Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: +vndhPEdwH995TnloDKBilbFEcC/BiGbKvnPo7AnOZ4=
Subject key identifier: D2:F5:49:C5:06:90:84:3B:CD:D0:8E:D5:C1:2C:66:7C:2C:6A:69:3F
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 01A08A8C245E911C9D1C276C974F22C8B8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 19D8
Signing time: Thu 10 Sep 2026 09:00:35 +0000
Manifest this update: Thu 10 Sep 2026 09:00:35 +0000
Manifest next update: Fri 11 Sep 2026 09:00:35 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: /+fqhiQA+15n6Rz9OB7Ku0Hy+CD/p+WBCa5hboUoG/k=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:24:5e:91:1c:9d:1c:27:6c:97:4f:22:c8:b8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Sep 10 09:00:35 2026 GMT
Not After : Sep 11 09:00:35 2026 GMT
Subject: CN=d2f549c50690843bcdd08ed5c12c667c2c6a693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:c5:fe:e1:7d:00:c9:0f:e4:5f:c5:38:46:
84:98:af:e0:9a:7d:9f:6b:dd:2b:97:34:86:60:37:
c0:99:a0:d7:4f:f0:a5:a2:8f:35:f9:99:39:b4:8e:
66:a1:57:98:04:5c:f1:b8:d6:04:63:4f:e1:34:d3:
e4:96:94:e1:41:ba:6c:5f:3d:82:32:9c:19:0a:f1:
7b:83:47:9b:4e:c7:b0:4a:7b:fd:8e:30:b6:2e:1f:
a2:4c:45:c6:53:19:db:4c:45:57:88:af:61:e7:dc:
4c:20:3a:4d:b1:4f:09:ba:72:55:73:76:f2:bd:ba:
42:0b:79:6a:16:e8:57:91:27:22:72:a7:8f:a8:73:
3b:a9:61:cf:3f:b9:30:7d:e3:b8:c2:db:47:05:fc:
b3:14:9e:ed:0a:2f:05:f1:35:36:69:81:24:f1:b0:
cb:2e:dd:51:4f:ea:4c:4d:6c:c4:3a:0b:bd:b0:87:
84:01:83:36:63:3d:c8:48:1d:eb:e5:4e:d5:d0:75:
95:29:d4:43:45:8e:50:32:59:cc:f4:a3:3a:e8:7c:
f3:6c:82:8b:4a:4f:34:2f:65:26:73:d8:45:d5:64:
c4:22:1c:08:76:3f:3e:64:e2:92:63:65:0a:34:e7:
df:19:c4:a6:42:40:7a:12:e1:a0:52:cb:f2:b5:b0:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:49:C5:06:90:84:3B:CD:D0:8E:D5:C1:2C:66:7C:2C:6A:69:3F
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:ab:2b:27:8c:b2:62:32:26:35:78:e1:58:61:de:d2:6b:
5d:ce:ce:52:f3:2e:cd:3c:aa:e1:08:e6:78:21:89:40:6a:8b:
4e:b0:23:47:e3:d2:5e:bb:a3:a2:81:5f:2f:26:52:da:69:f4:
4f:7e:49:dd:0a:df:ff:54:b9:60:82:ce:f4:c7:6d:8d:44:64:
4d:ff:0b:e0:cd:80:c5:18:f3:4b:16:1c:8a:77:4f:4e:64:9b:
f5:09:77:f2:a4:9d:5b:42:a0:c0:22:13:8f:cd:2e:76:8e:78:
41:0e:f8:cb:ea:8f:0e:eb:25:18:b0:62:fe:de:12:0b:fc:fb:
3e:03:3b:e5:84:05:35:57:f2:ba:7c:38:c0:79:23:01:8b:bb:
e6:aa:8d:51:7e:b1:fe:4f:9c:c9:da:a2:9e:82:d3:08:60:cf:
d1:f4:d1:1f:89:fd:d4:23:68:0e:09:81:02:3a:2a:7e:2f:31:
84:77:ef:ce:ce:21:ca:ea:8f:2d:26:9d:fc:84:4c:89:4d:f7:
61:56:56:38:71:29:60:2c:e9:a2:fa:b6:f3:8d:5e:9e:ff:d5:
df:c1:1e:8d:ee:8b:36:ab:51:20:9e:9a:56:24:ad:83:50:82:
c0:38:ed:6f:d2:45:2a:81:68:b6:a1:5c:5c:9c:0c:0d:c9:e6:
88:13:01:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjCRekRydHCdsl08iyLi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzliNDM1YTNjZmVmZTdjMzNhODRiMjJmNjAzMzAwOWE1
MjI1YzcwHhcNMjYwOTEwMDkwMDM1WhcNMjYwOTExMDkwMDM1WjAzMTEwLwYDVQQD
EyhkMmY1NDljNTA2OTA4NDNiY2RkMDhlZDVjMTJjNjY3YzJjNmE2OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XXF/uF9AMkP5F/FOEaEmK/gmn2f
a90rlzSGYDfAmaDXT/Cloo81+Zk5tI5moVeYBFzxuNYEY0/hNNPklpThQbpsXz2C
MpwZCvF7g0ebTsewSnv9jjC2Lh+iTEXGUxnbTEVXiK9h59xMIDpNsU8JunJVc3by
vbpCC3lqFuhXkScicqePqHM7qWHPP7kwfeO4wttHBfyzFJ7tCi8F8TU2aYEk8bDL
Lt1RT+pMTWzEOgu9sIeEAYM2Yz3ISB3r5U7V0HWVKdRDRY5QMlnM9KM66HzzbIKL
Sk80L2Umc9hF1WTEIhwIdj8+ZOKSY2UKNOffGcSmQkB6EuGgUsvytbA4bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNL1ScUGkIQ7zdCO1cEsZnwsamk/MB8GA1UdIwQY
MBaAFDl5tDWjz+/nwzqEsi9gMwCaUiXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83M2E3MWUtNDQ2ZC00MWZmLWFhYmYt
ZDViYzIzOWY2YTk4LzEvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83M2E3MWUtNDQ2ZC00MWZmLWFhYmYtZDViYzIzOWY2YTk4
LzEvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHurKyeM
smIyJjV44Vhh3tJrXc7OUvMuzTyq4QjmeCGJQGqLTrAjR+PSXrujooFfLyZS2mn0
T35J3Qrf/1S5YILO9MdtjURkTf8L4M2AxRjzSxYcindPTmSb9Ql38qSdW0KgwCIT
j80udo54QQ74y+qPDuslGLBi/t4SC/z7PgM75YQFNVfyunw4wHkjAYu75qqNUX6x
/k+cydqinoLTCGDP0fTRH4n91CNoDgmBAjoqfi8xhHfvzs4hyuqPLSad/IRMiU33
YVZWOHEpYCzpovq2841env/V38Eeje6LNqtRIJ6aViStg1CCwDjtb9JFKoFotqFc
XJwMDcnmiBMBUg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:00 2026 by rpki-client