:28:ee:be:61:59:79:74:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Jul 27 09:00:26 2026 GMT
Not After : Jul 28 09:00:26 2026 GMT
Subject: CN=d587b544932f43c73110d9add27a31c7f115cf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:d0:0a:b7:88:08:8f:82:8b:4f:38:7c:27:
38:1e:63:5b:7a:f8:b2:60:22:36:09:79:b3:43:73:
da:00:88:73:b3:fd:45:a6:9e:2e:cc:a2:ab:11:4b:
e9:ec:95:41:f7:28:11:dd:46:f3:ad:29:74:d2:61:
1d:08:9c:25:ea:61:1e:dd:93:7b:a0:04:87:a2:36:
01:e2:22:42:30:53:f8:66:6f:93:25:76:19:3a:5d:
fc:33:bc:64:0e:af:66:f3:24:f3:8c:cb:c8:35:f2:
04:bc:30:f2:f7:41:01:71:ba:8e:7a:47:15:c9:05:
cd:07:8f:e0:f0:5d:f4:4d:24:21:87:57:c1:4b:71:
8e:e7:13:0b:c1:6f:d3:1b:ab:cc:16:cb:ef:9e:f1:
95:8d:61:e6:cf:e0:d8:76:64:91:c3:f9:bf:a3:0e:
5f:2e:e9:e6:29:f5:8c:2b:87:c0:07:5e:71:49:7e:
e6:e9:de:85:77:ae:8e:46:e1:c9:8f:b1:91:1a:b9:
91:5c:e9:53:92:b2:e7:16:72:f6:70:5d:cb:4f:1a:
fa:15:31:fc:4e:15:d5:28:d6:fd:83:98:09:7d:66:
33:79:39:ae:0c:a0:5f:4a:36:04:4a:79:27:1f:bb:
91:4c:84:f9:eb:76:e4:52:04:d5:98:fb:94:f8:99:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:87:B5:44:93:2F:43:C7:31:10:D9:AD:D2:7A:31:C7:F1:15:CF:30
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fd:16:ed:2d:fc:37:af:5f:ca:05:b8:8a:83:cf:34:31:cd:
3b:3a:a3:7a:5e:f2:03:07:8f:c8:8b:25:89:f3:da:6c:07:49:
a0:e1:4f:90:64:a8:c8:d6:ff:4e:a3:75:95:85:b4:78:eb:76:
80:af:b2:7c:c2:d7:16:a1:20:53:22:94:84:de:e0:24:c8:56:
1f:c5:fa:67:dc:2f:02:bb:34:20:f8:10:90:69:28:30:12:02:
d9:c6:32:aa:82:7c:1d:dd:76:bd:f2:a4:d9:cd:df:c9:6c:77:
59:20:cb:dc:d1:5a:c0:18:0f:a6:22:0f:d9:28:56:8e:4e:dd:
86:8a:99:b8:c2:35:a1:50:fc:f5:5c:8c:06:7f:c8:3d:cb:9b:
13:9c:f6:ca:71:39:c7:0c:a2:25:f1:5f:b9:51:50:96:76:31:
33:f9:fd:b1:29:f6:52:00:28:a4:bc:c3:50:0f:57:72:ea:44:
6c:f4:d5:ab:d4:01:8b:fc:7f:87:06:7f:06:b8:7a:01:4a:7d:
b7:03:16:40:75:03:e8:0a:e9:11:92:ec:62:c2:96:89:79:a8:
78:dc:f8:65:86:b7:04:a5:d9:c8:5f:18:91:64:74:cd:e9:d2:
1b:ed:7c:8b:37:95:07:51:77:05:00:63:d3:e8:90:94:ed:c9:
d1:d0:cc:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izdSQDiI4KO6+YVl5dKLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzliNDM1YTNjZmVmZTdjMzNhODRiMjJmNjAzMzAwOWE1
MjI1YzcwHhcNMjYwNzI3MDkwMDI2WhcNMjYwNzI4MDkwMDI2WjAzMTEwLwYDVQQD
EyhkNTg3YjU0NDkzMmY0M2M3MzExMGQ5YWRkMjdhMzFjN2YxMTVjZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhjQCreICI+Ci084fCc4HmNbeviy
YCI2CXmzQ3PaAIhzs/1Fpp4uzKKrEUvp7JVB9ygR3UbzrSl00mEdCJwl6mEe3ZN7
oASHojYB4iJCMFP4Zm+TJXYZOl38M7xkDq9m8yTzjMvINfIEvDDy90EBcbqOekcV
yQXNB4/g8F30TSQhh1fBS3GO5xMLwW/TG6vMFsvvnvGVjWHmz+DYdmSRw/m/ow5f
LunmKfWMK4fAB15xSX7m6d6Fd66ORuHJj7GRGrmRXOlTkrLnFnL2cF3LTxr6FTH8
ThXVKNb9g5gJfWYzeTmuDKBfSjYESnknH7uRTIT563bkUgTVmPuU+JkqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWHtUSTL0PHMRDZrdJ6McfxFc8wMB8GA1UdIwQY
MBaAFDl5tDWjz+/nwzqEsi9gMwCaUiXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83M2E3MWUtNDQ2ZC00MWZmLWFhYmYt
ZDViYzIzOWY2YTk4LzEvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83M2E3MWUtNDQ2ZC00MWZmLWFhYmYtZDViYzIzOWY2YTk4
LzEvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv0W7S38
N69fygW4ioPPNDHNOzqjel7yAwePyIslifPabAdJoOFPkGSoyNb/TqN1lYW0eOt2
gK+yfMLXFqEgUyKUhN7gJMhWH8X6Z9wvArs0IPgQkGkoMBIC2cYyqoJ8Hd12vfKk
2c3fyWx3WSDL3NFawBgPpiIP2ShWjk7dhoqZuMI1oVD89VyMBn/IPcubE5z2ynE5
xwyiJfFfuVFQlnYxM/n9sSn2UgAopLzDUA9XcupEbPTVq9QBi/x/hwZ/Brh6AUp9
twMWQHUD6ArpEZLsYsKWiXmoeNz4ZYa3BKXZyF8YkWR0zenSG+18izeVB1F3BQBj
0+iQlO3J0dDMGg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:25:01 2026 by rpki-client